Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138332e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3138332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          rP5YTQFpDOupjwt9mTEVLD40vDwpD96GGfHpC+xPgnc=
Subject key identifier:   B3:63:C0:B9:4D:AC:ED:9F:40:9A:61:5F:70:1E:A4:85:7B:D1:05:2E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       67964C9B0E0A946C1BF3139C2F12CF5F92DF97BC
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:41 +0000
ROA not before:           Wed 29 Sep 2021 23:55:41 +0000
ROA not after:            Fri 30 Sep 2022 00:00:41 +0000
asID:                     17451
IP address blocks:        112.78.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:96:4c:9b:0e:0a:94:6c:1b:f3:13:9c:2f:12:cf:5f:92:df:97:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:41 2021 GMT
            Not After : Sep 30 00:00:41 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:9c:7b:d0:d8:1e:79:64:bc:0a:6c:4e:60:
                    26:c9:2a:65:54:86:71:bc:33:97:5e:3b:03:06:99:
                    9a:55:cf:11:ee:19:a6:f2:11:9d:e1:88:d7:7e:a9:
                    35:8e:e7:2f:1d:e1:28:6a:b8:e4:4d:4a:7f:a8:55:
                    14:5b:38:b5:7a:52:13:35:ef:ed:22:d7:73:ac:df:
                    7b:a8:ec:ac:d4:ba:e8:63:bc:d6:75:0a:d7:d3:05:
                    c4:2f:8c:21:13:fd:b0:b9:bf:6c:72:38:11:bf:c8:
                    ae:d1:66:53:b5:3d:e5:cd:15:41:4e:ae:f9:3a:f9:
                    8a:35:1b:32:9e:b7:85:23:f5:37:f4:73:88:58:dd:
                    b9:45:53:0e:07:df:b9:3e:29:d7:39:9f:10:e5:20:
                    33:71:d9:1d:9d:5f:26:77:8f:ee:de:cf:53:48:ce:
                    91:fa:01:44:24:e4:c8:2d:c0:34:71:6a:31:70:fe:
                    f1:97:2c:4f:67:df:e1:5f:6f:88:fd:86:2e:ae:f8:
                    4a:c9:b1:5c:46:1b:d4:09:f4:b0:0b:b6:9d:38:5c:
                    45:ce:45:86:ad:dd:41:09:96:d0:ef:e7:5b:27:18:
                    47:44:b8:95:5a:fd:aa:75:96:2a:41:bd:9d:84:97:
                    be:c2:8b:5d:04:0a:27:83:13:91:9f:8f:ee:38:0a:
                    ce:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:63:C0:B9:4D:AC:ED:9F:40:9A:61:5F:70:1E:A4:85:7B:D1:05:2E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:05:2a:9f:cc:43:25:f9:9a:53:6f:00:4f:e7:6a:ce:5f:cb:
         7e:18:c2:57:23:97:d3:a2:c0:9e:58:60:bc:ac:99:f3:97:cd:
         81:d7:2b:3b:b3:07:4b:de:bc:ab:86:e4:6c:f0:cf:22:83:88:
         02:92:f1:4b:06:1a:84:3e:1d:20:7c:da:17:c6:d9:4c:00:9b:
         36:ec:b4:42:3b:69:69:78:8a:8f:ab:c4:08:aa:11:e1:9f:21:
         3a:46:e6:e6:4b:7b:03:a6:d6:9f:03:34:cd:f4:bd:f7:64:2a:
         93:e2:be:b8:70:83:40:07:e7:0f:07:74:9a:28:31:af:97:91:
         0f:ea:47:39:1e:ec:39:c1:3a:63:b8:1e:3b:e0:17:31:b6:fd:
         fa:f0:29:08:be:66:09:ea:c4:cf:d0:e5:b6:0d:ea:66:23:49:
         68:7f:47:4e:1b:e5:51:61:07:4f:72:cf:f7:5f:de:d0:45:d4:
         65:17:ad:86:71:bc:e8:b7:c2:6d:f0:99:ed:0d:f0:09:ca:d9:
         fe:1c:71:5d:4d:69:ef:88:00:7a:ae:49:bc:c9:0e:de:04:85:
         0e:d0:c4:a3:73:44:a2:11:6b:30:a6:40:ae:33:6e:7b:b5:3a:
         cd:f4:ca:f6:46:93:3b:7a:c4:cd:72:ce:08:25:54:4f:12:4f:
         d8:b5:5b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----