Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3139312e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3139312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          YUgbIWsBn6l+lRCY1GsQ5WZW1dPYrGH1JVI8JLLbtx0=
Subject key identifier:   00:99:37:0E:A7:69:C6:BD:B7:C7:2F:4F:57:A6:47:DA:77:6B:83:EA
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       1282FA586C08923CDC01003C37F089CADA914B56
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3139312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:18 +0000
ROA not before:           Wed 29 Sep 2021 23:55:18 +0000
ROA not after:            Fri 30 Sep 2022 00:00:18 +0000
asID:                     17451
IP address blocks:        112.78.191.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:82:fa:58:6c:08:92:3c:dc:01:00:3c:37:f0:89:ca:da:91:4b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:18 2021 GMT
            Not After : Sep 30 00:00:18 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:59:f4:b5:c6:64:89:e5:d8:ba:bc:b9:d0:bc:
                    3f:cc:39:ef:47:e7:b5:6e:e3:c5:ea:20:44:e5:32:
                    90:31:45:b3:2f:e5:ff:38:b9:41:ac:79:2b:60:fe:
                    af:47:0c:a1:a4:8d:99:be:46:d8:02:32:2a:db:60:
                    a9:e0:48:77:c6:6a:b2:c7:74:1f:4b:b7:60:a3:32:
                    bf:70:72:d0:3c:7e:d5:43:14:25:d1:3b:8b:3d:6f:
                    da:ca:8d:72:0d:79:df:69:c5:56:f0:f1:03:38:b3:
                    d1:5a:56:25:51:9b:26:89:61:09:f9:ef:86:bd:14:
                    d3:6b:af:b5:de:e4:3c:ad:82:6b:93:77:0b:24:60:
                    a1:bf:8f:ce:89:49:e1:70:36:fd:74:4f:eb:8a:49:
                    15:55:e7:20:78:07:5f:4b:f2:16:3d:75:4c:cf:81:
                    1f:2f:cd:c0:05:43:2b:55:0f:d5:5b:85:e3:e3:3f:
                    5a:16:c7:88:87:18:f2:e0:15:d1:3f:e9:15:b7:c9:
                    3a:c0:2f:dc:1f:b1:3e:d5:04:c1:89:97:c0:cd:a3:
                    37:3f:c0:31:97:9d:d6:ee:a2:99:d3:c5:8b:b0:d5:
                    b3:67:60:8b:f6:ea:64:46:39:c7:46:d9:3a:05:60:
                    3c:dd:0b:9e:85:1f:4b:e8:aa:4d:c6:fb:d6:5c:e0:
                    f3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:99:37:0E:A7:69:C6:BD:B7:C7:2F:4F:57:A6:47:DA:77:6B:83:EA
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3139312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:68:18:f0:86:fe:cc:09:65:71:9a:18:c3:d3:67:d2:65:7c:
         d1:0f:0a:ff:41:45:89:11:59:bb:de:32:a3:72:b2:55:99:02:
         6b:c0:dc:53:73:9a:2f:4d:ca:6a:7d:9d:dd:d7:b6:46:7d:e7:
         ff:82:eb:22:6e:42:35:0a:75:0a:fe:4c:37:11:0b:04:f7:c5:
         74:77:bc:6d:2e:15:fa:13:50:1f:1f:28:14:1f:59:03:32:5e:
         f8:8d:5b:33:7d:ef:f0:2a:58:b3:2b:f0:41:bc:c2:7a:d6:3a:
         61:f3:4f:f4:69:5e:bd:ad:9f:62:f8:60:ee:3d:ad:39:29:63:
         4b:05:e7:c3:78:e0:73:cc:e0:d5:77:bb:df:5d:7b:72:22:aa:
         2e:3c:d6:b6:65:ae:ea:4f:09:b3:5e:fb:6d:65:41:ca:5a:97:
         45:b4:f7:eb:a9:2b:3c:f6:64:c5:25:bf:75:6d:ab:75:02:3b:
         9e:62:bb:7c:06:a7:5d:96:1e:90:8c:be:5f:81:ef:bc:42:38:
         9e:0c:ac:77:bd:bd:d8:2d:7e:35:50:21:3f:2d:bb:9c:69:7a:
         35:e6:71:e4:e1:cc:87:59:72:51:66:af:96:43:53:bb:d5:20:
         fa:1c:9b:5d:6f:c2:60:c8:29:7b:87:a2:b9:fc:90:4d:15:45:
         d9:51:3b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----