Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133342e302f32342d3234203d3e20313331373336.roa
File:                     3131352e3137382e3133342e302f32342d3234203d3e20313331373336.roa (raw, json)
Hash identifier:          KTDfXOxrgzyB1bGbA6N4+VKkwEnwtZ/1u9mDhwY1xp8=
Subject key identifier:   4C:D8:D3:BB:50:9D:DB:89:41:6B:0F:C5:7C:FD:E7:90:20:59:3E:5D
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       0827481D0A83458FBC23F0094AF02CDB02584D58
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133342e302f32342d3234203d3e20313331373336.roa
Signing time:             Fri 04 Mar 2022 07:44:33 +0000
ROA not before:           Fri 04 Mar 2022 07:39:33 +0000
ROA not after:            Sat 04 Mar 2023 07:44:33 +0000
asID:                     131736
IP address blocks:        115.178.134.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:27:48:1d:0a:83:45:8f:bc:23:f0:09:4a:f0:2c:db:02:58:4d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Mar  4 07:39:33 2022 GMT
            Not After : Mar  4 07:44:33 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:ce:fc:12:8e:76:de:49:e9:5f:c1:d6:fb:
                    e2:e4:d3:9b:4f:4f:28:85:49:a4:f9:fc:42:52:ae:
                    5f:99:62:de:c9:a0:b8:83:e1:7a:0d:ac:11:49:4f:
                    4c:09:df:a7:27:ef:53:35:6d:ad:2d:e9:08:be:02:
                    aa:a7:19:07:3a:72:ce:11:25:ec:d9:5e:7a:1b:94:
                    58:76:37:27:a3:92:d9:85:3f:a9:a0:ab:3a:46:e2:
                    fe:25:e7:dc:bf:c6:97:5f:b1:4b:8c:c9:ce:59:91:
                    4e:aa:27:91:9e:4a:ed:ea:48:35:5d:90:1b:55:19:
                    03:68:47:1e:32:9d:f5:97:62:43:18:9e:cf:29:d0:
                    38:28:45:be:47:79:67:60:cd:d2:8d:97:16:13:f7:
                    d6:3f:97:fc:34:83:f6:18:0c:d7:0d:b6:f5:94:73:
                    5a:6f:c2:8e:f4:c1:c7:1e:a6:8c:14:c3:32:67:e9:
                    68:86:46:05:73:42:d9:ce:35:e5:c7:07:c1:15:eb:
                    2e:89:be:8a:65:35:4e:3b:48:7f:cb:62:96:df:4b:
                    60:63:26:00:ed:2c:36:81:3e:a0:c7:7c:1e:19:31:
                    97:af:09:33:d0:2b:d7:00:df:4e:d7:d5:94:a9:0e:
                    4d:3c:9d:ba:44:2e:71:4f:d6:8f:f2:96:83:9d:e1:
                    02:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D8:D3:BB:50:9D:DB:89:41:6B:0F:C5:7C:FD:E7:90:20:59:3E:5D
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133342e302f32342d3234203d3e20313331373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:e1:ab:8b:84:10:e2:cc:7d:5f:0e:5e:5f:44:b0:03:55:a0:
         b7:d3:e1:73:79:3a:d4:56:ad:1d:64:38:50:34:ed:f0:c0:c3:
         c8:bf:72:fc:54:ba:12:74:25:0b:a7:9e:bc:fc:26:0a:87:64:
         13:7a:32:44:0e:7b:77:2c:1a:88:37:7c:7c:de:ba:b9:3d:9d:
         b7:81:37:5d:a3:8a:f4:0f:fd:cb:43:55:b2:e5:3d:3e:2b:e0:
         a8:25:44:43:dd:6a:c6:6e:e0:92:67:b9:ec:a2:04:f3:f3:a1:
         94:6a:24:9e:91:55:9f:ad:24:d4:bb:60:2d:f1:b1:2e:41:66:
         5d:c2:f0:96:4f:b0:b7:cb:8f:62:6f:e5:2c:44:81:17:a2:ce:
         35:2a:80:53:59:67:2f:74:4c:d8:4d:aa:fd:53:65:ba:15:53:
         87:8f:fe:e7:fd:fc:dc:9a:cf:dd:cd:c7:cb:e3:71:c8:1b:8c:
         56:99:f2:ed:e0:0f:45:71:c3:e8:a0:69:81:4f:4a:4f:4e:a3:
         80:cc:43:84:dd:8e:97:89:55:84:be:4d:74:8f:66:73:63:ef:
         8e:9a:94:8d:8a:ee:b5:69:46:37:01:02:9d:6c:dc:f1:51:7b:
         e8:15:86:36:dc:2d:a0:3b:cb:c3:02:c0:af:ff:b8:7e:f9:d7:
         d1:7d:a0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----