Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa
File:                     34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (raw, json)
Hash identifier:          E1X4ziW3Nyay0dE5gWzxxmxIzdJpsleY3SqbGrApmF0=
Subject key identifier:   C9:B7:14:F7:0F:62:82:D6:75:44:31:26:47:DE:E5:B8:9A:03:50:28
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       36F2C1514918FC020E3C82EB22C27C3F17277309
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa
Signing time:             Wed 13 Oct 2021 04:00:02 +0000
ROA not before:           Wed 13 Oct 2021 03:55:02 +0000
ROA not after:            Thu 13 Oct 2022 04:00:02 +0000
asID:                     139396
IP address blocks:        45.113.228.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f2:c1:51:49:18:fc:02:0e:3c:82:eb:22:c2:7c:3f:17:27:73:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 13 03:55:02 2021 GMT
            Not After : Oct 13 04:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ac:32:b7:c1:e4:1c:92:94:bf:6c:07:df:e9:
                    7d:e9:0a:60:8e:42:98:df:a6:44:54:d3:75:c7:e8:
                    2b:05:f4:83:ce:27:66:d6:fe:9b:a8:86:45:69:6a:
                    f4:58:17:55:ff:aa:fd:ca:4f:73:14:d5:42:3d:26:
                    d4:b1:b0:4d:2d:f5:dc:cd:af:00:10:e2:00:e9:3b:
                    0e:f3:3a:5f:c3:84:aa:1f:80:2f:90:c6:cb:ec:65:
                    29:f4:33:c7:85:e4:fc:b8:29:3b:18:66:c5:7a:2e:
                    00:50:0c:76:63:9b:2b:ed:0b:04:9c:94:85:1e:ad:
                    3f:50:a6:7d:21:48:e8:e8:86:0b:c3:ff:1a:9b:f4:
                    d3:08:d6:96:14:46:90:fa:fe:08:db:d9:56:b1:76:
                    ef:16:50:9a:fb:a7:c3:f9:fd:03:2c:e9:c4:8a:6b:
                    bc:68:99:74:53:a2:58:19:57:19:5d:0a:79:f1:79:
                    e5:b3:24:92:2b:3d:7e:c2:9a:60:9f:9b:8d:4c:40:
                    37:f1:ac:47:5c:1c:c4:13:de:0d:c0:b8:47:50:8c:
                    86:2d:5f:d2:64:a3:82:bf:dc:c7:21:b1:b3:3d:7b:
                    2b:65:18:a3:73:e9:c2:d9:8e:6d:aa:93:36:07:a8:
                    0c:23:5a:d4:f7:eb:10:7e:b6:89:47:1f:44:a6:74:
                    7d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B7:14:F7:0F:62:82:D6:75:44:31:26:47:DE:E5:B8:9A:03:50:28
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:7e:d4:8b:28:2a:83:8d:fc:97:b4:4c:7a:ab:b1:42:fc:57:
         e1:36:19:00:d4:c9:86:8d:31:f5:ae:7a:2d:75:02:5c:42:2f:
         db:68:9a:d7:89:d9:40:8d:ff:40:ee:96:04:b3:54:c0:0f:2d:
         e7:10:86:26:6c:0d:fc:dc:80:d5:bf:2b:fa:3a:4c:d5:fc:cc:
         93:b8:bf:40:bc:ab:dd:1a:dd:cc:b4:68:a6:22:71:f2:0b:21:
         a5:fd:dc:77:0e:03:5a:bb:b9:cc:ea:27:1e:2e:f4:69:3d:62:
         49:b6:13:96:6b:89:00:27:66:d4:a1:73:89:bd:04:da:20:f1:
         f6:b1:5b:7d:c6:87:eb:ac:dd:9d:20:40:22:38:80:60:1a:62:
         36:1d:2b:5f:75:4f:57:be:10:53:92:1b:0a:62:df:cb:dd:4e:
         f2:9b:2f:70:a5:e5:fc:5f:cc:73:ba:e1:be:35:ea:27:71:c2:
         db:3f:02:ca:13:2a:2d:eb:e6:f1:43:62:65:0f:66:95:6f:eb:
         c8:ff:23:e0:6e:0a:58:b3:41:c3:36:be:58:fc:df:5f:10:6b:
         72:c1:06:3c:15:c0:ae:7f:a1:57:24:70:5b:bf:79:e8:c1:76:
         58:2a:19:1b:04:21:ad:91:06:5b:e2:52:1f:e6:87:a5:93:f0:
         f6:e5:f2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----