Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/34352e3235302e3130302e302f32342d3234203d3e203435373135.roa
File:                     34352e3235302e3130302e302f32342d3234203d3e203435373135.roa (raw, json)
Hash identifier:          osOrygw6+M7/3i9VJrwyxUPulYkMKZz1JpLqlWxUBT0=
Subject key identifier:   97:1D:1F:B4:5D:8F:C6:55:B1:57:57:7D:CB:96:06:11:F8:1C:CF:7F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6FC83543DB4241BEB47AB748CF3DF975800DAFC9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34352e3235302e3130302e302f32342d3234203d3e203435373135.roa
Signing time:             Tue 12 Oct 2021 03:00:01 +0000
ROA not before:           Tue 12 Oct 2021 02:55:01 +0000
ROA not after:            Wed 12 Oct 2022 03:00:01 +0000
asID:                     45715
IP address blocks:        45.250.100.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c8:35:43:db:42:41:be:b4:7a:b7:48:cf:3d:f9:75:80:0d:af:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 12 02:55:01 2021 GMT
            Not After : Oct 12 03:00:01 2022 GMT
        Subject: CN=3082010A0282010100D6E86C224770212F3CE54D26F4C76713F5049376BF73903D9831162152ED364B084F03D957308DA381C2A76AE8693C8F5440C681D2A8D0150AE6BC800D394C511BCD47FFD423BE9075F591FF04DCBF107F7F147879B3EC3BA289A645CE65733484EB174518406CD924C38EC053B8CDACA7B3155A9E67AF846CE68D77201A4F3C623F4937A44EC2798AE5E0A0E8B1BD6AC0D04D3B0C7C75051CA6BE88C0AD5B1D5934B2057F0C2BD9DC97FE262D5FF9F935A50ADE5503D9E0FB82EAC4CFE010A49B2F211C2E2D4D7ED9C0EC354886ED5A4E9115112264E36E5C0D3598DFFC5A97B33A5E92D40FFD3D69AE737784B8FF54B441C3E75DDBAD2A2C7939D45C3126210203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e8:6c:22:47:70:21:2f:3c:e5:4d:26:f4:c7:
                    67:13:f5:04:93:76:bf:73:90:3d:98:31:16:21:52:
                    ed:36:4b:08:4f:03:d9:57:30:8d:a3:81:c2:a7:6a:
                    e8:69:3c:8f:54:40:c6:81:d2:a8:d0:15:0a:e6:bc:
                    80:0d:39:4c:51:1b:cd:47:ff:d4:23:be:90:75:f5:
                    91:ff:04:dc:bf:10:7f:7f:14:78:79:b3:ec:3b:a2:
                    89:a6:45:ce:65:73:34:84:eb:17:45:18:40:6c:d9:
                    24:c3:8e:c0:53:b8:cd:ac:a7:b3:15:5a:9e:67:af:
                    84:6c:e6:8d:77:20:1a:4f:3c:62:3f:49:37:a4:4e:
                    c2:79:8a:e5:e0:a0:e8:b1:bd:6a:c0:d0:4d:3b:0c:
                    7c:75:05:1c:a6:be:88:c0:ad:5b:1d:59:34:b2:05:
                    7f:0c:2b:d9:dc:97:fe:26:2d:5f:f9:f9:35:a5:0a:
                    de:55:03:d9:e0:fb:82:ea:c4:cf:e0:10:a4:9b:2f:
                    21:1c:2e:2d:4d:7e:d9:c0:ec:35:48:86:ed:5a:4e:
                    91:15:11:22:64:e3:6e:5c:0d:35:98:df:fc:5a:97:
                    b3:3a:5e:92:d4:0f:fd:3d:69:ae:73:77:84:b8:ff:
                    54:b4:41:c3:e7:5d:db:ad:2a:2c:79:39:d4:5c:31:
                    26:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1D:1F:B4:5D:8F:C6:55:B1:57:57:7D:CB:96:06:11:F8:1C:CF:7F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34352e3235302e3130302e302f32342d3234203d3e203435373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.250.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:a1:65:81:5b:21:e6:52:4e:b4:98:5c:44:36:1e:9a:a9:3e:
         ac:c1:b0:e4:f5:d7:c2:3e:ac:5c:95:69:78:9f:11:e5:09:4f:
         b8:c6:8d:b3:a2:40:9f:41:e7:f7:16:62:db:65:79:91:b5:b7:
         29:aa:c2:4d:fc:04:f7:b0:8e:e7:19:8c:17:e3:50:20:05:55:
         bd:a8:5f:73:bc:0d:f6:b6:7f:0a:87:52:b3:5f:cf:6d:13:7c:
         55:dc:e3:99:0d:ad:92:06:4a:94:95:01:ad:3a:f7:4b:b7:17:
         8f:88:4b:8d:37:0b:18:f8:01:c3:7b:c5:c8:6b:35:f4:74:97:
         cb:ad:41:68:0c:83:d4:48:2d:82:60:c7:6d:9d:5f:ab:cc:8c:
         51:3e:c3:f3:86:e5:08:d2:73:cf:14:99:aa:a9:01:db:1c:7d:
         05:f6:07:77:5b:96:0d:a5:4b:bd:35:79:1a:a2:95:79:2a:2d:
         4e:72:96:e3:7d:30:74:1c:06:57:96:61:f3:23:9b:72:99:10:
         22:4b:8f:c1:a1:9b:79:a1:97:df:75:89:54:4e:36:55:fe:82:
         5a:2b:2d:c1:b3:83:e0:55:58:3f:01:20:63:7f:95:a4:d8:7c:
         e6:3b:a9:0c:8c:f5:b0:85:2c:58:9b:47:21:c7:52:60:63:70:
         aa:4f:18:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----