Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/34352e3235302e3130312e302f32342d3234203d3e203435373135.roa
File:                     34352e3235302e3130312e302f32342d3234203d3e203435373135.roa (raw, json)
Hash identifier:          oO2mHvLmag9ds52ewrg95EZ46gsE1PtpAKr2chGdLTQ=
Subject key identifier:   CD:AF:9F:E8:7C:E6:31:22:7C:30:7F:90:FC:31:BC:58:92:97:81:67
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       22A5C3043DB8D6D1F726838F5DA129020D3CAAED
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34352e3235302e3130312e302f32342d3234203d3e203435373135.roa
Signing time:             Tue 12 Oct 2021 03:00:00 +0000
ROA not before:           Tue 12 Oct 2021 02:55:00 +0000
ROA not after:            Wed 12 Oct 2022 03:00:00 +0000
asID:                     45715
IP address blocks:        45.250.101.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a5:c3:04:3d:b8:d6:d1:f7:26:83:8f:5d:a1:29:02:0d:3c:aa:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 12 02:55:00 2021 GMT
            Not After : Oct 12 03:00:00 2022 GMT
        Subject: CN=3082010A0282010100AA00BA1D9E69BE201B7DDF7D97FB238916D7202D7326BB23B441520D12D65CD47BAA5BAC7F274886A860A8AF955C96B361DD80E272C1B253D3FD4032BB89480C70FFB36AF17901C33753001502B3D6EB5B1CEA801883785963D6172CAEC2DA981DB33E1E60041BA87609EBE6151C5C200DE825CE052CD639529168513AD3E928C09178C893B8AB26141375578DA1EBC6846700F1F417334DCA0EA9CFF034B7D2D87EBEC4795110F2376635EC8C2FACCC3278C1AC474808E652A1EDAFD69333E80EE1419BBE71986FE952899EB128A04C4EDE80B000AE894ADFBB685DF250470FE7E29DB8A14E0AFA4EDD6EF3E6A67995052D2F5019D150D6D4320BDC68481C450203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:00:ba:1d:9e:69:be:20:1b:7d:df:7d:97:fb:
                    23:89:16:d7:20:2d:73:26:bb:23:b4:41:52:0d:12:
                    d6:5c:d4:7b:aa:5b:ac:7f:27:48:86:a8:60:a8:af:
                    95:5c:96:b3:61:dd:80:e2:72:c1:b2:53:d3:fd:40:
                    32:bb:89:48:0c:70:ff:b3:6a:f1:79:01:c3:37:53:
                    00:15:02:b3:d6:eb:5b:1c:ea:80:18:83:78:59:63:
                    d6:17:2c:ae:c2:da:98:1d:b3:3e:1e:60:04:1b:a8:
                    76:09:eb:e6:15:1c:5c:20:0d:e8:25:ce:05:2c:d6:
                    39:52:91:68:51:3a:d3:e9:28:c0:91:78:c8:93:b8:
                    ab:26:14:13:75:57:8d:a1:eb:c6:84:67:00:f1:f4:
                    17:33:4d:ca:0e:a9:cf:f0:34:b7:d2:d8:7e:be:c4:
                    79:51:10:f2:37:66:35:ec:8c:2f:ac:cc:32:78:c1:
                    ac:47:48:08:e6:52:a1:ed:af:d6:93:33:e8:0e:e1:
                    41:9b:be:71:98:6f:e9:52:89:9e:b1:28:a0:4c:4e:
                    de:80:b0:00:ae:89:4a:df:bb:68:5d:f2:50:47:0f:
                    e7:e2:9d:b8:a1:4e:0a:fa:4e:dd:6e:f3:e6:a6:79:
                    95:05:2d:2f:50:19:d1:50:d6:d4:32:0b:dc:68:48:
                    1c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AF:9F:E8:7C:E6:31:22:7C:30:7F:90:FC:31:BC:58:92:97:81:67
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34352e3235302e3130312e302f32342d3234203d3e203435373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.250.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:c0:b7:e5:98:5b:c6:b5:5a:c1:9d:5f:98:04:5c:d7:0a:25:
         b2:7d:b5:91:d7:36:1c:bf:ea:73:ad:4b:1d:fd:72:c3:e8:37:
         85:9b:ed:1d:69:36:92:d4:5f:5c:7f:33:79:e1:1b:cb:8f:64:
         a4:4d:1a:1e:a2:29:2f:36:86:4d:7b:13:63:ff:be:3c:0a:2e:
         5b:5b:e0:a2:14:29:35:9b:77:9e:c7:0c:a6:31:1c:a9:20:e9:
         dc:12:d7:07:cd:53:36:3f:c8:3e:f6:c6:aa:c0:d4:7b:d4:3b:
         c4:14:7c:a4:6d:e6:3c:b9:85:89:cb:14:39:55:f7:70:c6:66:
         9e:33:a5:6a:38:3d:ea:ae:dc:0d:79:ee:03:1f:6f:a6:55:f3:
         d9:43:73:8e:e0:f6:1b:d4:d0:ea:e3:0b:96:f4:18:5d:45:ef:
         02:dc:d7:6a:74:27:e3:6c:0d:36:cb:ed:53:ed:29:79:e1:47:
         35:cd:2e:18:b5:d9:75:f2:4b:13:36:5e:13:6f:2a:90:7a:b4:
         1d:3b:48:1a:7a:52:7c:6f:70:b8:29:56:0c:64:77:e5:4b:29:
         f7:63:bd:3b:7f:e9:89:7e:00:c5:14:80:93:54:ef:fc:d7:fd:
         f8:08:78:53:62:26:ac:40:f9:ac:18:26:e1:e1:ef:29:d6:61:
         fe:38:05:e7
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUIqXDBD241tH3JoOPXaEpAg08qu0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTAxMjAyNTUwMFoX
DTIyMTAxMjAzMDAwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBQTAwQkExRDlFNjlCRTIwMUI3RERGN0Q5N0ZCMjM4OTE2RDcyMDJENzMy
NkJCMjNCNDQxNTIwRDEyRDY1Q0Q0N0JBQTVCQUM3RjI3NDg4NkE4NjBBOEFGOTU1
Qzk2QjM2MUREODBFMjcyQzFCMjUzRDNGRDQwMzJCQjg5NDgwQzcwRkZCMzZBRjE3
OTAxQzMzNzUzMDAxNTAyQjNENkVCNUIxQ0VBODAxODgzNzg1OTYzRDYxNzJDQUVD
MkRBOTgxREIzM0UxRTYwMDQxQkE4NzYwOUVCRTYxNTFDNUMyMDBERTgyNUNFMDUy
Q0Q2Mzk1MjkxNjg1MTNBRDNFOTI4QzA5MTc4Qzg5M0I4QUIyNjE0MTM3NTU3OERB
MUVCQzY4NDY3MDBGMUY0MTczMzREQ0EwRUE5Q0ZGMDM0QjdEMkQ4N0VCRUM0Nzk1
MTEwRjIzNzY2MzVFQzhDMkZBQ0NDMzI3OEMxQUM0NzQ4MDhFNjUyQTFFREFGRDY5
MzMzRTgwRUUxNDE5QkJFNzE5ODZGRTk1Mjg5OUVCMTI4QTA0QzRFREU4MEIwMDBB
RTg5NEFERkJCNjg1REYyNTA0NzBGRTdFMjlEQjhBMTRFMEFGQTRFREQ2RUYzRTZB
Njc5OTUwNTJEMkY1MDE5RDE1MEQ2RDQzMjBCREM2ODQ4MUM0NTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqALodnmm+IBt9332X+yOJ
FtcgLXMmuyO0QVINEtZc1HuqW6x/J0iGqGCor5VclrNh3YDicsGyU9P9QDK7iUgM
cP+zavF5AcM3UwAVArPW61sc6oAYg3hZY9YXLK7C2pgdsz4eYAQbqHYJ6+YVHFwg
DeglzgUs1jlSkWhROtPpKMCReMiTuKsmFBN1V42h68aEZwDx9BczTcoOqc/wNLfS
2H6+xHlREPI3ZjXsjC+szDJ4waxHSAjmUqHtr9aTM+gO4UGbvnGYb+lSiZ6xKKBM
Tt6AsACuiUrfu2hd8lBHD+finbihTgr6Tt1u8+ameZUFLS9QGdFQ1tQyC9xoSBxF
AgMBAAGjggH/MIIB+zAdBgNVHQ4EFgQUza+f6HzmMSJ8MH+Q/DG8WJKXgWcwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzM0MzUyZTMyMzUzMDJlMzEzMDMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNTM3MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC36ZTANBgkqhkiG
9w0BAQsFAAOCAQEAZ8C35ZhbxrVawZ1fmARc1wolsn21kdc2HL/qc61LHf1yw+g3
hZvtHWk2ktRfXH8zeeEby49kpE0aHqIpLzaGTXsTY/++PAouW1vgohQpNZt3nscM
pjEcqSDp3BLXB81TNj/IPvbGqsDUe9Q7xBR8pG3mPLmFicsUOVX3cMZmnjOlajg9
6q7cDXnuAx9vplXz2UNzjuD2G9TQ6uMLlvQYXUXvAtzXanQn42wNNsvtU+0peeFH
Nc0uGLXZdfJLEzZeE28qkHq0HTtIGnpSfG9wuClWDGR35Usp92O9O3/piX4AxRSA
k1Tv/Nf9+Ah4U2ImrED5rBgm4eHvKdZh/jgF5w==
-----END CERTIFICATE-----