Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/34352e36342e34342e302f32322d3234203d3e2030.roa
File:                     34352e36342e34342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          DEB2stAaiVfg09r1+PAoFtAdc25KrNtwn1RBG5X89N8=
Subject key identifier:   F8:2F:B5:40:E6:86:80:C9:DD:67:ED:AD:DB:D4:A3:65:B0:DB:69:0A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       57C6D4E650E6B08BBC2C1A323A080D7BBA2A0901
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34352e36342e34342e302f32322d3234203d3e2030.roa
Signing time:             Mon 31 Jan 2022 04:03:22 +0000
ROA not before:           Mon 31 Jan 2022 03:58:22 +0000
ROA not after:            Tue 31 Jan 2023 04:03:22 +0000
asID:                     0
IP address blocks:        45.64.44.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c6:d4:e6:50:e6:b0:8b:bc:2c:1a:32:3a:08:0d:7b:ba:2a:09:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 31 03:58:22 2022 GMT
            Not After : Jan 31 04:03:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5b:85:59:4e:64:db:68:aa:49:79:17:05:fb:
                    9c:ee:88:3e:cc:81:7d:6e:3f:21:75:b9:bb:a7:9e:
                    29:8b:5c:2e:f3:bb:42:55:09:7c:c0:6d:18:2a:4f:
                    cc:cc:4a:c9:0d:46:29:cb:20:bd:f3:d2:82:96:57:
                    2f:8f:18:55:d5:66:b9:3e:af:80:3f:53:92:1d:c0:
                    d0:52:d8:12:8f:99:9f:dc:ae:87:68:be:45:82:ff:
                    d4:12:52:8b:1f:be:ba:bf:a4:0e:f7:83:0b:91:e2:
                    82:ac:39:11:c0:e2:6f:34:7a:63:2f:6c:38:7d:c7:
                    f4:7f:c1:b6:33:4b:5b:e5:da:ae:8d:43:20:02:81:
                    e8:ec:95:1a:fa:68:c3:e5:da:c6:94:40:5e:6a:07:
                    44:f1:0d:2e:9d:ba:c4:48:79:7f:4d:da:cf:c5:52:
                    f3:4a:2b:dc:23:0e:9e:db:fe:91:c7:a7:d5:e9:8e:
                    61:07:54:75:ec:a3:89:17:87:d7:42:75:cc:25:fe:
                    77:e2:d4:07:3d:93:07:c8:c4:0b:c6:fa:99:04:58:
                    dc:ce:cf:5b:f0:bd:a5:d5:98:d7:11:52:36:f2:9d:
                    3f:03:35:be:ad:7f:6e:e2:2b:9c:64:cc:dc:de:7f:
                    4b:41:a7:9c:41:bb:cc:2d:eb:12:c5:32:b3:47:aa:
                    2e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2F:B5:40:E6:86:80:C9:DD:67:ED:AD:DB:D4:A3:65:B0:DB:69:0A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34352e36342e34342e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:b4:89:ba:f9:20:55:81:ac:4f:3e:92:5f:64:bf:b5:52:07:
         13:72:4a:cd:68:e7:ad:e4:f2:28:25:3b:29:c4:6f:50:56:cf:
         44:89:95:f4:07:eb:f2:83:b4:10:b0:9f:73:ce:f4:4c:3f:8a:
         52:a7:58:a2:76:21:d2:6c:b7:4d:31:59:24:8b:10:47:6e:11:
         38:e0:3e:f2:23:60:8a:37:de:b6:bf:f3:9d:fb:66:f6:ff:38:
         94:66:4d:8f:be:c3:b0:23:fd:79:22:05:8f:b2:b7:99:08:80:
         79:90:07:16:6c:f4:3d:e5:6a:be:30:d6:50:2a:7d:ab:e6:ad:
         39:34:f0:c6:26:84:2f:e8:ab:58:2f:0c:ef:6c:da:bf:02:57:
         1a:ba:de:c9:ce:75:a7:b7:5d:4e:53:e8:a5:6c:1f:7b:ea:bb:
         3d:d5:a6:19:39:6d:d1:5e:df:0e:3e:d5:73:e5:52:c9:a4:34:
         92:75:83:f6:3d:f4:74:a4:eb:61:0f:d6:13:45:1f:6b:ab:a8:
         21:7e:d1:20:71:c9:65:b6:af:8c:c4:70:bc:e1:18:93:f7:1d:
         f0:58:b3:57:bb:4d:e0:40:f3:a2:16:1d:a9:60:fa:1d:79:8b:
         c4:15:2f:06:01:05:54:dd:89:a6:ae:74:14:d6:ab:a4:9b:89:
         12:2d:b4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----