Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08E43C56AE7F11F182A00911CF1D38B0.roa
File:                     08E43C56AE7F11F182A00911CF1D38B0.roa (raw, json)
Hash identifier:          4p0hiJRKGyUgWVtfQFbOHzsuKgXbx0fM58ziUEiMuvs=
Subject key identifier:   8A:B1:AD:76:29:4F:CA:59:94:20:5A:C8:62:2A:06:37:EE:29:45:C7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08E43C56AE7F11F182A00911CF1D38B0.roa
Signing time:             Sat 12 Sep 2026 07:53:26 +0000
ROA not before:           Sat 12 Sep 2026 07:53:22 +0000
ROA not after:            Mon 21 Sep 2026 07:53:22 +0000
asID:                     64126
IP address blocks:        154.88.128.0/17 maxlen: 24
                          154.88.187.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124844 (0x1e7ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 12 07:53:22 2026 GMT
            Not After : Sep 21 07:53:22 2026 GMT
        Subject: CN=6aa504f6-0e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:18:a7:79:28:34:55:0f:68:de:d4:99:f5:
                    db:c8:e5:45:b5:54:93:40:37:6d:ee:cb:de:bc:25:
                    74:c6:75:ba:ab:c1:6f:b5:59:db:ef:2f:93:35:8f:
                    85:49:40:d3:f1:f1:3d:2a:86:fe:c7:77:88:dd:56:
                    0c:e6:90:37:fc:7e:8b:d6:e4:d4:88:a6:fe:89:27:
                    5f:52:59:29:77:88:ac:af:8e:01:ba:09:17:c6:cf:
                    d9:86:44:4d:ee:ff:66:cc:72:5e:d5:9e:68:f4:5b:
                    ac:22:f4:19:d6:31:ad:dd:b9:d3:d6:2e:84:a0:92:
                    4a:ba:a9:f5:6d:07:fc:e3:59:c5:8b:07:a4:5f:23:
                    62:ea:b0:b3:c2:3d:6a:4f:54:48:d1:08:4f:69:ce:
                    d1:78:0b:89:4a:01:ad:fa:17:4c:d9:21:6b:4e:f5:
                    5e:8a:c1:83:26:3e:f0:a8:84:04:c8:a7:d4:54:f4:
                    00:52:48:ba:b9:0b:d2:d4:35:7f:fc:eb:70:55:cc:
                    02:20:15:52:78:c0:34:3c:33:3e:48:29:ae:0f:2a:
                    d0:e1:ab:7d:01:0f:98:f7:ce:1d:4e:67:90:be:d3:
                    c7:16:ff:0e:bf:c2:0e:b6:9e:4f:da:82:10:19:a0:
                    45:8c:62:84:10:29:6d:da:79:b5:8f:ff:d4:10:d3:
                    77:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B1:AD:76:29:4F:CA:59:94:20:5A:C8:62:2A:06:37:EE:29:45:C7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08E43C56AE7F11F182A00911CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         83:f6:63:26:af:47:0a:27:e1:fe:e1:40:01:67:40:8a:40:b5:
         a1:e2:10:8b:d7:71:fb:66:0a:68:30:1c:82:f2:58:fd:43:b1:
         51:d5:c4:fa:7b:6a:91:6b:7e:73:6c:8a:fc:2e:06:05:e4:0a:
         3d:13:1c:86:4b:1c:37:89:57:f4:f1:07:b4:f2:1f:2d:cd:5d:
         9d:15:13:51:20:25:cb:ed:bf:41:52:02:8e:af:c6:cb:8b:42:
         9d:73:b5:d6:0e:17:44:33:72:74:59:0e:02:7c:6a:32:2d:24:
         88:ad:c7:be:f6:05:54:3b:6b:ec:82:bc:78:4f:c7:33:cc:74:
         83:4e:b8:f6:33:b1:06:1c:e4:a5:8e:c9:e9:b0:0b:93:f6:27:
         2b:1e:16:6e:52:f6:5b:00:9d:6c:30:38:a0:aa:5c:a6:54:e8:
         32:66:8b:cc:8a:ba:22:39:75:18:3c:fc:fb:d8:89:60:33:5b:
         70:08:f2:20:05:6a:b5:dc:52:00:9e:86:8a:94:08:42:96:e0:
         b7:fc:47:28:4d:96:2b:44:39:8c:c3:79:dd:7d:83:4f:3b:f3:
         2a:62:a2:a9:6e:bd:6a:e9:5a:a6:0e:f8:df:f1:4b:aa:a9:fb:
         e8:ef:cd:2f:de:c9:52:64:6e:72:c7:cc:48:8a:51:53:70:de:
         13:55:d3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----