Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E945198AE9011F190C80AF5CE1D38B0.roa
File:                     0E945198AE9011F190C80AF5CE1D38B0.roa (raw, json)
Hash identifier:          TkUTF4cRydLNzAz0nhvvYC/wcUNUHmvV9s8S7/Mps2g=
Subject key identifier:   FC:3D:72:29:E8:3A:A9:40:0B:A7:9A:57:4F:D0:ED:23:23:F6:9D:38
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E945198AE9011F190C80AF5CE1D38B0.roa
Signing time:             Sat 12 Sep 2026 09:55:17 +0000
ROA not before:           Sat 12 Sep 2026 09:55:13 +0000
ROA not after:            Tue 22 Sep 2026 09:55:13 +0000
asID:                     8796
IP address blocks:        154.193.192.0/18 maxlen: 24
                          154.193.192.0/20 maxlen: 24
                          154.193.208.0/21 maxlen: 24
                          154.193.216.0/21 maxlen: 24
                          154.193.224.0/20 maxlen: 24
                          154.193.240.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124870 (0x1e7c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 12 09:55:13 2026 GMT
            Not After : Sep 22 09:55:13 2026 GMT
        Subject: CN=6aa52185-9ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:af:87:88:12:ce:0b:e4:84:77:03:7b:f3:cc:
                    1c:44:70:d0:f7:ab:50:6e:f1:1c:8a:80:96:e1:c6:
                    10:24:54:45:ae:5e:ff:3e:50:04:73:20:98:71:12:
                    1d:ec:a9:77:f7:99:b8:ea:94:8f:bc:59:b3:64:a5:
                    a1:e1:8a:47:15:b8:d2:c4:ca:33:ef:47:7d:ac:6f:
                    94:38:49:53:83:a1:e9:d6:db:ff:07:0a:0c:12:b5:
                    cf:ee:98:1d:14:1d:67:95:1d:5c:c5:0a:d9:f9:11:
                    c5:6c:8c:75:67:87:1b:09:19:ee:c3:b3:59:43:e0:
                    d2:07:8b:3f:e3:7f:6d:83:f0:54:51:65:0c:aa:53:
                    89:3d:ec:4d:c4:2e:1d:aa:9a:0b:a4:fe:1c:fe:73:
                    eb:7c:11:ee:1c:d1:97:56:e7:87:7d:f6:a8:6e:28:
                    fc:88:df:02:cf:41:d6:b8:ec:3d:e7:0e:c0:76:59:
                    b7:29:71:6e:e5:24:80:0b:0e:db:32:3b:40:a0:ef:
                    b4:fe:56:cd:ef:88:94:92:56:95:40:b3:e1:74:86:
                    a3:f9:96:b3:cc:55:cf:e4:ef:81:0d:43:01:7e:c1:
                    65:cd:d9:ba:3f:ad:1b:0c:48:ec:53:5b:7c:9f:87:
                    0d:d2:d3:44:33:b2:23:6d:18:b1:1e:4d:4f:b5:d6:
                    19:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3D:72:29:E8:3A:A9:40:0B:A7:9A:57:4F:D0:ED:23:23:F6:9D:38
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E945198AE9011F190C80AF5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4a:93:f8:39:ab:73:ee:36:5f:4e:93:38:1d:5b:42:6c:aa:fd:
         3d:bb:3b:30:98:bb:91:16:ca:c5:f4:0f:50:9c:c1:32:0d:91:
         40:92:8e:27:da:7e:8d:2e:5e:7e:0c:9e:95:fb:bb:e2:b4:71:
         01:cc:57:99:a8:ee:b7:97:ab:26:5c:87:cf:b1:84:f5:3d:ea:
         a0:01:52:69:f9:35:83:5a:24:b7:f9:4c:e7:ad:23:c4:64:71:
         da:8a:7c:86:89:c5:37:d2:c8:ff:21:e1:eb:cf:1e:43:24:66:
         77:c8:27:0d:00:04:d5:11:f3:66:8a:c7:03:33:a1:86:7f:cd:
         7b:99:74:16:9c:8d:58:f3:e0:47:87:59:c6:60:68:4d:62:14:
         e7:69:a1:70:92:31:01:e9:d9:60:ca:a2:d1:d5:07:c5:ef:6c:
         fc:b0:a0:81:38:d3:d0:ed:d8:8c:fd:32:d3:e4:48:9c:a4:d6:
         56:5d:35:33:be:1d:c2:12:6e:17:b7:bc:0f:2f:db:9d:cc:a2:
         3d:c7:24:40:f0:ca:81:fa:70:89:22:e3:01:a2:74:b2:32:f1:
         d5:06:70:9d:94:76:03:44:b7:e7:5f:a4:38:47:ec:c7:29:a0:
         42:ad:0f:fa:fd:4c:5a:8d:34:a5:a0:04:e5:bd:e8:08:29:37:
         00:70:b0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----