Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/107D2594ACEB11F1B42448FFCE1D38B0.roa
File:                     107D2594ACEB11F1B42448FFCE1D38B0.roa (raw, json)
Hash identifier:          i4ycH4u9F23bustuonQij5TzbVi8rh+0FAQKnrgp36U=
Subject key identifier:   97:14:F4:F1:B8:44:1B:01:36:EE:8D:AF:91:F2:47:8A:30:F9:91:D9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/107D2594ACEB11F1B42448FFCE1D38B0.roa
Signing time:             Thu 10 Sep 2026 07:41:42 +0000
ROA not before:           Thu 10 Sep 2026 07:41:38 +0000
ROA not after:            Mon 21 Sep 2026 07:41:38 +0000
asID:                     150008
IP address blocks:        154.206.27.0/24 maxlen: 24
                          154.206.28.0/24 maxlen: 24
                          154.206.29.0/24 maxlen: 24
                          154.206.30.0/24 maxlen: 24
                          154.209.252.0/24 maxlen: 24
                          154.209.253.0/24 maxlen: 24
                          154.209.254.0/24 maxlen: 24
                          154.209.255.0/24 maxlen: 24
                          154.210.220.0/24 maxlen: 24
                          154.210.224.0/24 maxlen: 24
                          154.210.225.0/24 maxlen: 24
                          154.210.228.0/24 maxlen: 24
                          154.210.229.0/24 maxlen: 24
                          154.210.230.0/24 maxlen: 24
                          154.210.231.0/24 maxlen: 24
                          154.210.232.0/24 maxlen: 24
                          154.210.233.0/24 maxlen: 24
                          154.210.234.0/24 maxlen: 24
                          154.210.235.0/24 maxlen: 24
                          154.210.236.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124653 (0x1e6ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 07:41:38 2026 GMT
            Not After : Sep 21 07:41:38 2026 GMT
        Subject: CN=6aa25f36-9786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b3:50:f0:4e:96:28:a6:2e:7a:a3:ff:36:d3:
                    91:d0:c7:1c:f7:70:91:6f:53:aa:a3:1d:b2:1c:b3:
                    a5:0a:38:4d:5a:1f:c7:ae:cc:97:2d:88:21:b8:45:
                    11:82:a7:33:91:98:be:08:57:18:21:32:ad:2b:7c:
                    3c:d1:97:02:0a:cb:f9:ed:51:26:5e:50:9f:d2:ba:
                    93:af:1f:a7:98:de:cc:4f:64:30:b1:b9:46:21:11:
                    40:86:86:da:76:d5:65:26:35:4b:65:24:2e:70:be:
                    48:fc:0a:85:fc:06:25:e0:68:ad:d1:9f:d9:c6:25:
                    3c:ce:1f:43:a1:4d:b9:43:52:5a:c1:22:d1:ff:e8:
                    47:b6:fd:3a:8f:88:c1:0c:05:fc:5f:28:2b:ca:44:
                    af:e7:b6:57:a3:f8:4f:c7:6e:8a:22:5d:7c:61:41:
                    5a:05:9c:eb:34:b2:92:38:86:74:49:cc:34:de:81:
                    fb:4e:7a:94:85:4c:54:3a:f8:6b:ef:9f:3e:1b:85:
                    d6:b2:fb:b9:4a:f3:e6:d0:cf:6c:1a:e2:72:91:1f:
                    ef:30:34:b9:ba:d3:d6:d1:84:fa:f9:03:e2:f9:29:
                    94:68:a0:6f:b4:a0:68:10:4d:47:aa:6a:cb:c6:53:
                    1d:3b:23:a4:f5:9c:11:26:0b:24:ea:eb:83:b9:6d:
                    f6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:14:F4:F1:B8:44:1B:01:36:EE:8D:AF:91:F2:47:8A:30:F9:91:D9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/107D2594ACEB11F1B42448FFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.27.0-154.206.30.255
                  154.209.252.0/22
                  154.210.220.0/24
                  154.210.224.0/23
                  154.210.228.0-154.210.236.255

    Signature Algorithm: sha256WithRSAEncryption
         5e:fb:73:45:d1:df:72:2d:b1:bd:6c:a7:f0:2f:74:67:5d:d8:
         d3:84:e1:ba:fc:f0:0a:ca:e0:44:8d:52:e9:bd:5c:65:28:4e:
         05:f5:d8:2b:50:e5:eb:47:a1:27:7f:de:73:4a:ff:16:59:f8:
         c8:1b:aa:29:7f:32:2a:c2:2e:43:a8:30:a1:4a:22:98:b1:66:
         d0:b3:20:01:24:74:32:98:c0:e1:47:d2:c8:0b:15:2c:b3:1b:
         4f:66:4c:78:10:79:f0:4b:d7:0e:c3:c1:29:31:81:ec:4d:f7:
         42:0e:bb:4e:4f:aa:dc:99:ca:44:4b:8f:67:d6:a2:03:fc:5d:
         32:20:ca:5a:8d:8f:ef:f8:9d:bf:65:ea:94:9b:78:53:f6:84:
         b5:5d:92:54:24:c7:f0:1f:b1:fe:32:dc:98:f2:7b:98:65:8c:
         65:62:42:55:04:1d:ac:c3:b1:e7:3d:f9:fc:5e:b2:7f:01:f6:
         6b:e2:7d:cb:bf:a6:06:7e:90:db:c9:6b:18:c7:48:27:fc:ab:
         ba:c7:d8:a1:5d:7d:a4:d5:a5:57:e0:7b:29:f9:52:c9:c7:e7:
         ca:f6:ed:c2:ca:37:4e:4c:eb:46:11:e9:d4:7d:09:62:c0:c1:
         c8:f3:47:d5:25:da:8a:38:a7:2c:1b:d3:0c:7f:9f:ad:23:f6:
         08:08:83:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----