Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14C975F4AEAC11F18CC63619CF1D38B0.roa
File:                     14C975F4AEAC11F18CC63619CF1D38B0.roa (raw, json)
Hash identifier:          Ep9vHNh28GNjuifyIcczIwIa7qg3w+D9p+gvMtCaDl0=
Subject key identifier:   B7:74:7E:31:29:37:E5:55:91:B0:35:BC:2C:1A:9B:EF:89:5F:97:18
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14C975F4AEAC11F18CC63619CF1D38B0.roa
Signing time:             Sat 12 Sep 2026 13:15:53 +0000
ROA not before:           Sat 12 Sep 2026 13:15:49 +0000
ROA not after:            Tue 22 Sep 2026 13:15:49 +0000
asID:                     8796
IP address blocks:        154.193.192.0/20 maxlen: 24
                          154.193.208.0/21 maxlen: 24
                          154.193.216.0/21 maxlen: 24
                          154.193.224.0/20 maxlen: 24
                          154.193.240.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124894 (0x1e7de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 12 13:15:49 2026 GMT
            Not After : Sep 22 13:15:49 2026 GMT
        Subject: CN=6aa55089-9235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d7:59:11:d2:90:c1:34:71:59:73:4d:80:72:
                    b9:a9:90:96:a7:2e:a8:ac:93:1e:cb:81:00:98:37:
                    42:69:92:6d:d3:51:00:10:2e:54:7e:d5:06:30:1c:
                    68:0f:bb:46:ae:e9:cb:0c:98:90:ce:0b:8a:31:b8:
                    86:85:9e:2d:5b:5f:cd:91:aa:26:86:d6:6d:ee:c5:
                    57:d4:e2:a8:64:09:b1:05:04:7a:53:e1:e4:bb:d7:
                    1b:a5:8e:97:f1:45:b9:1a:99:1b:02:0f:14:16:18:
                    72:52:27:1c:2f:7b:52:9c:b4:7d:36:3e:d7:88:65:
                    da:16:2a:13:4f:98:53:83:a5:99:35:59:0b:94:1f:
                    f2:92:f5:c8:14:b4:9e:f1:9d:f2:94:da:98:6c:b5:
                    ac:bd:ee:34:e7:5b:be:bc:e5:fc:07:25:e3:68:ee:
                    7b:8b:b7:1e:3f:48:51:56:be:e3:11:81:8b:6d:18:
                    dd:f4:10:d5:4a:ad:01:aa:23:33:90:44:da:1a:98:
                    8f:24:94:ff:d5:94:48:8f:79:92:23:29:e7:d0:c5:
                    d7:7d:5d:2e:7b:2a:0c:47:7a:37:5b:a5:c6:b8:17:
                    77:67:29:cb:ce:ee:c7:11:e2:04:10:c4:8b:b0:f5:
                    1c:36:4a:ed:5a:b4:ff:80:be:4b:e4:3a:53:20:ff:
                    a9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:74:7E:31:29:37:E5:55:91:B0:35:BC:2C:1A:9B:EF:89:5F:97:18
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14C975F4AEAC11F18CC63619CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         89:f6:57:d1:51:78:6e:13:9f:2a:8b:76:0b:c5:20:37:6f:76:
         c7:21:62:ad:34:59:93:6e:41:b7:b2:cd:1c:15:e7:59:6a:56:
         e0:7d:17:c5:64:85:f5:25:c1:c4:07:91:7f:b2:07:b0:a6:79:
         ef:bd:c6:91:0b:3c:e1:f9:14:85:e2:4e:5c:75:1d:fd:46:f7:
         bd:23:2c:6a:ca:52:cc:99:de:4f:d7:7b:fd:fb:54:f8:1d:a0:
         41:a8:4d:b8:7d:3c:b5:5f:25:a0:98:da:f5:7b:87:92:1b:cc:
         1c:09:7c:1b:03:69:b3:1c:23:7d:b1:44:74:2a:4d:d5:a4:04:
         27:46:16:5a:12:8a:ac:40:4c:c3:73:c2:ef:4f:13:78:59:04:
         cd:ab:af:3c:19:7d:f4:49:50:1d:59:da:90:92:08:5b:d3:a3:
         8e:a6:2f:04:70:29:65:7e:d1:a1:b6:3b:0f:29:5d:43:dd:cd:
         15:8f:1b:c6:27:c9:40:fe:9c:31:be:28:de:1e:39:1d:f1:be:
         79:f1:3b:db:d3:9a:b2:3e:f1:a9:89:81:be:e5:b3:e5:06:bc:
         e4:7b:ef:f5:e0:94:91:a2:0d:f2:f9:11:09:54:b2:d1:6a:03:
         8b:cc:d7:35:39:cb:e9:0f:61:2f:a3:a9:7e:57:77:ee:7b:4b:
         ae:5f:fd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----