Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/185C21B8AE8D11F1B228A0E4CE1D38B0.roa
File:                     185C21B8AE8D11F1B228A0E4CE1D38B0.roa (raw, json)
Hash identifier:          u02VFb+TIZL0jl3//vqSg0li7mShBjUlIfNncSMVOBM=
Subject key identifier:   F9:64:CC:9E:5F:89:F5:6D:31:76:71:D0:7E:B2:B7:0A:98:97:E6:18
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/185C21B8AE8D11F1B228A0E4CE1D38B0.roa
Signing time:             Sat 12 Sep 2026 09:34:05 +0000
ROA not before:           Sat 12 Sep 2026 09:34:01 +0000
ROA not after:            Tue 22 Sep 2026 09:34:01 +0000
asID:                     400619
IP address blocks:        154.211.4.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124864 (0x1e7c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 12 09:34:01 2026 GMT
            Not After : Sep 22 09:34:01 2026 GMT
        Subject: CN=6aa51c8d-e253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:48:f8:f9:eb:2c:a0:5a:14:85:f8:db:e4:1a:
                    a9:7e:fd:05:6c:d8:ff:03:0c:b5:27:99:31:99:c6:
                    1c:45:11:64:68:a5:37:28:5e:e0:c6:34:a2:db:ca:
                    5c:2c:53:d3:7a:e6:9b:46:5c:b2:cb:d5:56:d0:c3:
                    cc:3e:46:95:b1:47:51:fd:d9:85:2b:a7:59:a8:0a:
                    d6:ef:c1:9d:de:25:4d:4e:ba:d6:ab:b2:6d:4e:33:
                    07:30:ff:91:c3:cf:56:26:8d:14:89:6f:36:7c:37:
                    9c:63:5f:bb:32:fb:68:40:fe:f6:d2:f7:77:63:a7:
                    e3:ad:f4:dc:de:d4:c4:7e:cd:a2:d9:ad:34:6f:97:
                    8c:45:0e:ab:f6:3b:a5:8a:06:49:3e:ff:83:5e:30:
                    5f:97:19:15:43:cf:8f:e5:fa:32:6c:69:6a:8e:cc:
                    d8:7e:81:09:ec:ea:a0:e2:f3:74:9f:4f:3a:ac:28:
                    be:32:5f:39:4f:b6:68:08:ae:92:3c:01:69:02:98:
                    b5:f3:91:1c:f6:69:56:ad:11:79:35:38:4f:77:4b:
                    9b:f9:b0:18:48:45:b4:bf:86:14:44:78:8e:b9:b2:
                    8b:e5:54:a5:3c:e6:b4:d9:87:f3:f9:96:4f:4e:c5:
                    dc:4d:d9:a4:3b:19:47:a0:0f:e2:37:07:84:cf:df:
                    be:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:64:CC:9E:5F:89:F5:6D:31:76:71:D0:7E:B2:B7:0A:98:97:E6:18
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/185C21B8AE8D11F1B228A0E4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.211.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:1b:d1:6c:27:a0:64:49:27:6a:f9:85:85:b0:2c:a6:61:50:
         7f:30:4f:7d:ab:68:1c:b8:59:61:98:50:d8:2f:92:20:25:27:
         32:a2:c1:7b:69:33:b2:62:8c:54:1a:bc:44:67:15:71:80:0b:
         ce:99:d4:2f:7a:b4:ad:47:21:96:2f:fa:3f:dc:ed:1b:da:10:
         28:6a:6f:e9:c9:8a:1b:5e:b5:35:f6:27:b6:b1:84:1a:a8:a8:
         1f:1b:d8:6a:24:17:67:6b:d3:6b:ea:fe:b0:c3:2e:40:6f:f8:
         37:64:29:1d:ca:26:0a:74:3c:6f:62:05:d9:b1:ad:3e:5d:23:
         9b:f7:7d:87:93:f3:f8:6e:f5:bc:a1:d9:81:85:e9:96:02:53:
         c9:7a:57:bd:53:cb:c2:d0:96:fb:8c:53:22:52:4e:fe:c7:4d:
         ac:56:f0:5e:e1:b2:82:21:d8:58:8c:af:b3:de:fa:b0:09:22:
         65:e9:9c:f6:5d:fb:11:e6:a3:75:51:e1:ea:2d:ea:69:65:ec:
         31:f2:f2:6e:6d:04:26:96:08:ae:2d:d4:02:0e:c6:db:e0:bb:
         e8:61:fa:28:4d:cf:0a:b8:b1:89:fa:ae:f8:6c:8a:cf:42:f9:
         c9:da:0a:67:c8:95:bd:5e:61:81:b3:c3:af:f6:d5:b3:f5:f2:
         24:97:aa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----