Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F1FA5B6AE8F11F1A8D9B9F0CE1D38B0.roa
File:                     3F1FA5B6AE8F11F1A8D9B9F0CE1D38B0.roa (raw, json)
Hash identifier:          DunmveOSfUVV5VNDxHeLtlIFjB7HYZ5kHe0E5IgSgU8=
Subject key identifier:   EE:A6:44:38:2C:12:DD:8B:D7:60:2C:BE:1F:13:19:53:DE:96:30:92
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F1FA5B6AE8F11F1A8D9B9F0CE1D38B0.roa
Signing time:             Sat 12 Sep 2026 09:49:29 +0000
ROA not before:           Sat 12 Sep 2026 09:49:25 +0000
ROA not after:            Tue 22 Sep 2026 09:49:25 +0000
asID:                     6079
IP address blocks:        154.221.192.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124868 (0x1e7c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 12 09:49:25 2026 GMT
            Not After : Sep 22 09:49:25 2026 GMT
        Subject: CN=6aa52029-25d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e1:c4:db:37:76:3a:df:9d:69:10:31:96:32:
                    d5:dc:97:20:68:ed:1b:3a:d0:f1:7f:42:d6:7e:12:
                    4b:d2:e5:b3:64:04:e7:09:62:ce:62:73:d2:63:0a:
                    c8:f7:7c:ab:3d:2a:90:57:a8:ab:a2:44:d8:ee:da:
                    d1:9a:94:c8:a7:0c:f1:19:f5:19:2e:d7:5d:34:dc:
                    86:f6:dd:03:c4:6f:7b:ac:10:7c:2a:1b:a6:af:c6:
                    af:f6:21:2d:fb:e3:f0:96:18:54:05:96:42:e8:17:
                    cf:91:28:58:f2:bf:66:a3:bd:06:8f:3a:ea:ba:27:
                    40:44:39:cb:5e:3e:fa:20:4a:1c:a1:b6:c6:5b:97:
                    b4:c0:df:f0:bb:a8:fb:73:15:b4:f8:13:db:be:99:
                    04:e0:b4:dc:f2:6b:69:dd:c3:9f:39:bf:f7:ad:17:
                    53:58:6f:73:9e:42:c5:a9:93:b1:40:b2:9c:63:c9:
                    42:ef:98:31:14:7f:91:b6:6a:d9:09:36:2d:a1:52:
                    eb:9d:40:4d:d8:78:70:cd:be:1d:8f:aa:0b:59:22:
                    b8:8f:f7:cb:78:74:0c:be:d1:c7:ef:0d:da:36:76:
                    8d:25:32:af:78:a5:07:ad:3a:71:98:4e:4d:64:fa:
                    d6:65:77:4d:ac:e5:a6:a7:b6:60:cb:d4:50:ef:c5:
                    29:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A6:44:38:2C:12:DD:8B:D7:60:2C:BE:1F:13:19:53:DE:96:30:92
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F1FA5B6AE8F11F1A8D9B9F0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.221.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         86:b9:a0:dd:69:16:e1:80:54:05:82:d9:4f:a2:1e:4a:3c:50:
         aa:7e:8f:92:e2:19:06:78:75:50:af:29:69:2b:e3:77:73:5c:
         52:ce:10:1e:10:31:b6:76:35:37:dd:1c:1a:32:f7:6f:09:1a:
         34:a0:25:63:01:de:41:19:11:2f:8d:62:ab:16:dc:b8:63:99:
         98:d1:50:f4:d5:1b:3c:7f:5a:9f:66:0f:d4:cf:67:d1:36:f7:
         d2:d8:27:1d:62:fa:0d:b2:d2:5c:45:1d:33:77:44:1c:f0:9a:
         3c:5b:41:9c:75:0e:3c:a9:88:7a:4e:ab:15:c1:bf:9d:c6:7b:
         25:84:b8:51:5e:cc:ee:24:8c:03:ba:69:d6:50:d8:38:2d:2a:
         9c:f7:23:7d:a8:67:40:c8:ef:27:d4:a6:ad:3f:10:d3:0c:3c:
         bb:2f:d8:91:d5:47:43:4c:af:f5:f6:8f:5a:15:30:c8:2b:a1:
         b9:ac:15:61:14:16:09:37:31:31:bf:f3:38:a7:6b:85:e8:2d:
         74:d9:5e:b1:5c:5a:1e:96:f8:08:b7:9b:4f:3b:cd:76:4e:e0:
         c4:b4:56:a3:70:bf:6b:f5:e9:bd:72:fc:a4:ba:6d:c7:73:90:
         a0:fc:46:92:93:ae:34:d4:e1:3b:96:dc:f1:e0:29:c8:45:70:
         ec:cf:d0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----