Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6180E820AB5D11F1A5E08C13CF1D38B0.roa
File:                     6180E820AB5D11F1A5E08C13CF1D38B0.roa (raw, json)
Hash identifier:          +TNeSuFk0KW1xCwE/bP3q3n0FuuyMa1FanhC5l2shJo=
Subject key identifier:   54:E5:AD:58:A5:31:93:3D:C6:23:4A:D6:BA:F5:4F:A5:1E:FB:AD:85
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E64A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6180E820AB5D11F1A5E08C13CF1D38B0.roa
Signing time:             Tue 08 Sep 2026 08:14:58 +0000
ROA not before:           Tue 08 Sep 2026 08:14:54 +0000
ROA not after:            Mon 21 Sep 2026 08:14:54 +0000
asID:                     23674
IP address blocks:        154.192.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124490 (0x1e64a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 08:14:54 2026 GMT
            Not After : Sep 21 08:14:54 2026 GMT
        Subject: CN=6a9fc402-c438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:63:d6:c2:b4:e0:55:da:c7:02:48:4a:6d:09:
                    84:35:1b:c0:c3:40:f0:aa:bc:6a:45:3f:96:3e:ee:
                    8a:36:f6:fd:f1:cd:e7:c5:84:22:d4:6c:38:7c:46:
                    f5:db:4f:97:49:5d:c8:05:7e:72:c8:82:a7:29:79:
                    9d:79:ff:65:62:4b:cd:c1:9d:7e:b1:2f:46:47:8d:
                    70:d2:59:ab:ff:2c:e0:4c:e9:d9:b2:7e:3f:db:28:
                    95:b4:ab:d8:54:d7:6f:2e:1e:04:02:bc:af:43:17:
                    aa:7c:4d:72:02:b9:f0:60:93:a5:eb:74:07:84:85:
                    52:84:18:52:7d:77:e4:36:4d:d8:e8:1f:a0:17:a0:
                    91:ed:b5:e3:03:0b:c3:2b:0e:c4:c5:e9:dc:32:92:
                    76:a9:b1:1f:34:2c:0c:29:da:f4:22:46:8d:e2:b0:
                    6d:78:07:0f:db:28:d5:62:8b:7d:c5:11:ce:77:23:
                    35:ad:bd:ab:71:e3:84:8f:52:15:cc:37:28:3d:fd:
                    b4:5c:5f:aa:b9:3a:eb:0a:50:5d:62:78:15:03:a7:
                    b4:54:9d:a6:9e:84:2d:82:d1:4a:64:19:dc:59:39:
                    c6:8f:54:bd:fb:01:12:2f:60:59:8a:36:f9:da:14:
                    01:17:5b:12:b9:93:55:c9:9f:46:9d:cd:ba:fb:6e:
                    03:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E5:AD:58:A5:31:93:3D:C6:23:4A:D6:BA:F5:4F:A5:1E:FB:AD:85
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6180E820AB5D11F1A5E08C13CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.192.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5f:ee:d9:c5:07:46:ef:24:cf:51:ff:ef:de:fa:f4:7f:b9:2f:
         0b:2a:44:8c:31:4c:69:f6:2a:08:f4:34:d1:6a:1b:17:fb:d9:
         2e:51:48:37:df:f8:d6:23:6e:de:c8:b7:c6:0c:c4:09:fa:b7:
         f0:fe:82:1c:fb:74:d8:c5:7c:ba:e1:23:bc:8a:0e:52:3f:70:
         d7:69:8d:31:72:78:c3:d3:76:73:49:5e:fe:0a:8e:65:7f:0b:
         0f:33:59:4c:05:3e:29:a3:05:3a:5e:33:ed:c4:a4:2c:74:13:
         76:8f:51:7e:53:c7:f9:a7:dc:5a:06:cf:ab:f2:c4:54:81:b0:
         fd:28:e5:e0:85:34:01:d5:8a:4e:f7:4a:75:70:35:51:b5:28:
         53:eb:1f:2d:d0:b1:24:04:30:f3:2a:36:1e:26:76:d2:9c:13:
         fb:36:23:58:4b:c4:bd:83:97:bc:30:c3:d2:a9:68:1c:58:17:
         6a:18:ad:cf:4a:88:a3:61:ba:2b:d0:ea:1f:12:7e:7c:dc:f5:
         3a:f5:3e:79:6a:0a:76:61:f6:ae:a8:b9:a2:a2:0f:a3:2f:d8:
         02:51:2c:2e:ca:90:8b:93:3c:7d:53:e3:cd:1f:45:9f:59:35:
         64:a6:cc:87:54:e2:0e:79:2c:94:59:f5:4f:90:cb:f8:72:86:
         4f:f4:98:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----