Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67042E12AE8011F1818F6017CF1D38B0.roa
File:                     67042E12AE8011F1818F6017CF1D38B0.roa (raw, json)
Hash identifier:          YQhtuAw4umcCB4Ot3DCIX67WR9jT5yxDBosOokAqZHQ=
Subject key identifier:   00:CE:3E:40:2E:02:1E:7D:E5:A1:C2:FD:06:59:B5:6E:63:B6:E2:63
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67042E12AE8011F1818F6017CF1D38B0.roa
Signing time:             Sat 12 Sep 2026 08:03:13 +0000
ROA not before:           Sat 12 Sep 2026 08:03:10 +0000
ROA not after:            Mon 21 Sep 2026 08:03:10 +0000
asID:                     272011
IP address blocks:        154.88.189.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124848 (0x1e7b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 12 08:03:10 2026 GMT
            Not After : Sep 21 08:03:10 2026 GMT
        Subject: CN=6aa50741-a1be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:be:c4:b4:23:71:d1:ab:4f:d9:31:4e:65:5c:
                    73:fd:b3:0e:b4:a6:6f:84:ea:b8:a2:60:5e:4d:0f:
                    d7:d4:90:52:95:b6:81:95:58:5e:f7:e4:54:87:5b:
                    dd:d0:2e:30:03:c0:19:48:bd:67:fc:f5:69:c4:30:
                    68:ab:e0:ab:f5:13:da:f6:cc:58:27:cd:a9:8e:0b:
                    a2:5e:78:9d:02:f3:d2:0f:3e:a1:3a:b0:6c:9a:30:
                    d5:a7:3a:bb:84:20:09:db:45:16:a5:a3:0f:f7:80:
                    4a:66:de:11:b4:e0:b6:bc:be:5e:5c:43:81:b3:8f:
                    15:66:2a:8d:8d:15:5e:65:c0:4d:d1:8c:6c:0c:db:
                    e6:e8:6f:36:1e:2b:17:9f:03:18:66:7a:73:9c:8a:
                    74:64:34:5f:c6:f3:23:78:62:cb:11:23:09:b4:c5:
                    a9:d9:17:5d:41:76:25:c7:01:c7:44:64:8f:bd:04:
                    71:4c:7c:8b:dc:bb:67:3d:e5:0a:41:a9:39:98:5c:
                    4c:e6:31:9f:71:92:31:f2:3a:f1:09:c1:09:07:76:
                    2a:03:b0:46:e8:19:c6:da:e8:92:f1:24:ed:4f:78:
                    51:59:a3:2f:02:cc:c3:38:b2:a7:bc:f6:b7:23:3b:
                    db:2f:c3:41:f0:c3:7d:7e:0c:67:61:a1:dd:85:cf:
                    d0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CE:3E:40:2E:02:1E:7D:E5:A1:C2:FD:06:59:B5:6E:63:B6:E2:63
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67042E12AE8011F1818F6017CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:77:09:5d:4d:ca:27:45:05:08:ab:57:d9:57:56:9f:97:1f:
         5a:5a:31:07:0f:3f:06:8e:66:50:ee:95:fc:d4:3d:c5:f1:f8:
         e0:ef:2f:46:f8:d7:a4:87:5d:cb:bd:7e:e4:a9:3d:07:cb:d6:
         c3:ce:15:81:af:ff:e8:7e:f5:65:e3:4b:47:80:79:76:18:90:
         fe:75:76:f3:bf:51:7e:c5:f9:80:2d:f1:f0:28:b5:e4:b8:ce:
         96:a6:00:58:b8:ec:0b:d4:05:37:bc:01:66:c0:c5:78:fa:38:
         81:b2:80:29:e6:b4:63:a7:59:e2:f6:48:8f:c2:d1:43:b7:0b:
         24:97:98:7c:39:bf:41:55:fe:09:0c:06:f4:1c:a2:6a:10:ac:
         39:e2:a0:04:f6:4a:0b:cd:f7:37:0f:b4:12:a0:1e:d2:99:8e:
         05:68:9c:54:27:32:50:6b:03:b2:d2:e8:f9:3b:49:b9:24:91:
         57:b9:e5:33:8c:6f:83:d2:c6:b7:3c:63:9d:3f:d0:9c:2b:95:
         a3:b2:80:10:50:b7:22:04:b6:c4:25:1c:c8:18:2e:52:92:55:
         d9:a6:a8:9c:01:5e:a2:2b:96:53:39:33:eb:2d:6b:03:89:7d:
         8e:82:75:bc:6c:77:20:4f:6d:ec:cb:43:f5:04:4c:d7:03:f3:
         62:ea:7b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----