Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A13E45F4AEB211F1986B1EC1CE1D38B0.roa
File:                     A13E45F4AEB211F1986B1EC1CE1D38B0.roa (raw, json)
Hash identifier:          rNR8l4BuRGGVs9atDohFcJgqRT9B8CoGOVShoA9gVLI=
Subject key identifier:   0A:EB:34:71:B7:25:41:09:0D:ED:55:D0:14:67:8F:D4:E5:AB:4C:A0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A13E45F4AEB211F1986B1EC1CE1D38B0.roa
Signing time:             Sat 12 Sep 2026 14:02:46 +0000
ROA not before:           Sat 12 Sep 2026 14:02:42 +0000
ROA not after:            Tue 22 Sep 2026 14:02:42 +0000
asID:                     8796
IP address blocks:        154.193.192.0/20 maxlen: 24
                          154.193.208.0/21 maxlen: 24
                          154.193.216.0/21 maxlen: 24
                          154.193.224.0/20 maxlen: 24
                          154.193.240.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124902 (0x1e7e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 12 14:02:42 2026 GMT
            Not After : Sep 22 14:02:42 2026 GMT
        Subject: CN=6aa55b86-5a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9f:0a:5c:92:33:90:86:25:60:56:39:a3:23:
                    71:62:95:d3:c2:1e:4c:8d:94:02:35:46:95:d1:31:
                    f0:56:5d:78:82:84:f7:73:00:66:8b:49:37:79:a3:
                    ab:fa:aa:57:5e:23:84:50:c7:c9:fa:93:3a:62:28:
                    70:e8:75:27:56:67:c1:0f:b7:56:d7:bc:52:26:d4:
                    70:37:a7:44:42:f1:ca:cc:c0:4e:2d:9c:ee:d2:07:
                    95:87:72:28:9b:d7:fa:15:20:e8:f7:aa:cd:07:dc:
                    d3:9e:33:aa:fb:ab:2e:0b:17:28:54:77:5b:9f:df:
                    ff:4d:ff:e9:60:b4:41:56:1b:cc:84:f1:83:f7:fc:
                    50:8f:18:ef:2d:31:7b:ef:39:b9:71:83:27:95:66:
                    66:9f:23:3e:0f:26:64:c0:2a:cb:cc:70:f2:ec:b3:
                    19:7e:ab:b8:9c:7a:3a:21:3b:43:8b:98:50:eb:ee:
                    43:68:08:cb:e6:5d:82:5f:9e:30:d3:b8:b7:67:5d:
                    9f:69:a2:1c:bc:6f:47:61:7e:c8:fd:d3:92:71:6d:
                    be:79:f7:55:6a:04:b7:b7:08:a9:ea:9b:58:95:71:
                    f6:d1:60:e4:b0:15:84:23:31:1d:7f:88:6d:9b:48:
                    c5:12:f1:07:27:7b:92:de:49:56:6a:3a:49:6a:5a:
                    1a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EB:34:71:B7:25:41:09:0D:ED:55:D0:14:67:8F:D4:E5:AB:4C:A0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A13E45F4AEB211F1986B1EC1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         95:83:15:7f:22:bb:2d:f7:8a:81:ef:9e:33:fb:8d:58:cd:32:
         cc:08:66:1d:ec:58:76:09:d3:6b:e1:44:c4:6d:0e:7f:a1:96:
         e4:23:85:40:c6:ec:33:6e:39:f0:f5:72:8e:f7:e8:20:d9:c9:
         d6:93:fc:66:81:ef:ba:10:1d:b0:e7:fe:56:ee:6b:45:28:a0:
         1e:83:3d:f1:66:5c:64:9a:12:7a:64:14:51:d3:a6:28:d1:62:
         1f:9b:7b:6d:2a:c0:0f:30:9f:e5:a7:89:7f:cd:65:a5:cd:2d:
         87:e5:51:be:d1:38:4f:fc:79:0a:68:44:1e:d6:90:be:40:e5:
         bb:49:4b:8f:a4:36:c0:7d:9a:18:13:e8:1c:a8:67:e5:76:81:
         87:ee:de:83:f6:5e:ea:fa:0a:b0:45:92:41:04:5e:70:78:fd:
         23:40:d8:f8:b5:65:b3:d0:17:a3:fc:77:21:b1:90:45:6f:d5:
         b3:58:5e:d9:b9:2b:c6:f7:cf:f4:7e:17:6d:5a:b5:24:58:f8:
         d3:fc:ed:82:e2:e7:45:7b:e9:82:7a:5c:56:79:8a:d9:35:f5:
         d6:c2:e5:09:ac:97:48:ac:72:90:93:32:9a:1a:95:2c:99:16:
         db:25:a7:a5:f6:96:c9:5d:d4:7f:7a:f2:75:d8:bf:99:63:65:
         df:34:f7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----