Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A15AA416AE8411F19D9A24B3CE1D38B0.roa
File:                     A15AA416AE8411F19D9A24B3CE1D38B0.roa (raw, json)
Hash identifier:          HQNPcjHC7fg20FiqawvPZABFkNkyopJc/TSELEFeUU8=
Subject key identifier:   E3:5D:58:DF:E8:85:0B:19:33:9D:1F:FF:2D:FE:E8:AF:93:E4:AB:20
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A15AA416AE8411F19D9A24B3CE1D38B0.roa
Signing time:             Sat 12 Sep 2026 08:33:29 +0000
ROA not before:           Sat 12 Sep 2026 08:33:25 +0000
ROA not after:            Tue 22 Sep 2026 08:33:25 +0000
asID:                     154376
IP address blocks:        154.193.240.0/21 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124854 (0x1e7b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 12 08:33:25 2026 GMT
            Not After : Sep 22 08:33:25 2026 GMT
        Subject: CN=6aa50e59-6c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:cb:87:73:66:32:7c:5e:74:6a:57:04:bb:
                    ec:33:7a:4f:a8:86:b4:70:b3:ab:5b:94:13:f4:be:
                    f5:ba:5b:b5:a7:ea:3d:83:c1:c6:54:5c:f4:01:b5:
                    8d:f9:f8:2e:88:d6:a0:fa:a5:6f:eb:a9:a1:99:32:
                    97:55:2d:89:cb:a2:47:42:59:d5:6a:08:a8:c1:c7:
                    8a:8a:fd:75:90:f8:1c:81:03:72:a9:c8:c6:ca:0a:
                    bb:dd:7f:55:e4:1a:af:c5:8e:1f:97:0e:f6:84:30:
                    1f:5b:4c:47:a7:78:50:4d:3a:36:5c:e9:c1:01:6b:
                    ff:ed:f7:39:90:64:30:ac:0b:cd:9f:96:e3:70:20:
                    92:7b:13:14:f4:ba:ed:dc:59:33:ff:79:e8:2d:e1:
                    48:93:33:48:7f:ef:4e:dc:14:43:fd:b4:13:2a:b5:
                    ef:4a:1b:7d:33:1c:db:00:e2:34:41:7f:2f:e6:b3:
                    9a:ee:34:1b:04:b3:85:4f:fc:90:21:54:32:d5:4d:
                    b3:d4:52:73:74:d1:82:77:01:32:bc:52:25:fe:f2:
                    af:34:ff:ed:3f:ce:66:99:f7:87:79:65:b2:a7:1f:
                    17:ff:ec:41:70:6c:47:be:e9:18:99:28:ff:09:4a:
                    16:05:e0:33:da:da:30:ba:3c:57:f3:97:84:f1:2f:
                    d1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5D:58:DF:E8:85:0B:19:33:9D:1F:FF:2D:FE:E8:AF:93:E4:AB:20
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A15AA416AE8411F19D9A24B3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:08:4a:8f:cb:5d:1c:04:7d:6b:33:1e:46:3e:87:a4:e2:80:
         a1:4d:87:87:6f:ae:a2:41:28:f0:f1:64:3f:30:67:42:46:4c:
         a0:5c:f8:01:ac:d4:e8:19:85:68:6a:6f:b9:78:5c:27:5a:19:
         63:6e:98:f0:a0:9a:f3:2a:20:9c:1d:39:af:de:84:7b:7e:ca:
         e2:5d:2f:7e:98:90:b2:26:13:bc:27:0f:3d:35:50:32:4e:f9:
         d9:bb:b0:fa:b3:bc:87:a9:d7:1e:bf:b4:f3:f5:5a:af:32:b1:
         8c:4a:17:3f:0b:75:ca:11:8f:b9:e8:82:57:45:91:1d:da:84:
         e6:ef:48:01:dd:90:29:10:01:47:f1:5f:61:06:93:fa:ef:d2:
         d1:94:77:73:21:56:6f:63:79:ef:7d:ae:7c:19:6e:55:ab:3e:
         31:86:7a:39:c4:6e:81:cf:23:81:10:e0:12:28:24:2f:75:e4:
         63:14:5e:0d:aa:43:da:52:43:29:aa:c0:ab:e7:27:52:9a:60:
         d4:a8:c8:d0:f8:e3:01:31:07:9f:99:5e:06:2d:c6:99:1f:13:
         7a:06:ff:fe:83:87:09:52:03:eb:11:33:e4:56:d6:50:9e:50:
         b3:67:fb:25:54:9f:e6:06:e0:09:57:13:63:43:78:07:a4:f1:
         8f:d2:e7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----