Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A75C173EB3F011F1B82216DFCE1D38B0.roa
File:                     A75C173EB3F011F1B82216DFCE1D38B0.roa (raw, json)
Hash identifier:          /hhL7t/1AWUXurVHk/FmafMC2VunVbNrSIltsIWVC4E=
Subject key identifier:   E0:8C:DD:F4:35:47:7F:1C:A0:A8:AC:4A:C3:10:7D:15:61:04:17:0D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E8CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A75C173EB3F011F1B82216DFCE1D38B0.roa
Signing time:             Sat 19 Sep 2026 06:09:21 +0000
ROA not before:           Sat 19 Sep 2026 06:09:17 +0000
ROA not after:            Tue 06 Oct 2026 06:09:17 +0000
asID:                     264605
IP address blocks:        154.88.192.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125130 (0x1e8ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 19 06:09:17 2026 GMT
            Not After : Oct  6 06:09:17 2026 GMT
        Subject: CN=6aae2711-5a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:2b:3f:83:d8:16:d6:16:e6:4c:9f:a6:51:
                    23:0d:4e:c8:ab:34:da:bb:db:65:a1:63:ea:46:a1:
                    a5:50:29:b7:6d:72:80:9d:48:76:e6:ea:fa:a9:a9:
                    52:91:ed:bb:7a:81:8e:55:28:8c:07:0f:b6:9d:ff:
                    f0:2a:90:39:cb:d9:7d:ce:11:41:54:87:fa:f9:04:
                    e0:c2:22:4f:48:5e:1e:c5:fa:b6:eb:75:70:34:85:
                    76:18:5c:fa:d6:d9:d0:23:91:5e:92:30:66:f7:16:
                    7e:ea:a1:32:7c:37:59:75:80:a4:4b:b6:85:11:03:
                    b1:ca:c0:71:90:af:86:6c:9f:ee:b3:9f:83:37:76:
                    2e:9c:b3:b2:78:6b:4f:d9:dd:cd:7f:74:bf:59:bc:
                    64:ab:86:17:49:e9:d7:aa:c3:f9:ec:7f:0f:a5:32:
                    74:90:6f:23:31:18:55:8a:c7:3b:72:1c:34:93:7f:
                    17:02:bb:45:c7:10:db:bb:1f:b9:6a:cb:07:b2:ab:
                    00:b5:1c:fb:e6:f0:2e:23:46:85:cb:58:ae:ae:db:
                    93:46:0e:0b:b9:63:81:af:92:cc:0d:6c:c6:c6:d1:
                    9c:5f:9e:1f:60:af:0b:1c:bc:3b:1d:ab:c2:f9:38:
                    dd:de:67:5b:5a:85:3b:63:1f:da:9b:a3:c1:b6:a0:
                    c9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8C:DD:F4:35:47:7F:1C:A0:A8:AC:4A:C3:10:7D:15:61:04:17:0D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A75C173EB3F011F1B82216DFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ba:fc:9d:c5:b9:9a:52:2b:1c:02:74:d1:9b:02:b3:0b:40:7a:
         d2:6a:5e:37:fc:d1:eb:52:3c:6c:71:00:dd:70:81:01:02:1d:
         f6:d0:6b:93:5f:b0:a6:72:7f:53:b9:37:66:e5:b3:e9:05:af:
         54:55:24:49:f7:43:67:45:8b:07:21:2c:42:3d:38:8e:f9:fc:
         5d:4e:9a:ec:f8:53:86:7f:e9:b9:66:f8:75:58:50:ce:02:4d:
         66:4d:b0:0c:4f:d4:5b:66:66:70:62:a4:02:e9:08:d3:88:8b:
         d7:9f:f9:4b:92:52:6c:bb:8a:40:2a:72:e5:31:9f:66:b4:8b:
         01:e9:79:3a:7e:23:c1:31:22:9b:e4:c7:62:47:ee:3d:14:29:
         7d:e1:0b:aa:a3:77:11:16:1b:de:87:61:72:b0:a4:3b:62:dc:
         00:ef:06:f8:a8:91:c3:fc:d7:9a:3b:e4:de:b1:5d:61:91:9b:
         6a:78:76:c5:6d:eb:60:d6:9b:9d:88:88:60:89:99:90:66:d4:
         bb:aa:72:68:f3:fd:01:b4:b0:85:42:82:85:18:4e:76:36:e3:
         50:38:12:a6:32:27:11:93:57:85:1e:35:7f:ca:43:a3:19:e2:
         03:ad:ad:44:ef:eb:72:41:3f:80:0f:f2:c0:27:96:33:d8:56:
         77:87:a8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----