Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCA3F274AE8711F19721A3C3CE1D38B0.roa
File:                     BCA3F274AE8711F19721A3C3CE1D38B0.roa (raw, json)
Hash identifier:          ZQjL2EPFwGKCsLW99YBQZIXKKBr96QaFKpwZVoKO18c=
Subject key identifier:   8D:2D:2D:E5:DB:48:96:1F:06:27:E5:97:FB:4C:F1:1E:C9:73:2E:F4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCA3F274AE8711F19721A3C3CE1D38B0.roa
Signing time:             Sat 12 Sep 2026 08:55:44 +0000
ROA not before:           Sat 12 Sep 2026 08:55:40 +0000
ROA not after:            Tue 22 Sep 2026 08:55:40 +0000
asID:                     329611
IP address blocks:        154.211.4.0/22 maxlen: 24
                          154.211.4.0/23 maxlen: 24
                          154.211.4.0/24 maxlen: 24
                          154.211.5.0/24 maxlen: 24
                          154.211.6.0/23 maxlen: 24
                          154.211.6.0/24 maxlen: 24
                          154.211.7.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124856 (0x1e7b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 12 08:55:40 2026 GMT
            Not After : Sep 22 08:55:40 2026 GMT
        Subject: CN=6aa51390-e2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4e:7e:f3:3e:ed:ce:83:b4:1f:a9:6d:8c:7d:
                    59:ef:90:14:b7:60:42:b8:50:22:92:fb:86:31:35:
                    15:2f:88:76:08:2a:dd:f0:06:0e:bd:a2:c0:57:b6:
                    88:3e:4b:93:d4:58:ad:34:81:e7:8e:f6:0c:89:e5:
                    6f:54:e3:01:f4:36:1a:95:34:e1:39:90:7e:e0:2f:
                    c4:f7:d7:78:65:ba:bc:fb:ab:4a:97:cd:7c:a2:77:
                    ed:e6:cd:3f:cf:a1:e0:7b:63:a2:7d:19:19:59:b4:
                    fe:5a:0d:85:aa:a8:d6:47:06:13:91:8b:dd:11:48:
                    64:b3:83:ba:c5:eb:3b:a7:0c:bf:24:8f:d7:2c:7f:
                    3e:3d:66:8a:55:e1:66:1b:15:c3:d5:19:7d:02:61:
                    a3:82:56:6e:ec:d9:a7:7a:0e:bf:9c:7a:54:66:d8:
                    c6:f4:fd:1e:88:5a:07:22:53:ac:3b:15:57:87:f1:
                    0f:2f:0c:00:74:75:ae:63:d6:7f:2b:21:bc:d8:78:
                    4f:dd:df:ea:a9:2b:5f:e9:5b:30:27:82:9b:5a:9c:
                    5b:48:74:57:1a:02:f7:b9:16:d9:9b:a9:78:de:93:
                    df:a8:b7:22:64:b0:3d:5e:63:fb:10:b7:85:7d:6a:
                    91:a8:ba:e1:ee:ce:5c:25:8d:7f:b6:8a:0e:0d:85:
                    a6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2D:2D:E5:DB:48:96:1F:06:27:E5:97:FB:4C:F1:1E:C9:73:2E:F4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCA3F274AE8711F19721A3C3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.211.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:b1:fa:c7:84:1d:40:12:d7:39:ae:70:12:3a:4d:21:bd:8d:
         b9:c8:87:23:2d:5f:a3:b7:e1:2d:95:b5:b1:81:00:2b:10:9d:
         1e:3c:fc:90:a6:96:9d:2a:8b:39:6e:71:d6:bd:62:64:61:3f:
         d3:75:2e:16:5c:95:02:46:8a:2b:47:33:7c:5a:43:3e:59:41:
         92:c3:61:47:3c:46:78:bc:fe:bf:74:0f:0e:10:fb:f7:85:54:
         bb:c1:cc:a0:80:9f:76:bd:27:a1:6a:fd:c2:d9:24:a7:aa:a9:
         14:11:a9:37:cc:46:13:95:5a:51:da:8c:eb:72:34:15:e0:15:
         58:6a:8a:51:e5:33:15:60:08:d8:c0:45:ae:2f:cc:5c:e7:1b:
         66:83:2c:df:c6:e1:4d:c0:fa:67:2a:c7:6a:cd:24:20:20:84:
         8c:3a:83:33:28:0c:23:01:40:86:3d:2a:fa:8b:12:94:13:bc:
         22:54:30:0a:90:aa:64:35:88:63:95:4c:fb:bf:2f:01:a2:ca:
         4c:c8:3e:01:86:2c:82:8f:05:02:24:43:6b:12:8b:51:43:a3:
         69:aa:5c:63:72:dd:c5:a6:f5:80:92:04:11:5e:c5:2f:61:19:
         00:5e:b5:9d:94:2b:11:be:2a:8d:5c:27:3d:14:b2:a5:41:f9:
         bb:8f:de:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAee4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTEyMDg1NTQwWhcNMjYwOTIyMDg1NTQwWjAYMRYw
FAYDVQQDEw02YWE1MTM5MC1lMmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvk5+8z7tzoO0H6ltjH1Z75AUt2BCuFAikvuGMTUVL4h2CCrd8AYOvaLA
V7aIPkuT1FitNIHnjvYMieVvVOMB9DYalTThOZB+4C/E99d4Zbq8+6tKl818onft
5s0/z6Hge2OifRkZWbT+Wg2FqqjWRwYTkYvdEUhks4O6xes7pwy/JI/XLH8+PWaK
VeFmGxXD1Rl9AmGjglZu7Nmneg6/nHpUZtjG9P0eiFoHIlOsOxVXh/EPLwwAdHWu
Y9Z/KyG82HhP3d/qqStf6VswJ4KbWpxbSHRXGgL3uRbZm6l43pPfqLciZLA9XmP7
ELeFfWqRqLrh7s5cJY1/tooODYWm+wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFI0t
LeXbSJYfBifll/tM8R7Jcy70MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQ0EzRjI3NEFFODcxMUYxOTcyMUEzQzNDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmtMEMA0GCSqGSIb3DQEB
CwUAA4IBAQBisfrHhB1AEtc5rnASOk0hvY25yIcjLV+jt+EtlbWxgQArEJ0ePPyQ
ppadKos5bnHWvWJkYT/TdS4WXJUCRoorRzN8WkM+WUGSw2FHPEZ4vP6/dA8OEPv3
hVS7wcyggJ92vSehav3C2SSnqqkUEak3zEYTlVpR2ozrcjQV4BVYaopR5TMVYAjY
wEWuL8xc5xtmgyzfxuFNwPpnKsdqzSQgIISMOoMzKAwjAUCGPSr6ixKUE7wiVDAK
kKpkNYhjlUz7vy8BospMyD4BhiyCjwUCJENrEotRQ6Npqlxjct3FpvWAkgQRXsUv
YRkAXrWdlCsRviqNXCc9FLKlQfm7j97v
-----END CERTIFICATE-----