Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8D9BC16A0C411F1B5C836E1CE1D38B0.roa
File:                     C8D9BC16A0C411F1B5C836E1CE1D38B0.roa (raw, json)
Hash identifier:          DmUSLRi+gpTO9W+5HgITtqr9iLckRRAlLdfhMMR7j+o=
Subject key identifier:   6B:28:93:8D:85:E7:E3:FE:F9:31:EC:98:28:C4:C9:D8:87:CA:8F:F6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E308
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8D9BC16A0C411F1B5C836E1CE1D38B0.roa
Signing time:             Tue 25 Aug 2026 20:37:27 +0000
ROA not before:           Tue 25 Aug 2026 20:37:23 +0000
ROA not after:            Sun 20 Sep 2026 20:37:23 +0000
asID:                     273155
IP address blocks:        154.200.236.0/24 maxlen: 24
                          154.200.237.0/24 maxlen: 24
                          154.200.238.0/24 maxlen: 24
                          154.200.239.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123656 (0x1e308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 20:37:23 2026 GMT
            Not After : Sep 20 20:37:23 2026 GMT
        Subject: CN=6a8dfd07-0f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5e:a7:30:1b:0e:3f:ce:c2:3d:9c:b1:8e:a9:
                    93:11:0b:4c:ca:1f:66:b4:6a:1a:5c:9a:50:0d:d5:
                    37:14:46:78:4e:aa:b7:ee:c3:fd:44:bd:f6:63:2c:
                    76:ec:3f:36:a9:b2:49:52:d6:ac:b5:92:fc:9c:c5:
                    bc:ca:e1:01:b7:27:85:dc:85:ad:40:fe:5c:ba:63:
                    c6:d0:a4:32:ec:e9:0f:0f:7d:35:ec:4c:c9:27:24:
                    8e:d7:56:75:90:51:13:18:25:29:88:69:80:c6:cb:
                    25:e9:f8:43:ab:03:d0:e4:43:22:58:85:d1:87:64:
                    f3:1a:04:be:46:9a:b3:cc:50:8b:2f:50:2b:c4:34:
                    e8:99:c8:38:d6:4c:8f:6f:70:59:52:4d:5b:1e:f3:
                    80:25:e1:86:bf:ad:f9:47:d6:fd:1d:3c:65:43:38:
                    7a:1f:50:34:c8:f2:46:aa:6d:f8:1e:4a:ef:1e:b1:
                    9a:67:72:3a:db:d1:96:c8:eb:4b:42:1a:54:f9:a6:
                    66:f0:45:4f:dd:f3:1d:11:ae:97:e2:ba:b4:c9:a6:
                    e5:b1:cc:5e:bc:c8:63:f0:db:82:d3:d7:86:f3:af:
                    0b:4b:1f:7a:72:2d:a0:ca:a2:8f:cf:7d:b6:49:ef:
                    d6:cb:40:29:27:9f:f7:b3:66:5a:fa:cd:a5:6f:5c:
                    59:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:28:93:8D:85:E7:E3:FE:F9:31:EC:98:28:C4:C9:D8:87:CA:8F:F6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8D9BC16A0C411F1B5C836E1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:6e:c9:56:56:ef:35:ef:ea:ce:b1:a1:46:ca:b6:9a:b1:70:
         71:71:8c:c1:9d:41:42:c7:cf:ed:43:6b:e9:78:57:e7:30:35:
         ab:20:7a:ca:65:b7:74:d6:64:1d:dc:ac:13:d2:27:db:c7:8e:
         60:61:53:c9:5c:61:f4:8e:34:74:ba:4d:1e:9b:1d:86:5b:9f:
         87:eb:82:b6:95:a1:c5:03:71:13:10:bb:b4:09:2a:b2:3a:9d:
         47:1e:5c:01:c7:f3:c7:c1:f5:05:01:24:c8:a6:b1:89:e0:a4:
         19:b8:fb:bc:01:a0:91:83:94:2c:cd:ef:b0:3b:a6:c1:46:5c:
         0d:2c:cc:33:51:44:d8:bc:86:c1:9c:7e:cb:a1:65:fe:4a:1c:
         78:61:82:fc:66:05:e7:eb:c1:54:aa:69:b9:39:72:4c:b4:5c:
         44:13:54:63:f1:89:1c:8e:c8:0f:ad:bd:d4:ff:5b:e7:9f:56:
         59:23:04:5c:60:a3:14:58:9c:25:47:35:e6:33:16:f8:3b:e1:
         13:2b:e4:8f:83:e1:eb:9f:9b:0c:43:16:49:dd:f6:d3:b0:f0:
         36:b8:fe:aa:e2:50:97:96:4e:09:0a:ea:dd:53:3d:c9:27:4c:
         de:3c:81:8b:37:cd:95:2e:28:73:70:37:b3:91:5d:fe:a5:04:
         63:27:a5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----