Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD6183D4AE8111F1AD28E0A0CE1D38B0.roa
File:                     CD6183D4AE8111F1AD28E0A0CE1D38B0.roa (raw, json)
Hash identifier:          tjHMoEBo6sU5IJ0oj1uYobZnGJIJnwVu8AkXEg4feyw=
Subject key identifier:   78:C0:98:F9:2F:2E:90:4E:27:C2:27:35:E2:76:30:70:F5:F7:4F:6B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD6183D4AE8111F1AD28E0A0CE1D38B0.roa
Signing time:             Sat 12 Sep 2026 08:13:15 +0000
ROA not before:           Sat 12 Sep 2026 08:13:11 +0000
ROA not after:            Mon 21 Sep 2026 08:13:11 +0000
asID:                     271956
IP address blocks:        154.88.190.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124852 (0x1e7b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 12 08:13:11 2026 GMT
            Not After : Sep 21 08:13:11 2026 GMT
        Subject: CN=6aa5099b-a373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e6:1b:bc:9d:2a:27:49:03:e3:13:a3:76:c5:
                    5f:92:a8:47:ac:8d:65:5a:27:18:d9:46:6d:05:8d:
                    c0:e8:32:8f:b3:62:e3:0c:ed:75:d8:cf:d6:e9:f2:
                    5c:4e:21:bb:d4:18:45:96:74:7d:f7:d2:2c:8e:2b:
                    12:f3:a5:b6:bb:c5:f3:29:3b:6c:58:bc:14:94:1c:
                    70:39:d7:4a:a9:dd:02:89:92:98:ea:58:59:66:50:
                    68:c2:d8:f7:86:95:53:fc:3b:87:48:ea:a1:44:c5:
                    ec:bf:22:62:ff:f4:9f:52:74:9f:91:5f:9e:1a:a4:
                    10:44:e0:c2:ab:31:78:bd:7d:cd:8d:bb:bf:47:d2:
                    fe:a4:4c:cb:ef:55:12:29:d2:3d:cd:0f:50:e0:b1:
                    ef:2e:61:14:81:b5:45:ae:17:18:be:a2:06:44:8a:
                    c3:4d:ff:01:d0:a4:b9:e1:93:3c:f8:b8:eb:eb:3a:
                    66:55:84:8b:b6:1c:75:63:9a:6c:7a:c7:ad:b4:5b:
                    24:37:c0:32:a8:fb:07:cb:96:d5:94:27:0d:90:23:
                    dc:a8:02:e6:f7:1a:e7:66:28:93:5d:6b:2f:7f:c5:
                    df:32:ea:1d:9d:13:c8:17:dd:61:0e:14:7b:65:57:
                    c0:bf:cb:43:4d:fc:60:6f:cb:6b:22:d4:08:d1:bb:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C0:98:F9:2F:2E:90:4E:27:C2:27:35:E2:76:30:70:F5:F7:4F:6B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD6183D4AE8111F1AD28E0A0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:e4:12:32:15:9d:d1:f8:c2:fb:a4:ef:5a:a3:77:0e:14:ef:
         de:e0:b5:e6:16:6e:09:10:b0:52:76:f0:b6:ec:dc:ac:f9:19:
         2c:53:34:60:8f:b2:69:a1:5b:f2:1c:3c:50:85:5e:ee:ee:70:
         94:93:fe:bc:98:00:ae:93:a3:d1:5f:b9:54:fc:ee:f4:f6:c5:
         c0:2f:96:ac:cb:f6:83:9e:24:d7:bb:c9:e8:54:7e:06:3c:15:
         93:a8:2b:91:46:2a:23:af:d6:fc:f4:1b:0c:dc:c4:67:0f:46:
         98:3f:70:a1:f3:4a:39:7f:df:d1:3b:dd:9e:74:43:2d:ec:08:
         6a:f7:79:27:68:e8:33:91:c7:99:6b:57:38:be:96:55:66:d2:
         09:b9:99:4e:f3:3f:3c:ae:bc:43:f5:6b:f3:1f:61:a5:75:8c:
         82:02:26:d7:c7:7d:42:cf:4d:03:ef:62:06:92:59:2b:78:1e:
         bb:47:ff:87:8b:75:6d:60:4e:5f:48:2e:8b:95:38:41:6c:46:
         bd:af:95:9f:d7:15:52:0b:48:33:52:8b:f7:e0:1e:a7:69:ee:
         98:89:a4:83:1f:b8:15:86:18:fe:f8:29:85:cc:66:0c:d1:8c:
         35:d2:30:ca:67:b6:18:df:10:7a:8a:91:41:73:86:f2:7f:3b:
         61:7c:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----