Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9F98F64ACED11F19A529C10CF1D38B0.roa
File:                     D9F98F64ACED11F19A529C10CF1D38B0.roa (raw, json)
Hash identifier:          Jowl5zUeyY3eOhMyaAaY1oRyU3fsEU05K3Pnd0+EtMc=
Subject key identifier:   62:D3:8F:40:BA:67:AD:AB:11:22:BF:2D:4D:91:D3:8A:00:83:C2:79
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9F98F64ACED11F19A529C10CF1D38B0.roa
Signing time:             Thu 10 Sep 2026 08:01:39 +0000
ROA not before:           Thu 10 Sep 2026 08:01:35 +0000
ROA not after:            Mon 21 Sep 2026 08:01:35 +0000
asID:                     139490
IP address blocks:        154.209.255.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124666 (0x1e6fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 08:01:35 2026 GMT
            Not After : Sep 21 08:01:35 2026 GMT
        Subject: CN=6aa263e3-9715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:ef:5f:be:51:6f:ed:6f:11:72:7d:44:09:
                    d6:ed:fe:98:56:a1:5e:83:90:03:b2:55:9c:c5:4e:
                    1a:9f:7f:e0:3a:62:36:66:a7:59:2b:82:1a:a7:4e:
                    16:8a:f3:7c:f7:b7:69:6f:ff:9b:65:31:76:4f:33:
                    7f:23:8c:c8:29:3c:84:d4:c5:cb:50:06:45:a8:4f:
                    e6:13:a8:74:2a:92:08:bb:83:79:55:82:3c:3e:fe:
                    6a:ec:50:66:6f:f7:f7:13:a5:54:0f:b0:5d:ab:db:
                    14:38:e0:9d:54:eb:70:ea:4e:f7:95:92:dc:9a:b0:
                    c5:20:93:97:8f:46:48:de:e8:ab:d9:1b:71:d8:3c:
                    a7:a6:58:94:90:ad:b3:dd:04:0e:17:8e:e7:c3:77:
                    24:07:64:04:f8:da:56:5c:0d:ab:a4:e4:85:78:f1:
                    99:8f:92:c8:b5:b9:9d:91:0a:3b:a0:91:4b:11:92:
                    25:1b:e7:c3:b1:cd:3a:20:41:3c:38:b3:7d:03:12:
                    58:e5:82:f0:58:f8:29:6b:18:f8:1f:8b:09:b3:b2:
                    71:cb:e6:66:09:b2:f6:47:9f:1a:32:ee:b7:0f:ae:
                    e5:88:e9:c6:97:21:80:47:a0:c7:d9:2a:80:0a:42:
                    9e:82:0d:24:75:cd:80:6f:f4:a0:8d:9e:b6:b3:90:
                    a3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D3:8F:40:BA:67:AD:AB:11:22:BF:2D:4D:91:D3:8A:00:83:C2:79
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9F98F64ACED11F19A529C10CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:70:fb:5b:58:7a:ca:40:17:01:78:19:9f:d8:da:79:a3:b6:
         1b:d7:df:80:1e:81:ae:99:23:10:f7:3c:2c:d0:56:40:b9:b1:
         4d:5c:b0:9d:92:ea:d9:6c:d0:db:cd:ba:fe:de:0c:2b:d7:68:
         b1:e7:21:3e:80:97:32:c1:44:8f:50:df:13:88:f4:cd:9e:28:
         6f:60:11:6d:9c:47:4f:72:70:2c:23:ca:95:44:88:fd:6f:35:
         47:5f:f5:77:43:4c:c1:92:21:6a:53:53:41:b6:ab:25:cf:3e:
         f3:56:a1:5c:a2:e5:52:4b:30:29:91:65:68:16:ed:7f:4b:6a:
         7d:0e:65:82:fb:05:11:e3:b6:5e:de:49:99:ad:1c:31:66:cb:
         e2:e1:67:ce:25:6f:37:3e:cf:b3:7f:a4:48:0d:68:52:15:dd:
         19:9c:37:17:a1:15:11:ed:01:5f:8f:d0:ab:d2:de:ea:df:d0:
         5c:d0:1a:7f:3c:9e:22:79:fb:56:60:90:34:ae:51:48:9a:5e:
         8e:8d:c2:32:dd:68:a6:42:d9:e8:f4:97:f3:f1:2e:41:c4:e8:
         6d:94:68:ab:22:dc:4f:fc:0f:79:a8:ab:06:bd:ce:0d:52:d5:
         50:b7:38:42:fb:ae:70:d6:e2:32:b9:e0:3a:09:2e:b7:19:9d:
         56:b9:c6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----