Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2DE0C60ADAE11F1B1AEB0A6CE1D38B0.roa
File:                     E2DE0C60ADAE11F1B1AEB0A6CE1D38B0.roa (raw, json)
Hash identifier:          WeRNLzwuws9TEgGPPk0592crtiBolUVVyGgboqn9msU=
Subject key identifier:   6F:D0:07:1C:1B:0D:3E:28:BB:A8:E8:EE:61:92:A0:33:C5:8A:62:63
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E75D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2DE0C60ADAE11F1B1AEB0A6CE1D38B0.roa
Signing time:             Fri 11 Sep 2026 07:03:27 +0000
ROA not before:           Fri 11 Sep 2026 07:03:23 +0000
ROA not after:            Mon 21 Sep 2026 07:03:23 +0000
asID:                     131618
IP address blocks:        154.222.0.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124765 (0x1e75d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 11 07:03:23 2026 GMT
            Not After : Sep 21 07:03:23 2026 GMT
        Subject: CN=6aa3a7bf-e380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:00:e0:1e:9f:55:31:10:ee:74:0a:59:bd:db:
                    a7:07:7e:e1:77:d9:c3:41:89:50:06:f0:c1:f6:99:
                    8d:b4:3d:49:be:29:10:a3:65:22:b5:9f:32:01:74:
                    db:a6:d6:ea:8a:2e:2a:d1:30:d3:89:ff:2a:d5:5e:
                    69:53:88:e2:8d:d1:be:27:ad:e4:0f:a2:8e:9f:85:
                    3d:cb:e7:1c:2b:af:48:8d:a4:ce:32:89:2f:19:19:
                    63:82:95:19:55:a7:8f:48:d0:70:73:a9:07:bc:94:
                    78:57:af:05:7a:77:96:d8:17:c1:65:c1:13:0f:53:
                    51:0b:d5:72:bb:50:3d:6d:93:7f:59:81:cd:be:fc:
                    ef:8c:93:af:59:ff:77:85:98:80:36:b0:93:c8:0e:
                    f3:5a:b7:17:cd:84:d1:40:7f:c7:35:2d:6d:6c:aa:
                    af:a1:3a:d5:00:b0:5e:44:4d:49:d1:25:fa:a3:66:
                    65:07:4b:b9:8e:bd:04:3f:bc:7c:f6:e2:c7:b6:1e:
                    aa:cd:1c:97:b5:03:68:c6:a7:e5:84:c4:0c:53:bb:
                    05:45:2d:2e:55:05:20:2b:38:f6:50:36:98:70:6d:
                    c6:12:95:70:40:e9:83:37:a3:a6:dd:d0:4f:e2:81:
                    d0:44:ee:b1:8b:ca:28:b0:14:c8:0b:d0:32:ec:56:
                    45:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D0:07:1C:1B:0D:3E:28:BB:A8:E8:EE:61:92:A0:33:C5:8A:62:63
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2DE0C60ADAE11F1B1AEB0A6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:37:46:d0:2a:fd:bd:c5:d9:84:95:6c:fb:de:4b:58:7d:02:
         68:cc:6a:97:63:a5:07:f2:ef:52:a1:5b:22:6d:3e:6d:19:c1:
         b6:20:e5:57:c0:33:ec:eb:58:02:e3:95:1e:ba:34:20:9f:89:
         aa:4e:9d:9c:7a:52:f1:2a:12:cf:8e:6d:dd:58:ba:3a:89:8a:
         bf:57:3c:73:bb:6a:ed:26:5a:44:7f:9a:de:39:d9:94:3e:aa:
         17:da:5e:3e:27:70:95:a8:fc:cf:26:79:f3:14:d0:9f:45:2d:
         22:21:81:38:fd:fb:62:cc:5d:e9:fe:3d:ae:1d:4d:f8:11:b2:
         e7:73:85:ec:21:1d:ff:12:e0:26:e3:f2:58:fd:7e:87:5b:84:
         05:ff:2b:2b:bc:b3:53:4f:af:74:8d:88:41:d0:5d:24:fe:d2:
         8b:c5:ad:cd:20:ec:29:c4:4e:a7:e2:6f:57:f2:80:80:a3:75:
         3c:c3:4e:db:85:d3:6b:51:8a:d0:8d:23:1b:31:f3:0c:c0:3f:
         46:28:27:ea:41:1c:79:61:b0:99:57:03:08:a7:fc:54:c5:62:
         eb:96:bd:4e:fe:6c:c1:5d:9d:06:e5:6f:24:cb:74:43:f8:b9:
         43:01:5d:cf:36:dc:0a:75:94:33:a4:1c:9b:65:f1:9c:05:5d:
         58:63:68:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----