Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DD8A718ADB011F18769F2AECE1D38B0.roa
File:                     4DD8A718ADB011F18769F2AECE1D38B0.roa (raw, json)
Hash identifier:          VvIEH2j1bc7mu+iY20Sb+ndi2hi5Op232Ykwam7aaq8=
Subject key identifier:   AE:38:4D:4A:DB:BD:5D:5A:8A:09:39:D1:D1:71:D0:01:01:57:A4:5D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D51D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DD8A718ADB011F18769F2AECE1D38B0.roa
Signing time:             Fri 11 Sep 2026 07:13:36 +0000
ROA not before:           Fri 11 Sep 2026 07:13:32 +0000
ROA not after:            Mon 21 Sep 2026 07:13:32 +0000
asID:                     20473
IP address blocks:        45.196.112.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120093 (0x1d51d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 07:13:32 2026 GMT
            Not After : Sep 21 07:13:32 2026 GMT
        Subject: CN=6aa3aa20-3ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:85:2c:80:f3:50:6b:b0:32:e1:31:2c:22:8d:
                    97:57:85:95:bb:7b:60:4e:a1:a7:28:47:0a:e6:c4:
                    64:1a:88:ff:35:73:78:8a:9b:a1:20:73:de:ff:fd:
                    1a:ee:84:df:c6:e9:1f:e3:b4:50:c3:d8:2d:8d:80:
                    eb:96:a2:de:91:e7:46:10:eb:02:da:3f:fb:c2:03:
                    f7:b1:31:2a:f8:ab:61:a5:dd:9b:82:88:67:27:93:
                    b4:88:98:b3:ed:2a:a5:6d:66:6d:5d:28:d5:49:ab:
                    05:79:5c:0e:40:d8:18:2c:48:19:00:bd:4f:4d:18:
                    bf:69:25:24:1b:2d:f1:af:9d:8f:d6:df:af:32:76:
                    e6:c4:b2:9c:59:c7:83:8e:23:9e:26:96:24:10:81:
                    5d:04:2a:47:cd:d6:d0:54:1d:c0:ac:d7:d5:cf:f9:
                    0c:fd:f0:af:da:63:a1:56:43:77:8c:d7:48:61:0b:
                    52:5a:10:4f:14:7b:5d:2f:66:9a:1d:43:2d:b0:8e:
                    f9:20:9c:65:e0:7d:79:48:6f:21:4f:df:63:30:3f:
                    8f:4f:c6:83:93:a2:5f:22:6d:84:33:3a:97:07:cd:
                    a1:75:c7:23:f6:94:e8:e3:8d:f4:87:a0:2e:59:38:
                    b6:1b:f0:bb:7b:8a:4c:48:59:ca:88:2e:e8:0c:c7:
                    c9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:38:4D:4A:DB:BD:5D:5A:8A:09:39:D1:D1:71:D0:01:01:57:A4:5D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DD8A718ADB011F18769F2AECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:6e:a4:f4:e6:70:20:64:94:33:9a:a4:79:7f:bf:8e:83:67:
         51:37:41:30:0f:80:4c:77:96:fe:b9:f9:79:a1:a9:d1:8f:67:
         fe:f6:d2:15:82:d6:66:85:34:7d:06:b5:46:96:df:ba:c0:59:
         0d:0e:af:cf:36:93:a8:e0:6a:43:25:07:c4:a9:9e:15:85:b9:
         c5:92:bf:41:71:19:11:89:ba:18:db:18:c4:49:a8:6b:95:97:
         ce:b3:53:6c:d9:06:1e:11:88:ee:63:d6:ba:f4:57:91:f5:18:
         1f:8d:bb:67:0c:81:ab:fc:ec:0f:33:1f:c0:09:fa:c2:8a:8d:
         88:61:d3:96:cd:7f:79:dd:ff:5b:05:17:4b:c2:64:33:49:03:
         8e:40:27:dc:c3:40:5f:ae:5e:e8:1d:fc:e9:fa:d3:20:8e:8d:
         d9:48:d0:5b:fa:8f:cf:70:dc:2f:6c:a2:45:84:53:c4:6c:63:
         41:1c:dc:94:a8:59:ac:ab:5e:db:12:a0:fc:c4:13:33:35:ba:
         24:14:61:2b:e5:d3:9a:90:cf:8a:98:76:e6:63:15:8b:b4:c2:
         95:47:38:a4:e4:14:e9:f5:ff:c3:58:33:28:8f:8e:76:53:6e:
         f3:27:bd:26:90:33:95:36:4e:c7:e8:f6:b4:7e:53:ec:ee:45:
         5b:df:e8:81
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdUdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTExMDcxMzMyWhcNMjYwOTIxMDcxMzMyWjAYMRYw
FAYDVQQDEw02YWEzYWEyMC0zZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyIUsgPNQa7Ay4TEsIo2XV4WVu3tgTqGnKEcK5sRkGoj/NXN4ipuhIHPe
//0a7oTfxukf47RQw9gtjYDrlqLekedGEOsC2j/7wgP3sTEq+Kthpd2bgohnJ5O0
iJiz7SqlbWZtXSjVSasFeVwOQNgYLEgZAL1PTRi/aSUkGy3xr52P1t+vMnbmxLKc
WceDjiOeJpYkEIFdBCpHzdbQVB3ArNfVz/kM/fCv2mOhVkN3jNdIYQtSWhBPFHtd
L2aaHUMtsI75IJxl4H15SG8hT99jMD+PT8aDk6JfIm2EMzqXB82hdccj9pTo4430
h6AuWTi2G/C7e4pMSFnKiC7oDMfJEQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFK44
TUrbvV1aigk50dFx0AEBV6RdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80REQ4QTcxOEFEQjAxMUYxODc2OUYyQUVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcRwMA0GCSqGSIb3DQEBCwUA
A4IBAQBpbqT05nAgZJQzmqR5f7+Og2dRN0EwD4BMd5b+ufl5oanRj2f+9tIVgtZm
hTR9BrVGlt+6wFkNDq/PNpOo4GpDJQfEqZ4VhbnFkr9BcRkRiboY2xjESahrlZfO
s1Ns2QYeEYjuY9a69FeR9RgfjbtnDIGr/OwPMx/ACfrCio2IYdOWzX953f9bBRdL
wmQzSQOOQCfcw0Bfrl7oHfzp+tMgjo3ZSNBb+o/PcNwvbKJFhFPEbGNBHNyUqFms
q17bEqD8xBMzNbokFGEr5dOakM+KmHbmYxWLtMKVRzik5BTp9f/DWDMoj452U27z
J70mkDOVNk7H6Pa0flPs7kVb3+iB
-----END CERTIFICATE-----