Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/505A5B0AB01A11F1975841C7CE1D38B0.roa
File:                     505A5B0AB01A11F1975841C7CE1D38B0.roa (raw, json)
Hash identifier:          3//AkTqMo7ppVsHfrZPb4yu42vE1p5LH2vt2qFvWC1U=
Subject key identifier:   E9:1F:86:74:23:3A:BC:48:62:92:C0:A3:A0:7F:3C:6B:5E:34:88:EB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D5F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/505A5B0AB01A11F1975841C7CE1D38B0.roa
Signing time:             Mon 14 Sep 2026 08:57:29 +0000
ROA not before:           Mon 14 Sep 2026 08:57:25 +0000
ROA not after:            Sat 26 Sep 2026 08:57:25 +0000
asID:                     210507
IP address blocks:        45.204.76.0/24 maxlen: 24
                          45.204.77.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120308 (0x1d5f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 14 08:57:25 2026 GMT
            Not After : Sep 26 08:57:25 2026 GMT
        Subject: CN=6aa7b6f9-bdba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:33:33:45:88:a5:f7:f3:5c:44:dc:18:02:
                    a1:05:d1:5b:e5:fb:76:a0:bb:ad:14:a6:8b:17:86:
                    f1:ff:e5:7b:d8:81:df:63:5b:cb:9a:87:0f:9d:d9:
                    8d:b1:b8:42:ed:0b:b9:da:82:fb:67:6b:ed:ba:21:
                    86:4f:2e:c5:a5:8e:db:d4:e1:5c:04:46:fc:6a:0e:
                    d8:ca:54:1f:4c:49:2b:0c:44:f8:5b:30:66:20:fd:
                    92:25:87:b9:f9:c1:b2:34:cd:04:b7:99:ec:1a:4d:
                    6c:0b:da:9d:a7:9b:65:82:95:0f:17:07:45:67:40:
                    6e:43:1f:d7:e0:bb:b3:58:dc:27:e4:3e:15:23:d4:
                    ef:6f:c9:93:a7:9a:47:58:15:4a:df:5c:8d:48:4b:
                    70:8f:a1:7d:6b:5d:a9:a3:73:b6:f1:5b:5f:f6:d6:
                    97:de:4b:0a:8e:be:7f:2a:ca:9c:17:a1:e1:83:ee:
                    7b:23:47:ed:7c:54:ee:d5:80:64:af:92:1d:d7:8f:
                    37:e1:e7:1f:57:2a:d1:23:27:e4:ae:75:b7:52:95:
                    62:71:c7:a4:a2:67:f2:13:83:66:b3:24:68:6f:07:
                    1d:36:1b:68:aa:10:34:76:c4:13:cb:8f:b2:f8:d9:
                    ed:8e:87:28:fd:5f:d7:4d:5e:52:05:b6:18:bf:04:
                    b9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1F:86:74:23:3A:BC:48:62:92:C0:A3:A0:7F:3C:6B:5E:34:88:EB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/505A5B0AB01A11F1975841C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:c4:35:35:e2:c5:04:91:80:0e:d9:84:87:f8:c8:7f:1e:e5:
         2f:1a:7c:93:1e:4b:47:62:8c:ae:a7:65:6f:6e:aa:8a:da:74:
         66:9a:a7:ff:16:38:9e:a7:0c:f5:16:20:f6:38:ae:53:f0:da:
         e5:61:22:94:83:2f:43:95:3d:ae:d7:3f:4b:ce:70:2d:41:f1:
         fe:e6:27:92:41:f3:e6:28:2e:fc:29:90:84:e3:c5:52:c6:88:
         a0:2e:ee:de:50:7d:8d:8a:7d:c9:b6:5c:a4:8e:4e:43:d4:11:
         e1:54:64:ee:b6:84:cc:53:48:76:46:a8:74:c0:81:e4:9e:79:
         6c:0a:d1:62:89:eb:8e:b8:80:40:31:db:4e:ad:0a:d9:d4:8d:
         de:f2:af:01:c5:5d:b9:bd:20:a5:a7:ed:05:fc:f9:f4:07:ac:
         a6:18:86:8b:af:6f:12:9c:47:59:e8:b1:f2:ce:e1:5c:9c:68:
         5c:6a:fc:ed:4f:62:3e:e6:ce:5a:87:bb:6c:46:64:b3:99:b3:
         06:44:97:6b:b3:5a:15:71:ec:f6:7f:5d:9e:f9:3d:b4:ee:09:
         4b:bb:89:6e:a7:7a:5f:78:7d:9b:fb:b2:aa:bd:f7:d1:c9:02:
         13:dd:19:1c:fc:ce:15:f9:77:b5:45:d8:8a:c0:78:2d:82:cb:
         5d:07:6a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----