Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81CE8F3AAE9411F1B349210FCF1D38B0.roa
File:                     81CE8F3AAE9411F1B349210FCF1D38B0.roa (raw, json)
Hash identifier:          mtHKbnt9e8G/7yjnScMyM8onB7oYRURkpF7H9bB6pO0=
Subject key identifier:   BF:72:F7:1C:FD:13:69:09:CA:8F:D5:63:21:EB:99:30:4E:B4:B9:D3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D59A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81CE8F3AAE9411F1B349210FCF1D38B0.roa
Signing time:             Sat 12 Sep 2026 10:27:08 +0000
ROA not before:           Sat 12 Sep 2026 10:27:04 +0000
ROA not after:            Tue 22 Sep 2026 10:27:04 +0000
asID:                     400619
IP address blocks:        156.241.128.0/18 maxlen: 24
                          156.241.139.0/24 maxlen: 24
                          156.241.188.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120218 (0x1d59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 12 10:27:04 2026 GMT
            Not After : Sep 22 10:27:04 2026 GMT
        Subject: CN=6aa528fc-ca3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f6:4a:56:78:c6:17:78:1a:5e:c2:74:a5:5c:
                    05:1d:82:43:1d:09:ce:8b:4f:07:8d:42:80:2c:20:
                    4f:ec:c9:28:30:1d:50:7b:8c:92:b4:24:d0:f6:bc:
                    5d:fa:a1:01:5c:0f:38:00:a5:6c:60:67:83:2b:14:
                    c3:6f:19:ec:f0:40:56:68:25:71:25:ed:19:de:f8:
                    5d:34:fc:65:4b:34:8b:d3:97:9f:23:95:c8:1e:f9:
                    3f:32:b8:c2:45:ad:3b:2d:7c:9e:4a:a5:f1:29:9c:
                    3c:5c:b6:cb:07:96:7d:85:35:82:98:58:07:a3:d0:
                    65:e7:42:33:47:03:8b:ff:81:8d:de:06:34:43:e7:
                    e9:bf:18:16:d3:4a:19:cc:e2:23:c0:95:7a:62:5d:
                    cd:d9:74:79:07:39:de:8d:a1:d6:75:10:14:f5:a4:
                    21:3a:74:43:90:46:c7:8c:eb:03:6e:18:67:fd:8a:
                    71:5c:4a:9f:ab:08:27:00:04:1a:ae:fc:e0:a7:9f:
                    30:a0:a5:f9:59:6c:6d:5a:fe:5b:33:18:90:c9:f2:
                    b0:ff:e7:e5:b1:65:2a:92:0c:56:ac:fd:e7:80:ab:
                    0b:4f:b0:59:88:b5:ca:6d:d1:78:84:b0:0c:76:97:
                    45:ec:73:66:9f:4c:0e:ea:0a:ea:c2:43:d3:60:8d:
                    0b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:72:F7:1C:FD:13:69:09:CA:8F:D5:63:21:EB:99:30:4E:B4:B9:D3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81CE8F3AAE9411F1B349210FCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.241.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         78:9c:11:82:a8:5b:42:55:6b:b5:d4:69:74:7d:3b:17:93:d5:
         d2:27:fd:41:a0:78:e7:9f:04:b8:c5:df:0b:d8:12:4f:1c:59:
         c6:4a:b9:7c:55:81:c8:f2:6e:29:17:56:99:14:3f:4e:68:f9:
         0a:2e:96:b4:a7:84:74:be:ae:d3:56:88:b0:05:2b:2c:73:c8:
         71:b2:86:fe:ff:29:3e:40:92:9e:27:ba:ec:7e:84:ba:09:06:
         dc:1d:6a:ac:81:da:2d:0b:f5:d7:f7:70:5c:63:c5:b5:1b:c5:
         4b:85:04:ce:ba:8d:82:d5:61:99:17:32:32:ab:f7:24:cc:ab:
         63:b5:80:6c:55:4e:b9:cb:4d:a5:60:4b:db:73:32:40:b4:61:
         39:53:af:8a:53:ce:1b:c6:2d:3e:11:e7:f7:1d:cb:3a:69:ee:
         5b:83:7d:77:10:50:3e:e7:b5:cb:c5:63:7b:aa:87:96:d3:8f:
         31:fc:0d:6c:07:63:e8:e5:16:09:2d:43:dc:5e:50:c3:70:cb:
         1e:dc:4b:8e:48:c8:b2:5d:5e:70:8b:c6:2e:0c:10:ff:d4:e9:
         59:13:72:40:d5:25:03:b5:a7:6e:e1:9a:1d:3e:1a:f2:94:9e:
         83:bc:a4:fa:4d:e8:e0:4c:f7:83:6c:1f:05:19:c0:fd:f2:af:
         89:4e:5b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----