Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DEDF814AEA211F191C6A9E2CE1D38B0.roa
File:                     9DEDF814AEA211F191C6A9E2CE1D38B0.roa (raw, json)
Hash identifier:          Uj6ELOFhcccdWpZeZLqvN/6oHSdzgGFg1GFgKcE4LOk=
Subject key identifier:   B4:2E:F2:FB:13:A7:50:D6:D6:03:E7:65:8E:2B:D1:A0:77:00:ED:D2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D5AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DEDF814AEA211F191C6A9E2CE1D38B0.roa
Signing time:             Sat 12 Sep 2026 12:08:08 +0000
ROA not before:           Sat 12 Sep 2026 12:08:05 +0000
ROA not after:            Tue 22 Sep 2026 12:08:05 +0000
asID:                     6079
IP address blocks:        156.229.172.0/24 maxlen: 24
                          156.233.64.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120238 (0x1d5ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 12 12:08:05 2026 GMT
            Not After : Sep 22 12:08:05 2026 GMT
        Subject: CN=6aa540a8-fec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9d:a9:a7:31:61:80:b9:96:79:f7:68:d0:95:
                    83:f7:9b:e9:b5:50:89:28:e6:03:9c:d7:3c:67:ea:
                    0d:83:fc:ed:8b:fd:c1:84:16:66:be:8c:05:1a:e6:
                    34:ce:55:9f:8f:49:4a:65:53:9d:72:62:07:96:66:
                    21:43:94:dd:68:fb:38:d7:55:27:83:04:5f:e2:b2:
                    f4:51:0f:a6:73:22:12:bb:fc:6b:8a:b8:df:f8:24:
                    63:49:93:4d:69:a8:db:43:05:9c:c9:0b:bf:29:bc:
                    6e:61:ad:44:1e:d0:13:ba:88:7b:c7:26:e3:8d:fc:
                    bf:1f:61:12:33:d7:e7:00:8c:77:ff:ca:3d:18:d8:
                    cf:4f:56:cc:c3:61:87:06:d5:a1:62:42:2d:8c:7d:
                    19:02:89:80:ae:df:7a:a3:be:59:96:38:dc:22:7a:
                    12:be:19:5b:7a:fc:c1:d6:74:63:76:2f:65:fc:56:
                    14:87:dc:06:9e:80:0e:78:eb:0a:41:4b:6c:f0:33:
                    01:6d:f6:57:4a:08:8a:6a:65:2a:bb:a1:09:2f:a3:
                    e9:98:38:ee:cc:08:0c:cc:1c:a1:e7:36:5b:da:dc:
                    ae:3b:67:d8:a3:f1:f5:2c:ea:93:2c:93:b2:d3:35:
                    0d:f5:3e:23:bf:f9:8b:75:e6:ae:15:a1:8b:c6:b8:
                    6c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2E:F2:FB:13:A7:50:D6:D6:03:E7:65:8E:2B:D1:A0:77:00:ED:D2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DEDF814AEA211F191C6A9E2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.172.0/24
                  156.233.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:55:0a:99:46:91:41:d9:ad:32:bd:7e:41:58:0c:35:20:49:
         31:aa:9f:7f:84:db:a7:e7:fb:ca:63:11:43:a1:ee:60:5a:e1:
         be:b8:d1:d8:d0:86:5b:99:9e:d4:4d:5b:17:fe:6e:00:82:5d:
         e6:75:66:df:e7:ce:89:58:2e:42:9c:61:13:78:af:48:a7:d9:
         29:a1:a1:f4:38:29:af:65:91:a6:b7:1f:be:38:a9:e6:a5:d5:
         82:11:d7:9e:2b:5c:bd:b9:2b:9f:be:28:40:3a:96:27:cc:ef:
         6a:76:a1:98:2e:55:8e:0e:fe:a2:86:5c:bf:62:55:49:41:26:
         3d:bc:67:67:e5:15:9a:f5:6c:ef:4c:dd:c2:75:57:a7:2c:6f:
         d1:4c:a9:52:79:ec:70:8b:48:79:4a:ce:6a:c8:93:84:bf:34:
         d3:3c:8a:40:f8:ec:cd:48:75:e4:b9:00:44:54:f0:c2:7e:82:
         b4:5c:4f:00:87:7f:8e:91:0d:80:11:61:03:8c:ce:4b:ec:74:
         89:74:5c:e2:7d:0c:f9:de:54:0b:bf:55:d6:34:7d:f5:5c:6d:
         21:51:3a:6d:4f:79:c5:db:10:ec:91:08:61:9a:5f:4c:1a:26:
         de:78:59:6d:6f:55:c3:ac:63:0b:7a:0d:2b:89:e9:17:35:5e:
         1c:d1:1b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----