Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA5C4588B19F11F185589A01CF1D38B0.roa
File:                     AA5C4588B19F11F185589A01CF1D38B0.roa (raw, json)
Hash identifier:          MdINkNDHzSMlJOaRQmh9n+ZUkJAG+jkrlOwSlqGbTP4=
Subject key identifier:   5B:38:F9:E6:19:62:D9:2A:C8:38:6E:64:6A:B0:9A:2A:DE:74:E8:B2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D692
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA5C4588B19F11F185589A01CF1D38B0.roa
Signing time:             Wed 16 Sep 2026 07:24:34 +0000
ROA not before:           Wed 16 Sep 2026 07:24:30 +0000
ROA not after:            Fri 25 Sep 2026 07:24:30 +0000
asID:                     61461
IP address blocks:        156.247.128.0/17 maxlen: 24
                          156.255.128.0/17 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120466 (0x1d692)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 16 07:24:30 2026 GMT
            Not After : Sep 25 07:24:30 2026 GMT
        Subject: CN=6aaa4432-5e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:26:1f:f9:f8:09:9d:c4:66:26:bb:e2:8a:50:
                    b6:08:9f:c6:f9:91:eb:54:d6:21:2d:9b:be:5c:e0:
                    5b:e0:34:f8:53:14:4c:26:8a:37:b4:35:f3:f3:d1:
                    ca:b6:f1:1f:13:a1:5f:58:e7:f5:55:72:b2:61:38:
                    4b:98:6a:99:41:92:80:11:ac:21:01:54:d3:98:05:
                    4f:62:d5:0c:6d:96:76:86:93:99:3e:63:80:b4:8b:
                    c5:56:bd:77:bb:a5:f3:9d:3a:16:b3:87:be:03:c5:
                    12:11:85:f0:ba:0c:c8:5c:d5:24:83:a2:a4:f9:29:
                    09:29:7f:fd:28:57:d8:bd:6c:57:e1:bb:e1:bc:c8:
                    81:9b:23:27:e0:1a:30:98:dd:9e:60:22:3f:f8:e9:
                    a2:52:b5:cf:e0:9f:43:53:b9:9a:e1:11:23:43:9a:
                    af:7c:f1:6d:84:0d:a7:03:ac:3a:9d:96:b8:8e:9d:
                    bb:68:b3:64:ae:2d:95:25:b2:63:95:f1:cc:b7:77:
                    e8:f9:9f:52:ee:08:b5:53:1e:ae:86:7c:6e:59:da:
                    8b:01:22:8a:83:44:e1:27:ea:9b:59:a4:8a:f3:6e:
                    ed:65:02:0b:3f:82:08:94:c2:1d:af:fc:d4:b7:0a:
                    ea:71:2c:20:1f:21:2f:9c:78:bc:0a:40:da:5a:15:
                    88:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:38:F9:E6:19:62:D9:2A:C8:38:6E:64:6A:B0:9A:2A:DE:74:E8:B2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA5C4588B19F11F185589A01CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.128.0/17
                  156.255.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b6:7a:03:07:2a:9a:da:ff:48:ca:0d:10:d7:b9:d6:68:76:a0:
         bd:42:e1:db:59:ae:33:7e:69:35:9d:5e:b2:9e:94:3c:85:1c:
         1d:ec:46:66:6a:d8:6e:0d:6a:6e:2a:d5:27:e3:fe:47:e0:a1:
         4e:e5:e1:a9:47:da:c1:78:e5:56:2c:76:ee:1a:91:a6:b4:29:
         cf:a6:b8:b3:d3:28:fa:50:40:70:5b:ae:e9:48:07:91:5e:f7:
         09:77:b0:f3:23:4b:9f:00:01:2c:97:76:b3:68:a3:60:1a:e5:
         3c:7c:d4:33:b7:42:08:d7:a4:68:1f:72:6e:f0:af:01:05:3b:
         63:62:92:24:88:3a:36:8d:da:f3:4d:5c:da:d7:ce:89:99:c8:
         cd:a3:d6:a5:fe:70:54:07:89:0a:24:96:3c:fd:e2:49:7a:76:
         72:6d:fc:79:c8:18:48:1d:8b:45:45:33:35:61:74:20:31:7a:
         89:1f:ce:4b:e3:f5:52:01:e4:fc:5a:cf:9f:08:76:89:47:10:
         8b:00:c0:25:81:da:96:fc:f9:c4:0b:b6:00:32:c3:e6:8b:55:
         7e:80:4a:e4:3a:70:97:bc:14:f3:fd:f7:c3:54:e6:04:03:2a:
         54:cf:d2:2e:33:7d:71:b4:44:3b:5c:8c:38:c2:91:2c:af:0f:
         a0:59:81:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----