Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD485D46AE9011F19B1F10F9CE1D38B0.roa
File:                     CD485D46AE9011F19B1F10F9CE1D38B0.roa (raw, json)
Hash identifier:          ncmS9y8rzGD2cu4WoEyxGRbHNgoJ2k4fscbCjrfRiHw=
Subject key identifier:   09:24:C9:E3:C8:5E:7A:E9:43:E2:86:6F:1C:CE:E8:1C:08:62:D5:52
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D596
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD485D46AE9011F19B1F10F9CE1D38B0.roa
Signing time:             Sat 12 Sep 2026 10:00:37 +0000
ROA not before:           Sat 12 Sep 2026 10:00:33 +0000
ROA not after:            Tue 22 Sep 2026 10:00:33 +0000
asID:                     36137
IP address blocks:        156.245.64.0/18 maxlen: 24
                          156.245.64.0/20 maxlen: 24
                          156.245.80.0/20 maxlen: 24
                          156.245.96.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120214 (0x1d596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 12 10:00:33 2026 GMT
            Not After : Sep 22 10:00:33 2026 GMT
        Subject: CN=6aa522c5-aae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:24:40:ce:b2:57:58:9d:75:18:a4:9a:25:e2:
                    b2:d0:10:d3:ea:29:f6:47:81:d8:19:62:dc:54:ce:
                    49:32:c0:de:15:40:dd:f4:2d:4d:97:df:3e:f3:6b:
                    56:32:85:31:ca:2d:55:f9:79:de:2f:7f:ea:ae:ac:
                    6d:ac:cf:90:53:80:be:63:1c:1c:ea:bd:6a:05:df:
                    57:9e:2a:e9:1e:13:19:6d:58:4d:e3:af:e7:9b:ff:
                    83:c2:77:1d:02:46:c4:fe:4d:88:b4:55:12:28:cd:
                    8b:08:aa:08:3e:c0:61:72:ee:7e:6a:7d:02:40:a9:
                    28:29:b9:ff:13:b7:ba:16:f7:12:13:88:7f:40:db:
                    21:e1:e6:d3:39:39:e0:eb:c1:8b:81:a7:9a:57:f0:
                    bd:c3:60:0f:6f:f0:1f:e4:ec:3c:89:07:89:c6:09:
                    67:b3:81:71:75:ec:83:4a:80:14:63:ea:89:8d:4f:
                    19:23:46:a0:c4:dc:fc:25:75:14:45:ab:0b:10:6b:
                    cb:06:d4:54:5b:0d:80:40:43:8e:aa:ea:ab:09:99:
                    7f:99:12:b2:08:0f:65:82:17:07:81:b6:a1:31:8f:
                    84:0a:6d:80:ea:a4:53:23:ec:4c:2d:7a:06:a1:7d:
                    26:4b:90:ba:24:cb:66:1a:e7:bc:11:6f:5b:7f:d0:
                    cb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:24:C9:E3:C8:5E:7A:E9:43:E2:86:6F:1C:CE:E8:1C:08:62:D5:52
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD485D46AE9011F19B1F10F9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         24:45:78:86:39:19:c4:b1:46:5b:87:13:44:5a:8b:41:75:5d:
         51:6a:95:ac:2a:63:9a:f2:4f:c7:aa:e9:58:41:97:4e:29:58:
         4f:ef:7e:1e:54:2c:69:03:ad:5f:03:72:ea:15:8e:54:40:d6:
         0f:af:ef:77:c8:f6:fc:0a:4c:8e:50:78:a9:0c:9a:af:8e:48:
         8e:00:b3:1f:65:e3:67:97:e4:da:ae:af:27:5b:51:ba:99:26:
         db:cc:2c:2d:83:9b:bf:38:87:f0:d4:dd:b9:4e:8b:cb:ec:d3:
         7a:fa:7c:e8:14:6d:96:e6:f3:fe:0a:00:3c:51:d6:e6:00:7f:
         9e:da:0e:ac:06:00:48:87:3a:64:f2:5d:20:07:35:40:67:6e:
         e3:ee:38:70:d9:3c:37:63:cf:8c:42:4d:e0:9c:7c:e7:67:fa:
         2b:3f:2e:5d:70:f0:41:7f:45:7e:f3:b5:9b:11:6d:9c:e3:49:
         cb:02:8b:f0:d2:34:d0:e8:1d:22:d8:e0:8c:33:e4:c0:8e:fe:
         e1:88:2d:bc:de:9b:e5:23:3d:ca:36:3e:da:5f:6d:ba:5a:65:
         e0:00:82:34:d7:7d:71:6d:9b:be:ad:54:2d:b0:6d:5b:d9:1d:
         a3:a5:24:2e:85:fe:ce:40:84:07:b9:e3:b1:09:0d:9f:a4:10:
         05:8f:ab:dc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdWWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTEyMTAwMDMzWhcNMjYwOTIyMTAwMDMzWjAYMRYw
FAYDVQQDEw02YWE1MjJjNS1hYWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0SRAzrJXWJ11GKSaJeKy0BDT6in2R4HYGWLcVM5JMsDeFUDd9C1Nl98+
82tWMoUxyi1V+XneL3/qrqxtrM+QU4C+Yxwc6r1qBd9XnirpHhMZbVhN46/nm/+D
wncdAkbE/k2ItFUSKM2LCKoIPsBhcu5+an0CQKkoKbn/E7e6FvcSE4h/QNsh4ebT
OTng68GLgaeaV/C9w2APb/Af5Ow8iQeJxglns4FxdeyDSoAUY+qJjU8ZI0agxNz8
JXUURasLEGvLBtRUWw2AQEOOquqrCZl/mRKyCA9lghcHgbahMY+ECm2A6qRTI+xM
LXoGoX0mS5C6JMtmGue8EW9bf9DLAQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAkk
yePIXnrpQ+KGbxzO6BwIYtVSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRDQ4NUQ0NkFFOTAxMUYxOUIxRjEwRjlDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnPVAMA0GCSqGSIb3DQEBCwUA
A4IBAQAkRXiGORnEsUZbhxNEWotBdV1RapWsKmOa8k/HqulYQZdOKVhP734eVCxp
A61fA3LqFY5UQNYPr+93yPb8CkyOUHipDJqvjkiOALMfZeNnl+Tarq8nW1G6mSbb
zCwtg5u/OIfw1N25TovL7NN6+nzoFG2W5vP+CgA8UdbmAH+e2g6sBgBIhzpk8l0g
BzVAZ27j7jhw2Tw3Y8+MQk3gnHznZ/orPy5dcPBBf0V+87WbEW2c40nLAovw0jTQ
6B0i2OCMM+TAjv7hiC283pvlIz3KNj7aX226WmXgAII0131xbZu+rVQtsG1b2R2j
pSQuhf7OQIQHueOxCQ2fpBAFj6vc
-----END CERTIFICATE-----