Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3611F6AAE8911F1886445D0CE1D38B0.roa
File:                     F3611F6AAE8911F1886445D0CE1D38B0.roa (raw, json)
Hash identifier:          96NbKOAT7P+BA3Y6ZvveO4NbXFON0/7NHAyv6C5hrLI=
Subject key identifier:   32:1A:DB:5D:2D:4F:1E:E3:2A:BE:3C:2E:FF:A4:E9:7C:12:B5:6A:9F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D590
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3611F6AAE8911F1886445D0CE1D38B0.roa
Signing time:             Sat 12 Sep 2026 09:11:34 +0000
ROA not before:           Sat 12 Sep 2026 09:11:30 +0000
ROA not after:            Tue 22 Sep 2026 09:11:30 +0000
asID:                     398823
IP address blocks:        156.245.64.0/18 maxlen: 24
                          156.245.64.0/20 maxlen: 24
                          156.245.80.0/20 maxlen: 24
                          156.245.96.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120208 (0x1d590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 12 09:11:30 2026 GMT
            Not After : Sep 22 09:11:30 2026 GMT
        Subject: CN=6aa51746-cc1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7d:27:35:54:fa:2e:f9:98:b9:de:68:31:5e:
                    f0:6d:61:e2:cd:4e:95:66:04:40:be:55:e3:69:54:
                    9b:3d:11:b5:02:7c:1d:02:c8:d2:03:d6:f8:7a:9d:
                    46:76:d9:30:e1:b7:57:4e:1b:bc:af:43:6d:a6:7e:
                    51:88:58:1f:80:23:e7:2d:9c:10:f2:6b:b9:c4:d9:
                    3a:8f:c8:0a:91:4b:df:25:3c:37:c8:18:e9:3e:48:
                    f4:35:29:6b:08:69:d3:d4:52:4b:0d:1b:38:8c:cf:
                    24:27:21:85:ca:05:f1:b0:33:97:9c:84:32:24:22:
                    80:e6:ed:3f:ad:06:c0:fe:5f:7a:a0:0e:8c:4d:a5:
                    dc:d9:0a:0b:b4:5f:66:03:77:dc:da:d5:b5:a7:f6:
                    c2:53:f8:51:1e:47:9d:06:91:cd:78:cd:d6:35:1a:
                    d3:26:36:45:9b:25:1d:80:57:60:b5:39:d5:91:4e:
                    72:50:8d:7d:ab:a4:19:b5:b1:9c:f5:3d:bc:0d:a1:
                    8c:1f:c5:47:0d:45:56:c0:ac:f3:e1:4f:e6:eb:50:
                    f0:57:77:56:08:22:68:c7:a3:d2:c9:f6:eb:fe:11:
                    4e:1d:60:41:1c:39:a8:18:68:bb:6c:9c:76:05:cd:
                    e4:5b:50:5c:9b:22:88:ba:20:ab:dc:13:44:bb:cb:
                    d8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1A:DB:5D:2D:4F:1E:E3:2A:BE:3C:2E:FF:A4:E9:7C:12:B5:6A:9F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3611F6AAE8911F1886445D0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9d:ef:c9:3e:6e:69:4b:d5:d6:71:35:b0:2a:ba:60:ed:c1:f6:
         34:e4:9f:5e:a8:a0:66:ac:4e:10:7a:14:d0:21:e6:ab:6b:15:
         b1:7f:3e:20:59:00:e7:0d:44:a3:d8:5d:d8:64:7d:98:5f:ba:
         0b:6b:48:b2:68:16:ea:b4:35:cd:7b:72:21:95:d0:04:c7:86:
         a1:5f:54:68:48:fd:b8:2c:0c:e9:75:95:4e:31:58:b3:e6:af:
         63:71:b7:6f:58:e4:d0:d5:ee:6d:09:eb:76:4e:c3:ff:ec:b5:
         e4:29:4b:93:a9:97:ad:74:59:88:e1:aa:f7:87:c9:fc:8b:09:
         65:fd:56:31:42:00:48:ed:c2:21:9d:f4:95:8c:cc:49:f0:2e:
         32:b2:e3:21:d5:88:25:9c:83:c2:6a:b4:3a:cc:29:27:8a:d6:
         23:c8:9b:1c:2a:d3:1d:0e:f8:89:05:ac:79:6a:84:ec:a4:84:
         4f:cc:e8:21:2c:1d:6c:f2:67:37:d3:ac:c6:c7:64:b0:e5:bf:
         23:8c:38:52:46:f8:46:ae:3a:18:42:06:d0:38:c4:76:f4:99:
         85:84:bc:fb:3d:34:6c:fa:45:c5:77:95:29:7b:df:dc:91:f4:
         af:b6:83:e3:f8:1b:b7:77:3e:09:f3:8d:2b:9b:11:76:c5:be:
         6c:cf:05:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----