Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9315A1BABA1111EC80EE9BD95A40D577.roa
File:                     9315A1BABA1111EC80EE9BD95A40D577.roa (raw, json)
Hash identifier:          7uU72p0SeGfeP9G+nCapzEEGHRNz8VQEgyQCOzsjqIg=
Subject key identifier:   93:7B:7E:48:A2:50:A1:EC:9B:32:78:F4:4A:B1:5E:85:53:F1:15:4B
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0821
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9315A1BABA1111EC80EE9BD95A40D577.roa
Signing time:             Tue 12 Apr 2022 03:35:19 +0000
ROA not before:           Tue 12 Apr 2022 03:35:15 +0000
ROA not after:            Wed 12 Apr 2023 03:35:15 +0000
asID:                     57043
IP address blocks:        154.16.35.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2081 (0x821)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Apr 12 03:35:15 2022 GMT
            Not After : Apr 12 03:35:15 2023 GMT
        Subject: CN=6254f377-4b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ca:dd:f9:ed:39:5b:e5:62:1f:9d:6b:75:a7:
                    7c:9a:48:00:e2:4e:68:55:31:9f:6c:2c:48:03:a1:
                    66:77:96:95:14:72:e8:56:0b:1a:16:20:a5:5a:d1:
                    84:8a:63:98:0a:02:e5:94:6e:fd:fe:05:61:fa:27:
                    4a:e0:7b:be:a8:8c:fd:96:46:f9:d6:0d:34:4b:91:
                    7a:e2:78:e7:e6:82:b8:bd:c2:b3:d2:30:0a:9f:f1:
                    45:26:70:c0:f0:97:4e:77:bd:98:70:d8:ae:a0:00:
                    e5:82:cd:ea:b5:17:ef:dc:eb:ab:73:30:d7:cc:28:
                    5f:b5:6e:97:eb:3b:9e:75:8d:54:b8:d5:91:1b:9a:
                    17:70:9f:8e:2f:de:56:f3:10:73:b5:b3:53:19:f1:
                    46:3e:1f:40:a2:47:95:a8:ff:4b:07:15:70:a6:be:
                    90:f1:b5:7d:35:3e:46:57:b0:80:0e:61:df:93:5b:
                    74:03:c1:c6:93:b6:26:46:25:0d:dc:10:9e:1b:b6:
                    7c:27:07:5d:39:4b:c8:45:12:27:6f:e0:ef:10:1c:
                    00:cf:1f:e5:cf:b5:6b:32:a8:d9:4d:d2:a2:6a:bc:
                    01:79:9b:e7:3e:d6:c3:f5:36:83:3d:b5:0c:ab:87:
                    10:bc:b9:04:e4:b8:28:c1:26:aa:a2:db:8c:d8:3f:
                    70:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7B:7E:48:A2:50:A1:EC:9B:32:78:F4:4A:B1:5E:85:53:F1:15:4B
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9315A1BABA1111EC80EE9BD95A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:dc:98:89:05:44:f9:ee:bf:67:82:2a:75:22:9c:79:3a:66:
         f1:90:8e:b3:fd:a6:09:f9:4c:81:91:ae:19:a2:76:17:24:f2:
         b1:24:66:3a:0c:1d:c3:3c:b2:d8:68:67:8c:18:fb:e3:dd:03:
         06:50:68:d3:7b:db:c5:29:6d:e4:b1:e6:fc:c1:0f:14:3a:f2:
         9d:d6:3f:69:8a:0a:da:ad:72:b0:e3:5e:52:16:2e:89:c2:cd:
         f8:6d:6b:9c:6a:35:4a:06:65:d3:36:0f:02:3a:31:ab:aa:32:
         7b:79:3c:5c:62:d5:dc:61:eb:4f:34:5b:35:78:7a:db:70:53:
         7c:bb:b6:85:2b:13:56:d4:27:6f:cc:65:5d:ce:18:36:29:f8:
         1e:5a:fd:08:51:d0:8a:17:d7:5f:2e:ce:b2:4a:09:3b:b9:e7:
         2c:f5:ba:5e:45:b6:78:b7:5b:b1:18:91:9c:07:0a:ea:70:49:
         6a:3d:15:7e:11:a5:f8:93:16:62:40:d7:89:b6:cb:cc:9e:79:
         8b:31:15:64:a3:66:fc:46:cb:c6:60:f2:a7:eb:68:b9:85:4b:
         53:11:a1:a0:3b:a7:5b:b0:03:05:58:65:75:ff:b2:c1:23:10:
         10:b5:ab:9e:12:4d:a3:63:03:0f:de:02:0f:63:13:3a:0b:d3:
         92:d4:53:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----