Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D286DCF0431B11EC9A96882AD8A014CE.roa
File:                     D286DCF0431B11EC9A96882AD8A014CE.roa (raw, json)
Hash identifier:          N6H2MFtlym77TgDilfPOZ4Rl691bZr5TrKrzwfQwv4o=
Subject key identifier:   6E:42:4D:39:A8:C4:73:AA:BF:BD:BB:D7:E8:C1:41:DD:8D:18:BD:A7
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       06F5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D286DCF0431B11EC9A96882AD8A014CE.roa
Signing time:             Thu 11 Nov 2021 18:18:52 +0000
ROA not before:           Thu 11 Nov 2021 18:18:47 +0000
ROA not after:            Fri 11 Nov 2022 18:18:47 +0000
asID:                     397373
IP address blocks:        154.16.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1781 (0x6f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Nov 11 18:18:47 2021 GMT
            Not After : Nov 11 18:18:47 2022 GMT
        Subject: CN=618d5e8c-e4f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4c:a1:6c:81:c6:75:c7:7e:57:f7:89:31:71:
                    1f:1b:b2:b1:58:5c:44:fc:26:7b:e6:27:39:0b:18:
                    63:08:2c:d3:98:4c:f2:1f:d4:2b:9d:44:e0:e7:07:
                    dc:01:96:99:3a:ea:12:0b:b8:0a:d7:ca:39:1a:97:
                    6f:d0:55:f2:28:ad:68:04:77:04:bd:bc:cc:49:b7:
                    c9:a8:a2:ca:5f:53:90:d6:15:50:ef:98:20:d6:0f:
                    7e:8a:66:51:29:48:af:b5:c5:88:38:30:25:9c:a3:
                    d5:ff:50:89:e0:6f:37:11:d6:eb:75:1e:46:20:10:
                    1f:66:45:ab:d9:64:8a:8f:84:d2:c2:ab:ab:b5:b6:
                    0c:48:8d:01:85:1e:4c:05:63:7a:6d:84:9d:73:ea:
                    3b:36:ae:4c:cd:d8:97:b3:d8:fb:33:39:1c:c5:8d:
                    1c:64:00:67:23:db:69:2e:e1:61:2b:b1:72:27:03:
                    e3:52:42:ed:24:2a:b8:e0:78:82:68:2b:a3:40:2c:
                    c0:07:ff:01:5e:c0:14:aa:62:7c:27:cf:90:cf:c8:
                    c0:3e:a2:dc:ab:ca:84:4d:17:7b:09:43:7f:91:93:
                    2c:37:8a:91:57:fa:39:f2:26:7b:b8:34:8c:c0:66:
                    45:c9:1c:1c:f9:e8:86:93:9e:f2:87:2a:25:b3:d3:
                    04:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:42:4D:39:A8:C4:73:AA:BF:BD:BB:D7:E8:C1:41:DD:8D:18:BD:A7
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D286DCF0431B11EC9A96882AD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:7e:74:9f:de:aa:95:e2:07:1e:0a:8f:b9:68:54:9c:3d:6d:
         0b:1b:cd:e1:5b:f4:51:82:c4:28:d4:2c:5b:7c:ca:73:10:9e:
         41:51:a3:70:7e:9a:8b:b7:57:1b:65:94:57:a8:1b:4f:29:29:
         fa:bc:3e:dc:4a:2f:65:4f:6e:94:51:b7:e5:18:cd:1b:f9:09:
         d5:13:7c:70:6d:79:88:a6:6c:ed:d9:1e:87:39:5e:db:93:44:
         71:76:a0:ba:af:8a:7d:1c:ea:42:d4:8e:18:f3:46:74:1c:d6:
         6f:dd:90:cc:d4:27:33:94:9a:4d:d7:aa:89:53:ac:fb:9e:1f:
         36:30:2a:b5:ef:2a:d8:e1:6a:4c:0a:34:b0:78:ed:b8:0b:14:
         1a:ad:a2:f8:39:e2:21:bf:82:d6:cd:8a:4b:a5:09:04:d6:02:
         a8:c6:85:fc:62:b4:8b:f0:bf:72:ae:92:3b:3b:6d:73:41:40:
         a0:0a:49:05:e5:dc:88:4f:c1:90:0e:c9:1f:d2:21:e7:d2:83:
         d0:6f:f2:98:0f:b3:ce:1f:a9:eb:ae:0d:17:d8:3b:f2:81:c3:
         cb:31:6f:82:d4:5e:ed:d7:fc:24:ea:c4:23:17:6e:8c:ab:94:
         2d:40:16:42:9c:33:a5:db:2b:ed:aa:69:62:17:6e:61:ee:19:
         78:b6:9f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----