Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/C9E176C4900D11EDBBB09194F1222468.roa
File:                     C9E176C4900D11EDBBB09194F1222468.roa (raw, json)
Hash identifier:          soM2yZXuo6ZaC0GMS43kYiGSZ+TAsc62gpUyAjHX2nA=
Subject key identifier:   F1:87:34:3C:61:64:96:13:7B:FC:47:36:EA:7B:ED:57:46:C8:61:72
Certificate issuer:       /CN=F3614ABBAF/serialNumber=7801603BB2F37046E0FAFDD7A74FCB06E3C40818
Certificate serial:       0A
Authority key identifier: 78:01:60:3B:B2:F3:70:46:E0:FA:FD:D7:A7:4F:CB:06:E3:C4:08:18
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/C9E176C4900D11EDBBB09194F1222468.roa
Signing time:             Mon 09 Jan 2023 11:07:21 +0000
ROA not before:           Mon 09 Jan 2023 11:07:18 +0000
ROA not after:            Tue 09 Jan 2024 11:07:18 +0000
asID:                     328341
IP address blocks:        102.164.0.0/19 maxlen: 19
                          2c0f:ec70::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614ABBAF/serialNumber=7801603BB2F37046E0FAFDD7A74FCB06E3C40818
        Validity
            Not Before: Jan  9 11:07:18 2023 GMT
            Not After : Jan  9 11:07:18 2024 GMT
        Subject: CN=63bbf569-869f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:13:2d:31:82:2e:0e:e5:ac:f2:33:4e:1e:f8:
                    8a:59:07:be:61:4e:03:8f:49:f0:49:8f:30:04:a4:
                    56:d5:40:c4:3c:63:ee:24:2a:2b:8d:75:30:4b:76:
                    cc:01:77:b0:e7:62:f4:19:f0:68:f8:75:cb:46:eb:
                    90:13:af:3a:bb:ec:c7:44:f7:9d:ab:25:92:39:66:
                    34:d5:b5:23:bb:93:6b:9a:59:1f:6e:4a:38:2d:44:
                    be:6e:64:15:c6:0b:46:98:bd:0f:25:80:38:1b:40:
                    9e:7e:d0:a6:03:95:37:89:c6:60:20:62:36:d2:bf:
                    d7:ac:25:59:9c:86:cd:77:4e:c2:a7:88:ce:d5:26:
                    5c:30:d7:39:50:c7:da:a9:7b:e1:60:09:12:06:0e:
                    ba:9a:e4:2c:33:29:dd:5e:2d:17:02:a9:8b:53:7b:
                    ed:59:c9:2b:d3:f9:0d:ef:f3:cd:9c:81:73:53:ea:
                    22:ed:9d:2e:c4:75:4a:d7:26:82:42:e8:15:7b:25:
                    25:c8:81:01:73:3f:a8:d7:4c:29:3f:22:c1:71:5d:
                    41:5d:8f:e7:57:f8:b9:9c:05:aa:53:a9:9e:15:a8:
                    31:9d:1d:64:1b:0a:d5:50:ef:15:0b:b4:f0:04:7c:
                    8b:1f:b7:4b:9f:3d:de:3f:eb:bc:f4:bb:86:c6:49:
                    1f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:87:34:3C:61:64:96:13:7B:FC:47:36:EA:7B:ED:57:46:C8:61:72
            X509v3 Authority Key Identifier:
                keyid:78:01:60:3B:B2:F3:70:46:E0:FA:FD:D7:A7:4F:CB:06:E3:C4:08:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/C9E176C4900D11EDBBB09194F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.164.0.0/19
                IPv6:
                  2c0f:ec70::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:3e:1e:e0:95:44:c6:3e:62:2e:33:55:77:7b:53:77:53:80:
         e7:0c:f3:07:68:33:53:29:1c:0e:29:9d:bb:bc:5d:68:a9:a2:
         b5:6e:36:3a:7a:06:92:d2:84:7e:b8:35:90:b4:47:42:7e:d1:
         28:32:57:76:37:34:e6:3d:65:c7:3d:2e:1d:c4:11:b4:c9:07:
         da:b4:20:c7:c5:46:dd:b3:48:3c:ff:5e:5a:e9:83:00:11:e4:
         ac:dc:74:8f:44:d4:57:73:64:6e:a4:c7:ca:16:2e:e2:1b:bb:
         5e:70:e3:b2:6d:2c:e6:44:92:9e:74:2d:1d:d0:28:bc:c1:0d:
         8a:91:fb:ec:97:bc:af:5e:90:0e:f9:bf:37:9c:16:d4:a6:fd:
         c6:19:9b:23:47:a7:b9:03:70:50:10:34:8a:46:ca:04:0f:6e:
         fe:fc:2c:f7:cd:df:8f:a5:5f:c8:16:77:b7:da:95:44:d8:7c:
         3b:b6:f0:e1:6d:2d:a3:be:13:4d:6d:60:95:8b:a6:5b:7a:0e:
         0e:69:1a:e3:b9:a1:2c:bf:c3:96:84:c5:1b:83:bd:5e:5e:c2:
         83:cf:1e:3c:9c:9c:9c:81:7f:37:85:3d:35:c1:2a:31:b5:b7:
         2e:37:ea:bb:55:0b:e8:a4:0a:4a:51:9e:d5:a8:b5:ca:cc:2a:
         be:35:2b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----