Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/703D82FEE0D311E885C23621F8AEA228.roa
File:                     703D82FEE0D311E885C23621F8AEA228.roa (raw, json)
Hash identifier:          3Wzqp8sqZtZSdiz2lBJ0fLHL50tX5BK2SnFX7dO38X8=
Subject key identifier:   A8:F7:43:6C:47:F7:B3:D1:DB:09:B2:2E:4F:94:D9:6E:89:51:B5:27
Certificate issuer:       /CN=F361C3A1AF/serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Certificate serial:       0C
Authority key identifier: 90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/703D82FEE0D311E885C23621F8AEA228.roa
Signing time:             Mon 05 Nov 2018 08:18:56 +0000
ROA not before:           Mon 05 Nov 2018 08:18:51 +0000
ROA not after:            Sat 31 Dec 2022 08:18:51 +0000
asID:                     36915
IP address blocks:        41.207.68.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361C3A1AF
        Validity
            Not Before: Nov  5 08:18:51 2018 GMT
            Not After : Dec 31 08:18:51 2022 GMT
        Subject: CN=5bdffcf0-94c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:7d:a3:3b:03:d0:16:77:31:56:a7:60:fb:
                    f0:5c:9e:5d:42:c2:11:90:2d:18:ef:8f:d4:9e:cf:
                    9f:1f:dc:f0:08:2a:5f:62:65:27:01:50:27:05:b1:
                    28:2a:c9:85:8e:82:81:15:d2:1c:ab:33:4f:21:5f:
                    5d:3e:84:22:11:e0:10:82:8e:a2:27:52:de:6e:1c:
                    4a:21:79:24:ed:3a:ae:d6:4b:14:2e:df:3a:df:1c:
                    4b:20:32:e1:98:3d:5f:eb:6a:97:5a:61:6b:0a:d7:
                    43:e5:94:04:2f:85:a3:83:f1:3f:05:f3:ea:c2:4c:
                    07:9b:e0:f5:fa:a2:0f:12:fa:ee:d9:44:83:fb:52:
                    ec:b8:91:e5:c8:46:4e:eb:2b:d4:b2:16:1c:3f:77:
                    c1:fa:95:71:4b:a8:4d:b1:79:42:cd:f9:01:de:d9:
                    5f:27:85:36:d6:40:2b:82:10:9a:24:b6:f2:12:d6:
                    47:f7:50:a1:b1:64:54:68:51:66:44:80:ea:86:cd:
                    4a:e8:1c:65:58:c4:c5:46:bc:e0:d5:ee:62:9e:64:
                    ac:cb:cc:cb:9e:c9:cf:a9:36:3e:21:25:9e:0f:61:
                    e8:84:ad:19:1c:8c:ca:14:ad:a6:c7:5f:20:ab:3a:
                    c2:c3:a0:20:dc:75:95:c6:9b:bb:18:4c:d2:62:41:
                    4e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F7:43:6C:47:F7:B3:D1:DB:09:B2:2E:4F:94:D9:6E:89:51:B5:27
            X509v3 Authority Key Identifier:
                keyid:90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/703D82FEE0D311E885C23621F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.207.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:5d:b9:2e:af:52:1e:af:94:2e:29:6a:07:2d:ae:b0:03:fc:
         a4:01:66:69:e2:07:99:19:42:56:6d:4f:a1:43:df:5b:b2:60:
         24:29:dc:7c:3b:b5:42:f6:97:d7:5f:a9:6b:0f:52:aa:47:7d:
         44:20:ee:b6:aa:c8:af:a2:cc:90:4b:15:84:11:87:f0:bd:c9:
         33:62:f8:65:f5:a3:ef:ff:14:a0:57:c8:bb:8b:8e:d7:40:bc:
         53:69:9f:cd:4e:3f:71:22:2c:09:a2:dd:7d:99:d0:04:79:2b:
         e1:75:d8:9d:d1:41:4d:7f:7c:be:75:99:16:dd:2c:86:38:f7:
         0c:eb:85:49:d5:79:fa:61:9e:42:b8:b4:98:49:db:bf:99:98:
         8d:c9:89:8a:2e:cf:1c:83:54:e8:8e:3e:a2:1f:79:a8:b6:16:
         49:a4:78:4f:14:d7:cc:df:8b:b7:61:69:ae:08:98:9a:c8:e7:
         07:6a:2a:b3:1f:1e:e7:80:84:57:ab:5d:63:b3:a3:91:ad:5a:
         63:73:04:e8:20:8f:80:55:a1:c4:4a:bb:e9:00:ac:b5:3a:39:
         de:f5:7f:6c:ea:4b:3f:37:57:bd:cf:f7:74:a1:2b:51:8a:95:
         3c:c8:3e:ba:9d:13:d3:fa:b7:be:c1:37:5c:75:7f:87:8d:7f:
         51:d5:a2:be
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBDDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
QzNBMUFGMTEwLwYDVQQFEyg5MEU5ODg3NzkxQ0YyRDk2MDUwMUY4QUVERTI0QTIz
MzRBQkE1NDAzMB4XDTE4MTEwNTA4MTg1MVoXDTIyMTIzMTA4MTg1MVowGDEWMBQG
A1UEAxMNNWJkZmZjZjAtOTRjOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ19faM7A9AWdzFWp2D78FyeXULCEZAtGO+P1J7Pnx/c8AgqX2JlJwFQJwWx
KCrJhY6CgRXSHKszTyFfXT6EIhHgEIKOoidS3m4cSiF5JO06rtZLFC7fOt8cSyAy
4Zg9X+tql1phawrXQ+WUBC+Fo4PxPwXz6sJMB5vg9fqiDxL67tlEg/tS7LiR5chG
Tusr1LIWHD93wfqVcUuoTbF5Qs35Ad7ZXyeFNtZAK4IQmiS28hLWR/dQobFkVGhR
ZkSA6obNSugcZVjExUa84NXuYp5krMvMy57Jz6k2PiElng9h6IStGRyMyhStpsdf
IKs6wsOgINx1lcabuxhM0mJBTjUCAwEAAaOCAm4wggJqMB0GA1UdDgQWBBSo90Ns
R/ez0dsJsi5PlNluiVG1JzAfBgNVHSMEGDAWgBSQ6Yh3kc8tlgUB+K7eJKIzSrpU
AzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MUMzQTEvMkQ5Njc3MkVFMEQwMTFFODhBRTYwNzFDRjhBRUEyMjgva09tSWQ1
SFBMWllGQWZpdTNpU2lNMHE2VkFNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMva09tSWQ1SFBMWllGQWZpdTNpU2lNMHE2VkFNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUMzQTEvMkQ5Njc3MkVFMEQwMTFFODhBRTYwNzFDRjhB
RUEyMjgvNzAzRDgyRkVFMEQzMTFFODg1QzIzNjIxRjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBKc9EMA0GCSqGSIb3DQEBCwUAA4IBAQAR
Xbkur1Ier5QuKWoHLa6wA/ykAWZp4geZGUJWbU+hQ99bsmAkKdx8O7VC9pfXX6lr
D1KqR31EIO62qsivosyQSxWEEYfwvckzYvhl9aPv/xSgV8i7i47XQLxTaZ/NTj9x
IiwJot19mdAEeSvhddid0UFNf3y+dZkW3SyGOPcM64VJ1Xn6YZ5CuLSYSdu/mZiN
yYmKLs8cg1Tojj6iH3mothZJpHhPFNfM34u3YWmuCJiayOcHaiqzHx7ngIRXq11j
s6ORrVpjcwToII+AVaHESrvpAKy1Ojne9X9s6ks/N1e9z/d0oStRipU8yD66nRPT
+re+wTdcdX+HjX9R1aK+
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:52:05 2025 by rpki-client