Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/4746C81A86B911E99DC60C2CF8AEA228.roa
File:                     4746C81A86B911E99DC60C2CF8AEA228.roa (raw, json)
Hash identifier:          W8VHVCrphR2AtxGRnNwZks9hcRrvX+awZxfpL78n7gE=
Subject key identifier:   E9:45:F3:2C:60:18:B6:62:5D:BE:F5:E1:1C:78:95:B4:5C:B2:7B:FC
Certificate issuer:       /CN=F361E6A3AF/serialNumber=07A489F99E4A53D8292BF3C4D14E3A238F37637E
Certificate serial:       02
Authority key identifier: 07:A4:89:F9:9E:4A:53:D8:29:2B:F3:C4:D1:4E:3A:23:8F:37:63:7E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B6SJ-Z5KU9gpK_PE0U46I483Y34.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/4746C81A86B911E99DC60C2CF8AEA228.roa
Signing time:             Tue 04 Jun 2019 11:09:54 +0000
ROA not before:           Tue 04 Jun 2019 11:09:47 +0000
ROA not after:            Sat 31 Dec 2022 11:09:47 +0000
asID:                     328339
IP address blocks:        102.134.72.0/22 maxlen: 24
                          2c0f:ef48::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361E6A3AF/serialNumber=07A489F99E4A53D8292BF3C4D14E3A238F37637E
        Validity
            Not Before: Jun  4 11:09:47 2019 GMT
            Not After : Dec 31 11:09:47 2022 GMT
        Subject: CN=5cf65181-9993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d8:e5:f4:43:8a:49:0f:92:85:06:86:37:1e:
                    8e:e7:1d:c4:4b:2e:92:4a:2b:ff:1a:13:0d:1b:5b:
                    97:fb:ba:85:ea:4c:0b:77:56:5e:e0:ad:ad:d2:53:
                    f2:cf:39:3b:02:b0:f2:e4:0f:1b:0f:14:6c:78:fb:
                    58:ab:38:b1:5e:22:34:0e:38:57:fe:f2:f0:cf:4f:
                    6d:f7:c2:f1:8c:5f:b6:03:1f:fb:3f:dc:4b:99:c3:
                    f3:fa:48:59:91:1d:78:68:6a:6f:a3:fe:f5:ce:a2:
                    2f:cc:a9:5e:b1:03:b4:50:93:2b:1e:45:d6:90:50:
                    9e:3a:ba:f5:83:0f:84:19:35:01:d0:9c:1d:0c:06:
                    11:33:a4:8d:7b:29:a9:4d:83:9c:e6:77:1b:37:18:
                    c4:db:b3:24:36:54:10:25:6b:82:e7:46:d5:c1:d4:
                    17:c4:65:3b:ee:a8:46:fd:de:77:b2:82:b2:c3:81:
                    97:84:02:98:fb:12:a3:b7:a3:3c:5b:f9:1d:b6:b4:
                    2e:66:2f:a2:22:7b:06:51:82:5d:69:57:26:20:c4:
                    b1:ca:44:67:03:e6:3d:22:53:e0:cf:e5:23:7f:03:
                    77:10:86:40:c9:39:dd:05:53:cd:d5:6b:3b:6e:4f:
                    78:d5:76:59:4c:09:97:ad:da:8b:35:ba:4b:1f:0a:
                    fb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:45:F3:2C:60:18:B6:62:5D:BE:F5:E1:1C:78:95:B4:5C:B2:7B:FC
            X509v3 Authority Key Identifier:
                keyid:07:A4:89:F9:9E:4A:53:D8:29:2B:F3:C4:D1:4E:3A:23:8F:37:63:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/B6SJ-Z5KU9gpK_PE0U46I483Y34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B6SJ-Z5KU9gpK_PE0U46I483Y34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/4746C81A86B911E99DC60C2CF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.134.72.0/22
                IPv6:
                  2c0f:ef48::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:e3:90:eb:a0:b9:46:0a:ad:09:f6:08:aa:05:e8:9c:b5:b7:
         b8:21:61:72:19:2e:0c:33:65:87:c1:93:0c:cf:ef:4a:f6:e3:
         73:65:97:82:a8:c6:ce:8f:aa:92:2a:81:77:e2:75:df:82:96:
         6a:bc:dd:77:78:67:32:c2:a6:6c:15:85:cd:95:65:b3:fd:e8:
         67:01:ee:41:f7:36:48:8a:6c:86:fa:b9:3d:25:55:13:51:f2:
         b5:b3:79:0d:f8:65:81:90:fa:90:21:27:d9:81:d5:77:d1:27:
         60:ff:8b:64:ec:48:6f:34:0d:8c:a4:b6:ec:68:aa:27:bb:24:
         c7:e0:9a:1e:18:16:37:ef:cb:df:12:86:4c:23:b0:43:09:f4:
         cb:31:e3:39:19:c0:b4:43:aa:65:88:03:a0:56:0f:82:52:fc:
         eb:d3:a5:5b:75:fd:9b:99:52:2a:e2:b3:15:65:35:26:37:e2:
         84:07:c9:ad:f7:00:10:98:e5:94:9d:3e:8f:a8:55:2d:a4:3f:
         6e:d3:21:db:30:15:e8:b1:f5:84:ac:80:9e:be:91:75:88:56:
         a6:f4:93:bf:4e:7d:99:6d:05:22:4d:eb:66:ca:26:55:2b:4f:
         24:e3:c7:dc:bd:3e:12:ea:cb:0a:ae:d5:23:b3:f6:31:f7:5b:
         6d:a6:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----