Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/0F15B42A21CF11ECA565DC46D8A014CE.roa
File:                     0F15B42A21CF11ECA565DC46D8A014CE.roa (raw, json)
Hash identifier:          nkyLcBh8ww6jQBcF2v8XWLEEtHwAFQis33Kpwl6Yv/I=
Subject key identifier:   53:16:E4:E7:77:8C:7A:FE:04:0E:75:F5:95:70:05:9F:10:D5:83:BD
Certificate issuer:       /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial:       21
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/0F15B42A21CF11ECA565DC46D8A014CE.roa
Signing time:             Thu 30 Sep 2021 09:16:14 +0000
ROA not before:           Thu 30 Sep 2021 09:16:10 +0000
ROA not after:            Sat 30 Sep 2023 09:16:10 +0000
asID:                     328327
IP address blocks:        102.140.75.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
        Validity
            Not Before: Sep 30 09:16:10 2021 GMT
            Not After : Sep 30 09:16:10 2023 GMT
        Subject: CN=6155805e-6534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:8f:49:a9:9b:c4:d4:d3:f0:b2:99:6b:42:
                    ce:1b:b3:39:1d:2d:80:1d:c0:8b:8f:14:43:ac:0c:
                    a9:d0:7d:12:63:43:26:ba:4b:0d:4f:3c:7d:95:61:
                    d1:c9:0c:96:3e:39:de:29:a9:95:ce:3a:ab:f1:8f:
                    f0:e8:6b:a8:70:42:59:d3:d0:be:e4:5a:74:bf:5a:
                    a4:be:b2:73:8f:56:86:17:9f:1c:f2:56:d4:7e:eb:
                    7c:4d:68:fc:da:54:e0:a9:c0:dc:3d:45:69:83:f6:
                    f5:54:20:24:7c:72:6f:fa:6d:61:2e:35:92:34:95:
                    7d:aa:94:3d:7e:d5:03:57:12:1a:af:5d:be:20:3f:
                    d3:b9:c7:b8:ac:79:58:2e:ea:43:5a:29:ff:47:ad:
                    2e:e8:73:4d:fb:72:83:51:80:eb:b4:f2:9f:a9:e2:
                    4c:84:71:42:61:d5:6f:24:05:77:40:23:ad:99:c4:
                    2f:58:a3:22:bf:58:e6:74:a3:e6:09:46:ea:d8:69:
                    20:cb:55:6e:96:51:8c:71:79:51:8b:4b:02:b5:60:
                    4e:81:1d:2b:56:28:1c:aa:5f:fe:fe:e1:9e:cb:c9:
                    b5:4e:ea:a8:fb:40:e1:a1:a0:f5:cc:1e:b3:6c:8c:
                    87:ba:4c:48:0f:72:3d:c2:fd:d6:17:9d:51:1c:b6:
                    db:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:16:E4:E7:77:8C:7A:FE:04:0E:75:F5:95:70:05:9F:10:D5:83:BD
            X509v3 Authority Key Identifier:
                keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/0F15B42A21CF11ECA565DC46D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.140.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:46:20:2c:ab:6b:cb:5d:ea:f1:a7:c7:33:09:e9:2f:e1:6e:
         43:e4:57:d1:d3:5a:e3:c7:5f:c0:f1:37:90:10:41:d7:ef:29:
         e4:da:db:48:5d:d7:34:b3:f9:bb:e2:2d:40:94:f0:78:f7:79:
         ec:5d:9b:90:92:db:7f:b7:67:60:03:72:41:67:82:a3:0f:b6:
         8d:9c:67:44:dc:c1:fb:3d:d8:48:3d:6c:a4:de:a7:72:dd:e3:
         9c:d6:74:18:99:99:0c:66:6a:7a:56:a7:72:3e:ef:e6:1d:13:
         30:63:23:03:c1:0a:87:a9:d3:3b:d1:ac:88:99:3a:be:24:d9:
         d7:8a:15:e6:2f:4c:9a:7d:3e:d5:1f:d4:f4:bf:94:af:b1:dc:
         69:db:5f:09:8e:d3:bc:70:02:9d:34:df:84:f3:e4:ac:3b:9b:
         d8:20:9e:65:67:0c:ad:0d:f2:eb:6b:12:e1:4f:ae:2d:19:c9:
         a9:77:e4:dd:61:f4:4b:91:a9:98:84:03:62:eb:f4:66:df:7b:
         10:63:e5:12:1c:fb:0c:c3:78:25:56:77:f0:25:4a:4a:cf:1a:
         ce:dc:d1:14:7e:8f:9a:84:ff:ad:3d:fb:d3:dd:ce:92:16:9c:
         bf:9e:d6:ee:5a:ca:5e:0d:b3:79:a3:e8:34:b2:f8:a3:0d:d7:
         22:22:c0:cb
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBITANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYy
MUMwNkFGMTEwLwYDVQQFEygxREQxNkZENjhCRkY3Q0FCMUFCOTFDNTVEQTYxRkMw
Q0RGRjQxNzQzMB4XDTIxMDkzMDA5MTYxMFoXDTIzMDkzMDA5MTYxMFowGDEWMBQG
A1UEAwwNNjE1NTgwNWUtNjUzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMxwj0mpm8TU0/CymWtCzhuzOR0tgB3Ai48UQ6wMqdB9EmNDJrpLDU88fZVh
0ckMlj453implc46q/GP8OhrqHBCWdPQvuRadL9apL6yc49WhhefHPJW1H7rfE1o
/NpU4KnA3D1FaYP29VQgJHxyb/ptYS41kjSVfaqUPX7VA1cSGq9dviA/07nHuKx5
WC7qQ1op/0etLuhzTftyg1GA67Tyn6niTIRxQmHVbyQFd0AjrZnEL1ijIr9Y5nSj
5glG6thpIMtVbpZRjHF5UYtLArVgToEdK1YoHKpf/v7hnsvJtU7qqPtA4aGg9cwe
s2yMh7pMSA9yPcL91hedURy222ECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRTFuTn
d4x6/gQOdfWVcAWfENWDvTAfBgNVHSMEGDAWgBQd0W/Wi/98qxq5HFXaYfwM3/QX
QzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjFDMDYvNThDOUI3OEMyMDU5MTFFQzk5MUI2ODc3RDhBMDE0Q0UvSGRGdjFv
dl9mS3NhdVJ4VjJtSDhETl8wRjBNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSGRGdjFvdl9mS3NhdVJ4VjJtSDhETl8wRjBNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjFDMDYvNThDOUI3OEMyMDU5MTFFQzk5MUI2ODc3RDhB
MDE0Q0UvMEYxNUI0MkEyMUNGMTFFQ0E1NjVEQzQ2RDhBMDE0Q0Uucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGaMSzANBgkqhkiG9w0BAQsF
AAOCAQEAJUYgLKtry13q8afHMwnpL+FuQ+RX0dNa48dfwPE3kBBB1+8p5NrbSF3X
NLP5u+ItQJTwePd57F2bkJLbf7dnYANyQWeCow+2jZxnRNzB+z3YSD1spN6nct3j
nNZ0GJmZDGZqelancj7v5h0TMGMjA8EKh6nTO9GsiJk6viTZ14oV5i9Mmn0+1R/U
9L+Ur7HcadtfCY7TvHACnTTfhPPkrDub2CCeZWcMrQ3y62sS4U+uLRnJqXfk3WH0
S5GpmIQDYuv0Zt97EGPlEhz7DMN4JVZ38CVKSs8aztzRFH6PmoT/rT37093Okhac
v57W7lrKXg2zeaPoNLL4ow3XIiLAyw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org