Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/632DBB687FE311EBABA48D44F8AEA228.roa
File:                     632DBB687FE311EBABA48D44F8AEA228.roa (raw, json)
Hash identifier:          J873V+Ql4VHW86RydFU1vsDMLpmg1Gj6z5ANcblFLKQ=
Subject key identifier:   16:39:C0:22:AB:39:04:69:86:4E:61:E6:C2:F5:A3:A7:92:6D:EB:77
Certificate issuer:       /CN=F362AF02AF/serialNumber=ECFF2426B1AF8A7120A61D33760E908C159C6AEF
Certificate serial:       029C
Authority key identifier: EC:FF:24:26:B1:AF:8A:71:20:A6:1D:33:76:0E:90:8C:15:9C:6A:EF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/632DBB687FE311EBABA48D44F8AEA228.roa
Signing time:             Mon 08 Mar 2021 07:53:37 +0000
ROA not before:           Mon 08 Mar 2021 07:53:29 +0000
ROA not after:            Thu 07 Apr 2022 07:53:29 +0000
asID:                     37520
IP address blocks:        2001:43f8:750::/44 maxlen: 46

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668 (0x29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AF02AF/serialNumber=ECFF2426B1AF8A7120A61D33760E908C159C6AEF
        Validity
            Not Before: Mar  8 07:53:29 2021 GMT
            Not After : Apr  7 07:53:29 2022 GMT
        Subject: CN=6045d800-7a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:cf:90:c9:a7:85:55:87:bf:e2:cf:b4:ad:
                    58:91:b9:9c:1b:87:56:2e:df:79:26:66:27:24:27:
                    df:18:05:05:8d:65:b2:2d:67:ba:e0:81:03:c0:ed:
                    cf:ed:8f:e2:27:e8:60:96:3f:e4:98:e4:9d:3a:e7:
                    c9:d3:89:3f:32:56:29:76:26:6c:18:3f:cc:48:27:
                    a1:a0:58:70:17:b3:1b:f8:94:16:c5:c9:c3:02:61:
                    bf:9a:47:e4:fd:e6:8e:3e:f4:1a:98:e5:54:e4:bf:
                    a5:a8:ed:62:4a:1f:a1:13:13:1a:cf:a8:57:cc:f9:
                    a3:3f:06:21:64:81:2f:79:63:ff:a6:11:51:0a:58:
                    1e:7c:b4:34:b3:24:5f:69:c3:75:66:cb:d5:9f:47:
                    96:d8:13:21:d8:2b:44:dc:a6:4e:a2:ec:11:47:b3:
                    62:98:a5:ee:34:f3:36:5a:4a:a1:cd:e6:58:35:51:
                    0a:d9:c2:aa:98:f8:5e:20:1b:48:0a:42:25:47:3f:
                    ae:d0:05:6f:07:02:9d:e2:86:63:e2:79:d1:87:0d:
                    c0:90:78:2b:e4:77:eb:f7:8a:4e:70:76:9d:d1:b9:
                    b3:f9:8f:04:fd:76:aa:c7:af:1d:48:f8:16:e3:11:
                    8d:07:cf:c9:56:3b:95:29:44:08:c5:b1:d8:82:bf:
                    9b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:39:C0:22:AB:39:04:69:86:4E:61:E6:C2:F5:A3:A7:92:6D:EB:77
            X509v3 Authority Key Identifier:
                keyid:EC:FF:24:26:B1:AF:8A:71:20:A6:1D:33:76:0E:90:8C:15:9C:6A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/632DBB687FE311EBABA48D44F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:750::/44

    Signature Algorithm: sha256WithRSAEncryption
         f4:45:90:b1:24:0c:e3:a9:47:61:91:05:01:12:c2:ef:84:43:
         14:2d:53:4e:df:d5:16:3a:e5:96:8c:44:24:67:53:76:85:8e:
         67:dc:4a:40:22:77:8c:68:33:9e:68:48:f2:f5:e4:d6:a4:0c:
         b4:c4:25:9b:ae:3f:49:b2:22:4e:02:a3:75:83:28:79:f2:a1:
         93:e1:52:7c:12:7d:6b:4c:45:80:01:ac:9f:f8:7f:e0:9d:0b:
         0e:47:30:74:f1:57:dc:49:34:29:ee:0e:a5:2c:74:78:25:39:
         4d:77:08:77:b1:cb:f9:aa:c1:b5:7a:7d:37:3b:e2:89:c1:8a:
         13:f8:6e:e8:3d:35:16:35:b2:c7:ad:eb:87:1b:83:de:7c:67:
         98:7c:1c:11:3f:cb:22:aa:29:a1:65:5a:45:c8:db:4d:81:1c:
         b9:65:68:46:a4:0e:1d:8f:3f:da:21:f9:36:8a:aa:28:a5:47:
         47:35:69:03:02:c2:b3:cf:21:6f:f3:50:ac:b3:db:ab:9f:b2:
         8c:54:e1:19:74:13:f9:cc:41:1d:26:c3:d2:4d:22:a5:0d:40:
         e3:40:1d:82:f3:2a:e0:ab:ab:c4:94:55:72:9d:48:12:c6:09:
         a0:5a:71:3b:44:1f:4c:ce:90:b5:3f:0a:40:61:ee:34:4e:8b:
         02:a8:68:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----