Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/2B40E3AC905A11EFBA5B645F762E951A.roa
File:                     2B40E3AC905A11EFBA5B645F762E951A.roa (raw, json)
Hash identifier:          AkyCqnsNDlFA95UO9nWFjhJ+I4qGXVdrMCxkydUtwH0=
Subject key identifier:   F2:98:84:0B:DF:0A:9E:11:39:84:F5:C0:B2:A5:44:CD:E7:FA:F2:4A
Certificate issuer:       /CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Certificate serial:       052E
Authority key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/2B40E3AC905A11EFBA5B645F762E951A.roa
Signing time:             Tue 22 Oct 2024 09:44:02 +0000
ROA not before:           Tue 22 Oct 2024 09:43:58 +0000
ROA not after:            Sat 26 Oct 2024 09:43:58 +0000
asID:                     43260
IP address blocks:        102.218.100.0/24 maxlen: 24
                          102.218.101.0/24 maxlen: 24
                          102.218.102.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1326 (0x52e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
        Validity
            Not Before: Oct 22 09:43:58 2024 GMT
            Not After : Oct 26 09:43:58 2024 GMT
        Subject: CN=671773e2-01d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:28:79:c1:31:0d:b5:d2:61:33:35:7a:ad:e9:
                    f0:cc:77:d1:74:a6:25:58:a3:b0:d4:2d:00:3e:98:
                    0f:90:6d:09:a2:28:77:06:c4:39:41:92:bd:df:f3:
                    58:f9:8c:12:f1:1d:c6:6b:86:9b:83:e4:ee:5a:f7:
                    eb:6f:03:f6:8b:c2:8f:55:88:2d:d4:f8:9b:e2:ab:
                    ab:f9:c7:f1:e8:c4:5e:f8:8d:83:bf:54:69:2f:54:
                    d7:9b:ce:5e:06:d6:f5:1b:93:79:51:98:9a:d6:71:
                    da:e0:ab:32:87:1d:25:61:3d:cb:69:20:d5:3e:3d:
                    4b:6f:5d:8f:5d:ac:70:2c:3f:d3:47:f7:50:0f:13:
                    e4:f3:42:79:ed:8a:11:6e:5a:3b:c7:46:1c:72:88:
                    b5:48:cf:e7:57:dd:da:ff:40:1c:de:d1:f8:f4:2b:
                    3b:c2:ca:da:e6:7c:6b:14:66:e9:88:4c:d7:11:e9:
                    09:33:64:36:ac:78:28:a8:ee:9e:cf:5c:03:05:85:
                    28:7c:ba:4c:11:d3:d1:0e:0c:39:76:15:07:04:21:
                    3e:89:31:aa:ee:3f:83:66:8e:8a:e9:27:97:68:6b:
                    93:57:8a:a7:f7:39:f5:c3:b1:5f:90:04:30:e3:10:
                    f7:25:13:6e:30:4c:ef:df:ab:4e:ca:05:5b:93:de:
                    53:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:98:84:0B:DF:0A:9E:11:39:84:F5:C0:B2:A5:44:CD:E7:FA:F2:4A
            X509v3 Authority Key Identifier:
                keyid:63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/2B40E3AC905A11EFBA5B645F762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.100.0-102.218.102.255

    Signature Algorithm: sha256WithRSAEncryption
         ca:01:cc:cd:17:2c:37:3c:20:d6:1d:e4:ab:5a:f1:84:4c:8f:
         bd:26:cf:86:43:21:a1:ec:01:3a:c6:16:23:10:21:3d:3b:20:
         46:b4:06:d9:f7:4d:b2:da:fd:f0:8e:c9:d5:54:da:e5:01:17:
         d4:fc:5d:be:b9:bd:b5:0a:9d:25:90:f8:ba:a3:33:f9:ad:0f:
         f0:f3:a8:ae:52:37:6a:de:65:6d:19:c4:f5:95:4a:98:c4:85:
         2d:1d:65:40:fe:c8:3e:a7:ec:6c:d9:53:d7:ff:ae:74:bc:8b:
         b7:c6:53:d2:57:8e:1e:0f:4c:ef:f6:4b:4a:a3:b1:28:16:09:
         1c:b9:cf:fa:e2:54:aa:c3:54:6d:c5:5e:ff:9d:48:48:83:cf:
         5c:f9:9d:8b:99:43:5d:95:3b:07:d7:4e:dd:cc:98:86:d9:42:
         af:c3:38:19:26:09:ab:5d:aa:2a:6e:f9:1b:81:67:ec:a2:ab:
         8b:11:cf:f4:1d:af:64:32:b3:8e:a1:14:9b:e6:7a:66:96:19:
         f5:c0:bf:31:44:30:da:40:3b:c4:ad:74:cb:77:03:5c:1a:a5:
         97:b7:a0:61:db:9f:e6:e3:42:10:dd:44:1f:5f:ba:6b:42:36:
         8a:f3:8e:bc:b9:bd:28:13:41:83:99:92:26:65:6b:b9:e9:3e:
         db:c8:02:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----