Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/DA705E32B58A11ECA54DFC875A40D577.roa
File:                     DA705E32B58A11ECA54DFC875A40D577.roa (raw, json)
Hash identifier:          R7O7QNXdbaOFt3wWPZvGlhTZdKEQHr8mKrafF0YQ1u8=
Subject key identifier:   62:6A:16:1F:CB:3C:20:46:4F:40:12:F9:6D:BE:B5:E8:3B:0C:E6:DE
Certificate issuer:       /CN=F36364C2AF/serialNumber=5EE80C7E888C71B3102418780BD6E10A52D17088
Certificate serial:       02
Authority key identifier: 5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/DA705E32B58A11ECA54DFC875A40D577.roa
Signing time:             Wed 06 Apr 2022 09:20:52 +0000
ROA not before:           Wed 06 Apr 2022 09:20:48 +0000
ROA not after:            Thu 06 Apr 2023 09:20:48 +0000
asID:                     328974
IP address blocks:        102.217.228.0/22 maxlen: 23
                          2c0f:5f00::/32 maxlen: 33

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36364C2AF/serialNumber=5EE80C7E888C71B3102418780BD6E10A52D17088
        Validity
            Not Before: Apr  6 09:20:48 2022 GMT
            Not After : Apr  6 09:20:48 2023 GMT
        Subject: CN=624d5b74-2f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:56:54:88:d3:f9:ee:c9:2c:77:40:9e:cc:ce:
                    86:b1:78:ea:ff:8e:33:e8:16:74:0b:85:67:30:70:
                    a4:29:c1:d8:78:5c:82:11:08:07:fa:67:b7:ea:c2:
                    54:70:b7:15:61:3f:b2:33:46:e1:b0:38:f6:93:e6:
                    2e:4c:f0:ae:4c:2b:ac:36:c0:9a:2f:8d:2d:b9:2f:
                    66:fc:7d:88:f3:69:33:ef:fe:e2:1c:9a:32:4c:84:
                    7d:f0:44:76:fe:89:2e:05:cd:4d:b8:c5:60:f0:e8:
                    9e:47:7e:25:d7:53:21:c9:60:b0:93:35:16:32:79:
                    59:d9:44:28:67:98:ae:a0:d5:63:12:bf:2a:3c:7a:
                    8b:ac:b7:c8:ea:82:4e:05:a4:32:4f:11:d7:c8:08:
                    20:1b:81:a8:73:d2:84:ca:1d:d3:8c:18:b4:2d:92:
                    32:a2:27:44:b1:ff:69:eb:7d:89:3f:7f:40:21:94:
                    be:39:11:c5:72:ca:5a:bb:79:5f:5f:e2:c5:50:2c:
                    3d:b5:7d:32:a8:27:9e:08:0c:8b:4c:de:68:14:bf:
                    a7:48:23:d9:7a:fa:ac:9e:a2:ee:50:7d:7b:07:7b:
                    f3:fc:b8:0f:0e:4e:be:0f:27:57:1e:c2:bf:c5:68:
                    e3:0c:9d:4f:81:2e:a5:2d:36:d6:c5:db:60:68:43:
                    5b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6A:16:1F:CB:3C:20:46:4F:40:12:F9:6D:BE:B5:E8:3B:0C:E6:DE
            X509v3 Authority Key Identifier:
                keyid:5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/DA705E32B58A11ECA54DFC875A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.228.0/22
                IPv6:
                  2c0f:5f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:4a:67:68:37:a7:33:60:d2:5b:2a:15:47:8c:d7:33:7a:8e:
         5c:9d:3f:5f:ec:b4:02:e9:2c:48:7d:e9:51:c8:29:55:cd:4e:
         d1:6e:d3:62:a5:4d:57:7d:90:6e:b4:3d:c1:96:27:eb:af:8e:
         8b:a0:f7:65:a8:c9:f9:e5:9d:b0:79:a9:e0:27:a4:b4:f5:f2:
         35:8c:3b:c7:ab:96:b6:3e:d3:db:c1:ec:21:b6:8b:5b:0d:3f:
         de:8d:f9:08:4c:60:cf:0f:2b:6e:95:2a:af:ab:1b:f7:b6:4b:
         03:d5:96:e0:09:06:64:ed:26:7c:d5:fe:0d:40:1b:37:74:d1:
         d3:36:f7:ad:cd:c5:0b:88:9b:72:07:9c:50:bf:61:82:98:b8:
         5f:88:ad:66:15:f1:bc:fc:57:70:2c:37:0a:42:a0:ca:15:e6:
         3f:96:5c:c6:4f:e1:66:d0:e6:da:44:d2:0b:fb:4a:4c:9b:27:
         fe:47:14:0c:98:23:82:c9:97:06:42:8b:ce:e5:6e:c7:e6:b4:
         ef:af:dd:7a:11:6a:eb:1b:ef:4f:b6:ee:28:73:a7:7d:35:c1:
         ce:96:6e:30:c2:c8:5a:43:8a:73:ea:eb:81:28:98:c1:3c:4e:
         ac:4b:17:6b:7c:5c:80:22:33:99:43:31:41:7e:1f:ca:32:82:
         d0:44:05:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----