Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/5F1AB3989B4611ED80E6D0B0F1222468.roa
File:                     5F1AB3989B4611ED80E6D0B0F1222468.roa (raw, json)
Hash identifier:          9tbuyeHJV+WEISpetfheQaLewtSXa+2/ppKnJWbYoSg=
Subject key identifier:   7C:C1:30:22:6E:86:A2:8D:E5:F0:1B:00:5B:CC:1E:12:9A:4B:27:61
Certificate issuer:       /CN=F3644FF0AF/serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
Certificate serial:       02
Authority key identifier: E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/5F1AB3989B4611ED80E6D0B0F1222468.roa
Signing time:             Mon 23 Jan 2023 17:50:06 +0000
ROA not before:           Mon 23 Jan 2023 17:50:01 +0000
ROA not after:            Tue 23 Jan 2024 17:50:01 +0000
asID:                     329027
IP address blocks:        102.223.156.0/22 maxlen: 23
                          102.223.156.0/24 maxlen: 24
                          102.223.157.0/24 maxlen: 24
                          102.223.158.0/23 maxlen: 23
                          102.223.158.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644FF0AF/serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
        Validity
            Not Before: Jan 23 17:50:01 2023 GMT
            Not After : Jan 23 17:50:01 2024 GMT
        Subject: CN=63cec8ce-bbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:92:5a:23:3e:cf:32:12:46:81:33:b0:5f:c0:
                    10:b5:42:6b:66:2a:2a:ab:33:85:20:a7:5e:ce:be:
                    31:17:15:55:4b:a9:2b:90:99:36:ba:c0:6f:1c:f8:
                    6c:93:1b:df:80:50:cb:e3:61:b8:35:79:6e:b1:d9:
                    dd:11:f5:4b:33:75:40:4b:20:97:30:ed:65:b4:85:
                    7d:d7:e3:47:f1:8b:02:85:2d:e2:e7:fc:30:f3:09:
                    d3:44:8f:1f:b8:4d:89:43:12:70:4f:17:89:e9:1f:
                    87:b8:e8:a9:8f:51:c8:c1:9a:e8:02:74:18:78:43:
                    84:4a:cd:0d:72:66:80:9c:22:7e:23:e0:aa:d9:f3:
                    09:67:37:d7:a2:67:61:52:c2:88:f0:28:a9:95:37:
                    e1:b3:3a:2b:e5:b4:28:a4:cd:69:34:d4:a2:e2:58:
                    68:ce:45:0c:9d:a1:80:7a:8b:c1:50:bd:03:ce:da:
                    69:49:bb:78:ad:47:48:c5:2b:dc:31:b6:ad:bb:dc:
                    d3:3e:89:93:ed:7e:2d:f9:24:77:fb:0e:01:17:1e:
                    98:1d:5f:ea:27:2b:17:0b:34:88:6a:4c:75:55:28:
                    83:11:85:60:69:47:2f:e0:b5:a3:1b:23:d9:53:89:
                    62:06:96:8f:2e:6e:d6:30:dc:54:44:25:24:47:87:
                    2e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C1:30:22:6E:86:A2:8D:E5:F0:1B:00:5B:CC:1E:12:9A:4B:27:61
            X509v3 Authority Key Identifier:
                keyid:E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/5F1AB3989B4611ED80E6D0B0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.223.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:bd:2f:7b:30:4b:6b:f1:af:55:97:c7:29:d9:c6:64:d0:e9:
         b7:37:f0:7f:95:70:9c:70:1c:56:84:cd:39:ba:94:d7:8f:63:
         38:b4:82:06:81:64:18:7d:79:24:59:bd:bf:6c:a2:ed:7b:ea:
         e6:c3:9d:89:79:e6:be:b9:b4:bf:25:5f:d7:d6:b9:5f:85:cc:
         5d:af:bc:27:aa:e1:96:d5:6c:c5:a8:23:f2:74:6b:35:6c:7d:
         3f:7c:2c:12:87:73:c6:dd:db:74:af:04:75:eb:29:5f:43:54:
         e0:97:55:2b:65:68:4f:91:f8:7a:f9:60:5f:f3:91:d0:3d:b4:
         b2:8e:c4:fc:93:50:26:dc:6b:a9:e8:a5:9e:bd:68:95:a8:36:
         a9:f9:f7:1a:db:d4:9e:9e:67:71:ed:12:93:b8:31:dc:c9:85:
         5c:ee:27:44:81:43:d6:9f:a3:19:6e:3d:c0:2b:f1:65:d4:2b:
         58:0a:3d:78:04:8b:5a:e3:b5:6f:f0:e2:81:27:c6:87:02:fe:
         e9:8c:c9:18:20:c8:3d:1d:bb:59:3b:c0:63:3c:23:11:1d:a3:
         ca:92:2d:1d:c4:d5:ce:3d:68:fb:b1:dd:5f:da:4a:f6:01:82:
         70:ac:ac:02:80:c0:aa:16:6c:16:44:87:fa:29:8f:a7:49:86:
         37:f4:f8:4b
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY0
NEZGMEFGMTEwLwYDVQQFEyhFODlFRkUzNTFFNjAyNTJBMjYyNTZEOERFRThGNjlF
NzcyNENBRDVBMB4XDTIzMDEyMzE3NTAwMVoXDTI0MDEyMzE3NTAwMVowGDEWMBQG
A1UEAwwNNjNjZWM4Y2UtYmJkZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMaSWiM+zzISRoEzsF/AELVCa2YqKqszhSCnXs6+MRcVVUupK5CZNrrAbxz4
bJMb34BQy+NhuDV5brHZ3RH1SzN1QEsglzDtZbSFfdfjR/GLAoUt4uf8MPMJ00SP
H7hNiUMScE8Xiekfh7joqY9RyMGa6AJ0GHhDhErNDXJmgJwifiPgqtnzCWc316Jn
YVLCiPAoqZU34bM6K+W0KKTNaTTUouJYaM5FDJ2hgHqLwVC9A87aaUm7eK1HSMUr
3DG2rbvc0z6Jk+1+Lfkkd/sOARcemB1f6icrFws0iGpMdVUogxGFYGlHL+C1oxsj
2VOJYgaWjy5u1jDcVEQlJEeHLl8CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBR8wTAi
boaijeXwGwBbzB4SmksnYTAfBgNVHSMEGDAWgBTonv41HmAlKiYlbY3uj2nnckyt
WjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDRGRjAvNzQ1RjYyNDA5QjQ1MTFFRDkzQzk1MEFFRjEyMjI0NjgvNko3LU5S
NWdKU29tSlcyTjdvOXA1M0pNclZvLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNko3LU5SNWdKU29tSlcyTjdvOXA1M0pNclZvLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDRGRjAvNzQ1RjYyNDA5QjQ1MTFFRDkzQzk1MEFFRjEy
MjI0NjgvNUYxQUIzOTg5QjQ2MTFFRDgwRTZEMEIwRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbfnDANBgkqhkiG9w0BAQsF
AAOCAQEAEL0vezBLa/GvVZfHKdnGZNDptzfwf5VwnHAcVoTNObqU149jOLSCBoFk
GH15JFm9v2yi7Xvq5sOdiXnmvrm0vyVf19a5X4XMXa+8J6rhltVsxagj8nRrNWx9
P3wsEodzxt3bdK8EdespX0NU4JdVK2VoT5H4evlgX/OR0D20so7E/JNQJtxrqeil
nr1olag2qfn3GtvUnp5nce0Sk7gx3MmFXO4nRIFD1p+jGW49wCvxZdQrWAo9eASL
WuO1b/DigSfGhwL+6YzJGCDIPR27WTvAYzwjER2jypItHcTVzj1o+7HdX9pK9gGC
cKysAoDAqhZsFkSH+imPp0mGN/T4Sw==
-----END CERTIFICATE-----