Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/24AD6E0E4F9611ED8FB7D88BF1222468.roa
File:                     24AD6E0E4F9611ED8FB7D88BF1222468.roa (raw, json)
Hash identifier:          CD19+UarUE+vU+ijGNrsKvPTjDMIbDj6YCZrATtuH2g=
Subject key identifier:   98:72:DF:6B:C2:3C:FF:B0:5B:76:AC:B9:F4:EF:CA:EC:A0:4C:FB:5A
Certificate issuer:       /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial:       10
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/24AD6E0E4F9611ED8FB7D88BF1222468.roa
Signing time:             Wed 19 Oct 2022 10:09:40 +0000
ROA not before:           Wed 19 Oct 2022 10:09:36 +0000
ROA not after:            Fri 31 Mar 2023 10:09:36 +0000
asID:                     329159
IP address blocks:        102.214.202.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
        Validity
            Not Before: Oct 19 10:09:36 2022 GMT
            Not After : Mar 31 10:09:36 2023 GMT
        Subject: CN=634fcce4-cbd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:27:8b:e7:5a:cb:cb:d8:c2:ca:05:9a:35:88:
                    6a:28:4c:a5:61:08:83:7c:e7:6e:2b:b0:02:ea:bf:
                    21:f7:4d:24:b2:c2:e7:42:4e:7a:c1:24:05:4f:66:
                    21:95:47:8a:6f:55:57:a5:10:47:cd:c9:8b:fc:06:
                    08:8f:f4:56:be:0d:bf:ac:88:ec:a3:19:ea:ab:90:
                    d1:d6:b6:7b:78:76:00:16:54:d9:c9:98:2f:d3:9b:
                    d5:47:5e:83:03:98:fd:2b:6d:f6:e6:10:2a:1a:c6:
                    4b:ee:a0:a1:ef:2e:ca:40:f0:40:cb:bb:e9:7d:95:
                    1f:23:8c:39:5f:2c:90:91:8c:52:ab:8e:75:3b:75:
                    67:a4:af:43:2b:d7:00:93:03:b3:f5:b6:cf:d7:04:
                    d4:03:0d:70:de:33:2c:88:a5:c8:cf:c5:9f:f8:3c:
                    77:05:e9:2b:c9:cf:19:0e:e8:67:9e:1f:84:a4:b7:
                    b6:0c:57:49:8a:05:aa:93:4c:2e:65:76:be:b4:e6:
                    a0:51:7e:69:11:30:f6:9f:3a:31:14:88:a5:79:d2:
                    de:62:6f:8f:47:2c:43:85:b7:21:1f:58:5f:73:2f:
                    9f:91:20:6b:aa:9d:56:5c:3b:fc:1b:44:5a:ab:e8:
                    63:46:ee:ba:71:d1:a5:fc:cc:9d:66:7f:77:1b:03:
                    72:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:72:DF:6B:C2:3C:FF:B0:5B:76:AC:B9:F4:EF:CA:EC:A0:4C:FB:5A
            X509v3 Authority Key Identifier:
                keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/24AD6E0E4F9611ED8FB7D88BF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:20:25:84:31:dc:bc:38:29:24:77:10:9f:30:04:81:74:a9:
         3d:ed:16:5e:79:c0:58:79:38:a8:e8:d5:75:e2:4c:70:c5:aa:
         f9:3c:9b:5f:c3:7f:85:d2:c3:d5:f4:a7:19:85:ff:86:ef:57:
         75:93:95:e8:b9:96:88:55:4c:2b:a0:14:02:e5:77:b1:0d:0d:
         74:37:7e:b6:1c:bc:96:56:a7:04:1d:7e:3c:19:f2:78:52:47:
         3f:70:4d:dc:3e:f9:14:b5:b1:69:cf:d0:8a:5c:09:c4:c8:c6:
         65:53:02:b5:d9:05:fe:3e:6b:48:4a:95:4d:4d:79:42:4a:47:
         1d:b0:95:94:58:12:d7:8e:cd:23:54:07:3b:8e:7a:44:a1:1e:
         75:50:ce:9a:78:1e:ab:b1:ba:ac:4b:c2:7b:8a:fa:9d:9e:fb:
         3f:e9:05:39:bc:5c:3f:22:22:bb:96:a8:de:c3:3e:51:06:49:
         e5:a2:84:8f:b4:70:bf:7d:df:cb:a8:b3:98:10:eb:a4:68:90:
         b9:65:47:c6:0a:ab:8d:bc:1e:6e:60:dd:a7:1f:28:46:fe:16:
         39:e4:29:0d:5d:2c:d7:9e:22:07:9b:2d:dd:2c:b5:80:ab:cd:
         5f:b3:88:64:40:ff:fe:0f:fc:f2:38:55:31:78:1e:41:54:6d:
         d0:8a:ba:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----