Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/69929190DAAF11EC95FD60D7F1222468.roa
File:                     69929190DAAF11EC95FD60D7F1222468.roa (raw, json)
Hash identifier:          NbSJymuAcwM1w1QslaAdbJN3ixqNpC41BNCGMkvy46M=
Subject key identifier:   28:F2:00:F3:25:EB:71:83:48:E5:B0:47:3E:A9:75:39:73:C8:67:0C
Certificate issuer:       /CN=F365E0EFAF/serialNumber=399D04F1168E65976D1AD6E8ECC5C01414781ED5
Certificate serial:       02
Authority key identifier: 39:9D:04:F1:16:8E:65:97:6D:1A:D6:E8:EC:C5:C0:14:14:78:1E:D5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/69929190DAAF11EC95FD60D7F1222468.roa
Signing time:             Mon 23 May 2022 15:45:47 +0000
ROA not before:           Mon 23 May 2022 15:45:43 +0000
ROA not after:            Mon 27 May 2024 15:45:43 +0000
asID:                     328164
IP address blocks:        102.36.248.0/22 maxlen: 22
                          2c0f:ebe8::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E0EFAF/serialNumber=399D04F1168E65976D1AD6E8ECC5C01414781ED5
        Validity
            Not Before: May 23 15:45:43 2022 GMT
            Not After : May 27 15:45:43 2024 GMT
        Subject: CN=628bac2b-4e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c7:7c:f3:3b:79:fc:53:93:06:53:80:6e:a8:
                    55:32:17:da:96:17:20:2c:16:20:ee:0b:f4:1a:31:
                    14:47:d3:07:c0:0d:71:41:29:1e:19:ce:34:d7:df:
                    aa:8a:da:da:46:5b:7f:4e:be:37:b7:d4:7b:35:c6:
                    4f:86:3e:33:12:10:c9:25:8b:00:36:0a:57:8f:e6:
                    72:1c:f8:34:ae:fb:cb:92:25:15:9f:00:f0:79:8e:
                    19:21:b1:a8:32:17:4f:d3:aa:9e:2f:9c:06:b4:2f:
                    77:e7:bf:86:d4:c6:be:a5:f6:6c:86:f7:a8:90:b7:
                    fa:89:2e:09:1e:7f:ff:28:41:b9:34:33:26:b5:17:
                    75:ec:64:b0:21:7e:d2:cd:e2:1f:65:90:e8:65:95:
                    dc:bc:d5:5e:ac:bf:41:f5:ab:3c:22:85:64:e0:a5:
                    7a:dd:44:67:70:b7:0f:5b:c8:ab:44:a9:be:9f:64:
                    a9:44:49:01:8b:2a:e6:f8:3d:b9:78:60:bc:89:82:
                    9f:07:6d:66:6b:7f:91:1d:ad:21:b0:4a:f2:22:10:
                    ef:9b:0e:09:07:7c:37:37:15:51:5a:d2:e1:6a:94:
                    8c:a7:76:e6:f9:ef:82:68:3d:3d:95:be:8b:91:2c:
                    04:64:ac:7d:05:e5:6a:70:e4:b2:10:0f:48:0e:09:
                    33:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F2:00:F3:25:EB:71:83:48:E5:B0:47:3E:A9:75:39:73:C8:67:0C
            X509v3 Authority Key Identifier:
                keyid:39:9D:04:F1:16:8E:65:97:6D:1A:D6:E8:EC:C5:C0:14:14:78:1E:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/69929190DAAF11EC95FD60D7F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.36.248.0/22
                IPv6:
                  2c0f:ebe8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:e6:5f:5d:70:78:93:21:bf:f4:91:42:7a:86:d5:e3:4b:dc:
         74:e9:28:d7:93:23:5c:c1:64:a3:f3:09:4a:c0:8b:6c:2b:fc:
         a6:23:bc:81:28:5a:cd:f2:e4:01:93:2a:85:77:3f:46:77:0d:
         1e:e1:8a:b4:d8:5f:8b:73:73:96:e3:71:17:e3:14:66:e1:14:
         c2:77:d2:6e:e7:e5:41:bb:0d:7d:a8:d6:14:c4:14:c2:9f:79:
         65:db:18:34:10:cd:e0:81:39:47:fd:ea:df:4f:37:2d:3e:14:
         e3:39:db:d0:a5:07:47:6f:fa:a3:c9:96:26:6b:23:e8:5f:18:
         71:76:79:51:6f:3f:ee:05:f1:dd:f3:57:d7:29:f7:ff:dd:6c:
         60:fd:9b:48:08:73:4f:ec:01:f7:e6:d8:89:bc:1f:f1:d5:06:
         10:e4:d3:2f:07:3a:cb:e9:0e:e2:49:3a:69:4d:c8:c6:76:29:
         5f:48:55:49:f6:6c:33:d3:03:53:a5:4d:c2:4d:09:3a:db:be:
         86:e4:b9:3d:47:b7:57:b0:b4:71:6f:52:9d:98:8d:36:61:9a:
         63:90:5b:3a:5e:7a:81:2b:a6:5d:f9:b8:d8:3f:21:c2:9e:74:
         43:19:07:71:99:56:f1:8d:33:7c:76:dd:01:70:ca:03:bf:4e:
         d4:85:9a:a7
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY1
RTBFRkFGMTEwLwYDVQQFEygzOTlEMDRGMTE2OEU2NTk3NkQxQUQ2RThFQ0M1QzAx
NDE0NzgxRUQ1MB4XDTIyMDUyMzE1NDU0M1oXDTI0MDUyNzE1NDU0M1owGDEWMBQG
A1UEAwwNNjI4YmFjMmItNGU3ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALTHfPM7efxTkwZTgG6oVTIX2pYXICwWIO4L9BoxFEfTB8ANcUEpHhnONNff
qora2kZbf06+N7fUezXGT4Y+MxIQySWLADYKV4/mchz4NK77y5IlFZ8A8HmOGSGx
qDIXT9Oqni+cBrQvd+e/htTGvqX2bIb3qJC3+okuCR5//yhBuTQzJrUXdexksCF+
0s3iH2WQ6GWV3LzVXqy/QfWrPCKFZOClet1EZ3C3D1vIq0Spvp9kqURJAYsq5vg9
uXhgvImCnwdtZmt/kR2tIbBK8iIQ75sOCQd8NzcVUVrS4WqUjKd25vnvgmg9PZW+
i5EsBGSsfQXlanDkshAPSA4JM38CAwEAAaOCArQwggKwMB0GA1UdDgQWBBQo8gDz
Jetxg0jlsEc+qXU5c8hnDDAfBgNVHSMEGDAWgBQ5nQTxFo5ll20a1ujsxcAUFHge
1TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NUUwRUYvMzc3NTMwQzREQUFFMTFFQ0EwMjRCNkQzRjEyMjI0NjgvT1owRThS
YU9aWmR0R3RibzdNWEFGQlI0SHRVLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvT1owRThSYU9aWmR0R3RibzdNWEFGQlI0SHRVLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUUwRUYvMzc3NTMwQzREQUFFMTFFQ0EwMjRCNkQzRjEy
MjI0NjgvNjk5MjkxOTBEQUFGMTFFQzk1RkQ2MEQ3RjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmYk+DANBAIAAjAHAwUALA/r
6DANBgkqhkiG9w0BAQsFAAOCAQEAm+ZfXXB4kyG/9JFCeobV40vcdOko15MjXMFk
o/MJSsCLbCv8piO8gShazfLkAZMqhXc/RncNHuGKtNhfi3NzluNxF+MUZuEUwnfS
buflQbsNfajWFMQUwp95ZdsYNBDN4IE5R/3q3083LT4U4znb0KUHR2/6o8mWJmsj
6F8YcXZ5UW8/7gXx3fNX1yn3/91sYP2bSAhzT+wB9+bYibwf8dUGEOTTLwc6y+kO
4kk6aU3IxnYpX0hVSfZsM9MDU6VNwk0JOtu+huS5PUe3V7C0cW9SnZiNNmGaY5Bb
Ol56gSumXfm42D8hwp50QxkHcZlW8Y0zfHbdAXDKA79O1IWapw==
-----END CERTIFICATE-----