Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/1D96F944AF9111E9AF7E654DF8AEA228.roa
File:                     1D96F944AF9111E9AF7E654DF8AEA228.roa (raw, json)
Hash identifier:          Ta8HFpMb+oU6YGanGa9ushJrmQxN8S43hgdfEbdN9RU=
Subject key identifier:   22:01:C9:1D:CF:1E:5B:51:11:2D:3F:00:AE:20:43:61:DD:3C:D9:C5
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       49
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/1D96F944AF9111E9AF7E654DF8AEA228.roa
Signing time:             Fri 26 Jul 2019 10:35:42 +0000
ROA not before:           Fri 26 Jul 2019 10:35:36 +0000
ROA not after:            Wed 27 Jul 2022 10:35:36 +0000
asID:                     36916
IP address blocks:        41.180.120.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 26 10:35:36 2019 GMT
            Not After : Jul 27 10:35:36 2022 GMT
        Subject: CN=5d3ad77d-3700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:56:84:0c:0c:ba:39:20:18:81:18:c9:c3:
                    57:43:1b:01:b0:0c:f1:47:8f:a1:3d:68:bd:51:96:
                    0a:e6:df:53:09:93:64:f3:15:6d:54:01:bc:89:5d:
                    83:b8:0b:b5:67:1d:c2:1e:6d:6c:a3:dd:24:c4:b6:
                    39:27:90:24:22:cb:52:1c:65:71:d5:bd:e6:20:16:
                    b4:eb:6b:27:87:10:0c:14:c1:b9:14:c3:98:3c:f0:
                    77:3c:71:be:ae:b9:ad:bf:6b:dd:db:81:65:f9:33:
                    b9:69:68:29:ef:52:52:c1:a2:62:78:66:36:50:03:
                    78:e0:75:b2:e7:3a:9b:b8:46:6b:1b:1d:95:8e:53:
                    68:f2:6c:f8:f2:5a:6c:02:c6:73:7f:b5:b2:33:ef:
                    55:8f:b5:28:33:28:8a:bf:7a:3a:e5:b3:b1:03:48:
                    61:85:22:94:e0:4d:17:34:64:8a:91:f7:77:fc:4b:
                    0b:f5:a1:64:a2:42:e0:03:40:a3:e4:63:07:66:42:
                    5e:13:18:c5:1a:3e:d6:ba:1c:42:f4:d2:eb:e6:45:
                    c4:62:63:37:d4:8b:d0:53:a9:30:a3:7c:ac:7f:11:
                    bc:98:0f:d4:32:09:d9:b3:90:dc:89:aa:21:4b:2f:
                    b8:ef:ec:b4:82:2c:34:ce:dd:e5:bc:f3:81:63:32:
                    90:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:01:C9:1D:CF:1E:5B:51:11:2D:3F:00:AE:20:43:61:DD:3C:D9:C5
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/1D96F944AF9111E9AF7E654DF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:ad:65:64:23:d4:5d:42:42:1d:34:a1:20:d6:36:ff:76:55:
         00:9b:80:b6:7b:f5:16:8f:98:57:42:62:a1:ca:9f:5f:f0:dc:
         a7:e6:bd:6c:a6:36:dc:52:bd:da:bf:8a:3c:ee:57:26:cf:ae:
         a1:5c:f4:af:1b:2f:17:e6:6b:91:a8:9a:81:a0:13:ea:5e:4a:
         38:7f:9f:de:e9:e6:fd:bc:4f:cf:fb:b1:30:ca:15:d2:aa:29:
         73:98:0f:f7:5e:86:74:f0:7f:b7:3b:d5:39:82:46:28:24:78:
         c9:a8:8c:d4:d7:09:6a:27:f1:98:ba:20:e7:04:8c:61:7d:17:
         3a:cc:57:65:e2:5c:49:df:b7:fe:d8:1d:af:04:6e:66:6c:f2:
         1c:31:ff:8c:0c:27:77:5e:3b:66:15:0e:70:f1:ee:81:f5:55:
         ad:d0:2c:b2:6c:8a:f6:1b:ba:0d:f8:b6:73:98:cf:ce:3d:b7:
         04:0a:2a:0a:83:11:e4:11:a8:56:73:71:3c:c1:40:43:2b:e8:
         07:d1:04:f9:96:b1:ba:5d:45:3d:4e:f6:06:f4:3c:05:9a:20:
         40:0b:66:3c:a1:15:33:c0:38:c9:b6:02:53:82:04:f7:aa:8d:
         67:5c:1d:96:d2:e3:d1:24:fa:ea:fa:9a:f5:e7:0c:79:7a:62:
         4a:60:5c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----