Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/387C4C0EAF8D11E9BEA6984AF8AEA228.roa
File:                     387C4C0EAF8D11E9BEA6984AF8AEA228.roa (raw, json)
Hash identifier:          P5o4HQEC/q/whbnaxinnx1yfIL27jrUaxzmUpPQJw7w=
Subject key identifier:   F7:C2:15:1E:C9:B2:01:A1:6F:30:FE:7E:52:18:37:8C:51:9B:0D:34
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       47
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/387C4C0EAF8D11E9BEA6984AF8AEA228.roa
Signing time:             Fri 26 Jul 2019 10:07:49 +0000
ROA not before:           Fri 26 Jul 2019 10:07:43 +0000
ROA not after:            Wed 27 Jul 2022 10:07:43 +0000
asID:                     36916
IP address blocks:        41.180.112.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 26 10:07:43 2019 GMT
            Not After : Jul 27 10:07:43 2022 GMT
        Subject: CN=5d3ad0f4-f5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:1c:45:8d:f6:4c:af:05:ab:f4:f0:85:67:
                    30:ee:d2:bc:bc:e3:86:c7:5e:89:2d:94:77:06:c8:
                    2d:cf:d2:2f:49:c1:a7:c0:b9:8f:77:76:95:7d:74:
                    49:39:f0:58:1f:3d:a9:ed:18:09:c5:e2:a9:95:d2:
                    e8:5a:fd:3a:fd:21:15:6b:56:b5:fc:52:a6:6a:a5:
                    20:4d:60:d6:88:9e:88:52:c7:c3:0b:ff:90:01:d3:
                    8e:b1:c4:36:84:df:fd:fc:0b:ad:34:b6:b4:60:11:
                    d3:7d:bc:45:3c:bb:7b:f4:a7:ab:87:8d:37:94:bb:
                    08:d6:94:58:50:cd:bb:52:99:bd:e9:19:ac:0d:5d:
                    94:99:34:14:1b:01:65:2a:9d:68:01:b0:d0:cc:b4:
                    cd:f7:f4:ba:68:29:f8:4e:f8:20:3b:13:2e:84:ce:
                    76:7b:7f:7d:43:57:0b:28:42:a2:56:44:a8:e2:62:
                    23:87:1e:18:4e:dc:62:b0:2a:13:b5:c6:2f:ae:de:
                    0e:52:b0:98:54:bd:fd:b4:14:92:7d:2a:bb:eb:68:
                    bd:5c:a8:aa:3d:e4:70:0b:2e:e1:5c:5c:dc:f4:46:
                    85:32:40:8d:8a:d5:ad:c2:f5:68:a2:37:34:16:f4:
                    a6:59:cc:b3:30:20:10:fa:49:5f:ad:ec:3c:15:93:
                    49:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C2:15:1E:C9:B2:01:A1:6F:30:FE:7E:52:18:37:8C:51:9B:0D:34
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/387C4C0EAF8D11E9BEA6984AF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8a:e6:11:5d:92:c9:0e:28:33:dd:39:00:22:99:4e:c4:33:b1:
         f2:5d:d8:60:61:44:fd:87:53:7a:be:f2:60:a7:f0:d9:2b:dd:
         75:84:4c:33:54:84:ef:22:16:84:eb:f2:4d:28:09:27:53:c2:
         01:fc:c4:de:52:a9:49:ac:12:6c:ff:8c:e1:20:68:52:06:4c:
         5f:ae:36:11:32:34:8a:bb:27:e7:bd:d1:a8:ed:d8:04:38:77:
         40:65:66:9d:a4:f2:d4:ae:e1:f5:31:9f:fa:6c:06:b6:48:c4:
         a5:63:c7:a6:a1:bc:9a:64:63:ae:d0:49:e2:0b:a9:ac:47:be:
         e5:37:c9:ad:f0:65:92:b3:ec:5e:04:21:c6:f3:45:c4:89:34:
         dc:55:1b:ae:df:90:0c:fd:5b:2c:fb:c6:a4:73:d5:7b:61:95:
         76:24:c5:58:54:c7:f9:3c:d4:d5:65:13:6f:93:1d:1e:6e:9c:
         2e:b0:7c:05:c5:b6:e5:69:51:99:5c:74:bc:e6:09:ef:b8:fa:
         2a:79:73:4d:82:f7:0f:0d:14:95:40:f3:72:f1:7b:cb:ed:db:
         df:72:47:36:33:c1:08:7d:11:e5:7e:30:33:f3:99:c6:d1:1f:
         ba:28:5c:89:6a:0f:a3:59:41:3f:dd:17:2f:20:6f:de:bf:95:
         46:a4:d3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----