Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/4F166EFAB1DA11E9AFE5BF47F8AEA228.roa
File:                     4F166EFAB1DA11E9AFE5BF47F8AEA228.roa (raw, json)
Hash identifier:          AWJWWL+PloLJnIegaFtBckrQxszteozb11wR/0e/w/U=
Subject key identifier:   18:B0:5F:2A:63:24:A3:5F:72:12:C0:60:2C:A7:8A:ED:99:6A:82:EB
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       5A
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/4F166EFAB1DA11E9AFE5BF47F8AEA228.roa
Signing time:             Mon 29 Jul 2019 08:24:40 +0000
ROA not before:           Mon 29 Jul 2019 08:24:35 +0000
ROA not after:            Wed 27 Jul 2022 08:24:35 +0000
asID:                     36916
IP address blocks:        41.180.66.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 29 08:24:35 2019 GMT
            Not After : Jul 27 08:24:35 2022 GMT
        Subject: CN=5d3ead48-94c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:43:d1:a4:8b:22:b3:cd:f2:95:33:8f:2a:72:
                    fa:e5:7c:9e:70:e0:83:fd:b4:45:79:b2:7b:2b:99:
                    3b:b0:a8:7f:f7:98:56:7e:20:dd:d1:d9:2e:8a:c0:
                    48:ce:c0:f8:a7:68:40:4e:63:0e:1d:76:73:a0:36:
                    9f:ba:64:d2:48:e1:40:a1:33:e0:27:17:80:a5:f1:
                    8d:6c:7f:f3:59:d7:96:ab:61:8e:09:5c:a5:26:a4:
                    4b:31:55:aa:be:8f:f9:fc:7d:f3:5e:11:c0:30:24:
                    5d:ca:89:85:55:57:35:fe:4f:19:6d:20:c4:0f:7c:
                    26:34:86:35:e0:31:e1:cd:91:59:d4:13:38:18:8e:
                    6e:75:e3:36:20:0b:1f:74:7e:d9:08:96:62:b7:ba:
                    b0:fb:dd:5e:fc:65:ca:8e:ee:e9:fc:15:bd:67:98:
                    19:52:c8:23:3b:87:0f:aa:c0:a8:68:ad:4b:83:3f:
                    d0:54:d0:3e:7d:2e:c6:c9:ba:b4:07:b3:18:c7:aa:
                    84:d4:b5:45:c2:a5:d2:2a:fb:d8:21:4a:de:20:24:
                    4b:a1:19:22:71:d0:42:fe:c0:3d:94:9d:a7:80:b3:
                    55:3d:42:ee:25:0f:f1:0c:38:ab:2a:8e:fa:c6:f6:
                    c6:22:a5:52:c6:70:ef:44:99:af:29:5f:97:c5:2e:
                    62:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B0:5F:2A:63:24:A3:5F:72:12:C0:60:2C:A7:8A:ED:99:6A:82:EB
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/4F166EFAB1DA11E9AFE5BF47F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:ca:18:39:e8:36:7a:57:a5:71:19:26:7f:e7:ac:1d:c8:8b:
         f2:7c:38:30:64:b3:a7:68:04:16:43:26:e8:0e:89:b9:5c:c5:
         e8:0f:97:ff:82:1a:1b:8d:6c:c3:39:82:0f:7b:3b:1b:65:eb:
         bd:a2:69:2f:15:26:bb:5a:00:13:e3:40:5d:8e:ea:22:b8:8b:
         3f:9b:c2:2e:5d:77:f4:01:5e:fa:f3:3d:22:3a:a3:25:fe:9b:
         5f:67:de:eb:76:f5:45:79:48:4e:8d:f3:8d:de:54:25:ee:cd:
         54:d1:4b:93:e2:fb:90:a8:9f:45:a0:d5:f0:22:26:b5:bd:06:
         57:4c:14:25:05:65:47:66:e9:25:5a:c3:4c:ba:f0:0d:bd:f9:
         39:f1:00:b3:6d:d2:58:10:fe:cc:0f:79:c8:51:49:91:eb:b2:
         a1:1f:22:9b:70:95:34:32:44:f5:5b:f3:25:82:8b:ab:8f:b5:
         bf:97:45:16:cc:88:97:b6:b2:7a:0b:1b:07:67:98:19:71:df:
         f8:11:77:04:40:f8:38:dc:e8:1d:ad:49:67:ce:ab:1d:e6:c0:
         b9:b8:a1:92:43:ae:1f:39:fb:f8:cc:b3:df:e2:ed:b8:fb:ed:
         4d:03:d4:a6:3e:a0:dc:19:67:ee:b3:73:d2:7d:01:48:8a:1f:
         b0:52:eb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----