Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/5F8B1A14B1DB11E9BC0B8848F8AEA228.roa
File:                     5F8B1A14B1DB11E9BC0B8848F8AEA228.roa (raw, json)
Hash identifier:          O1EHMQGj0k2VdtJmlZnPhuAg2wdSklnl5slYskzDtAM=
Subject key identifier:   34:49:15:B3:9F:99:36:59:FF:2E:CB:4C:C8:2A:0E:B3:C5:8D:84:76
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       64
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/5F8B1A14B1DB11E9BC0B8848F8AEA228.roa
Signing time:             Mon 29 Jul 2019 08:32:17 +0000
ROA not before:           Mon 29 Jul 2019 08:32:12 +0000
ROA not after:            Wed 27 Jul 2022 08:32:12 +0000
asID:                     36916
IP address blocks:        41.180.80.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 29 08:32:12 2019 GMT
            Not After : Jul 27 08:32:12 2022 GMT
        Subject: CN=5d3eaf11-38f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:91:37:e2:7f:18:9b:ba:8e:5c:07:f4:ea:
                    90:a5:79:90:e1:50:4f:f3:37:93:78:a0:7a:be:4b:
                    67:3f:dc:79:af:55:bb:ff:b5:6c:4f:59:3f:32:08:
                    78:cd:2c:44:76:ce:ff:7d:50:be:65:7d:ec:91:e1:
                    6c:97:4f:2f:60:d1:61:04:3c:08:8a:a6:62:a8:38:
                    81:f0:55:20:d4:02:a6:3f:98:e6:3e:5e:bf:9f:bf:
                    44:60:13:fb:ff:b5:e4:0e:5b:cc:b3:e3:b3:2c:a7:
                    80:cf:42:dc:a6:2b:25:7f:6e:f3:b7:21:20:57:ed:
                    f2:e1:51:b4:46:4a:4c:5d:8b:8a:4f:e0:b2:6c:10:
                    4b:26:80:28:15:e2:ee:27:f1:ad:ce:c6:05:66:e2:
                    03:82:ba:cc:8e:b9:ea:39:96:aa:ac:f3:96:0a:db:
                    78:2c:39:5c:ac:5b:81:55:c0:df:94:01:50:d1:56:
                    9d:4b:a3:0a:cf:62:89:10:63:6a:25:92:9a:a1:bf:
                    9d:53:dd:fa:1e:93:1b:5a:42:e0:e3:95:18:cf:88:
                    cd:f6:fc:98:ae:d5:26:36:36:36:2f:6e:f7:0e:b9:
                    8c:d3:6c:f9:04:cc:b4:c0:29:d0:fe:fc:da:1a:62:
                    6f:63:e8:72:e2:bf:6a:e4:87:d3:2e:9c:27:fe:f0:
                    dc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:49:15:B3:9F:99:36:59:FF:2E:CB:4C:C8:2A:0E:B3:C5:8D:84:76
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/5F8B1A14B1DB11E9BC0B8848F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:d5:ae:8f:07:4b:4f:d3:18:1c:4a:cc:72:21:6a:af:01:43:
         bd:29:af:2f:96:05:97:67:51:98:d8:c3:f8:ca:dc:e7:d7:53:
         3d:53:17:09:b2:77:71:f0:be:9d:8e:56:2b:19:b1:b2:5c:05:
         a9:5b:d2:11:06:04:20:e2:f8:94:15:31:64:e2:1a:f2:72:78:
         4f:9e:71:28:5d:ae:63:a2:2e:26:13:63:54:e2:68:f5:aa:d5:
         b2:18:ed:17:c6:fa:73:f5:9c:07:d4:89:3a:3b:96:7d:c8:eb:
         e9:b5:f6:53:ec:f2:06:6c:3f:4d:3a:ae:69:1d:74:5e:85:cd:
         c3:de:0b:2e:5f:1e:bc:ec:c3:59:70:0f:fa:72:4b:9c:ab:ec:
         5e:9c:66:51:25:0a:17:9c:a1:9f:33:d1:96:c6:a4:a9:78:58:
         af:cd:9a:04:f3:7c:ad:7f:2c:e2:26:5c:f1:5a:7a:a9:fa:0e:
         db:3c:40:81:76:ea:63:6e:e4:97:ba:a9:78:2a:55:f9:6d:f4:
         2e:0b:d6:9e:2f:22:54:69:7f:52:3f:5e:93:c1:35:85:c0:44:
         9b:d3:8c:cc:27:8b:d2:e2:3d:81:e0:67:07:ae:77:81:21:e0:
         a0:ad:ce:33:31:fd:77:24:a0:cc:e0:81:cf:b2:bb:55:6b:a3:
         b0:b0:85:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----