Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/713A34FEB1D911E9A941F946F8AEA228.roa
File:                     713A34FEB1D911E9A941F946F8AEA228.roa (raw, json)
Hash identifier:          rXtkU5MLUd36KYS1ejkuJBn1bX6qqlXt+HkOTaEZD8U=
Subject key identifier:   7D:76:75:50:89:FB:B5:77:B1:78:97:B8:2C:DD:74:80:3D:89:42:D1
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       50
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/713A34FEB1D911E9A941F946F8AEA228.roa
Signing time:             Mon 29 Jul 2019 08:18:28 +0000
ROA not before:           Mon 29 Jul 2019 08:18:20 +0000
ROA not after:            Wed 27 Jul 2022 08:18:20 +0000
asID:                     36916
IP address blocks:        41.180.224.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 29 08:18:20 2019 GMT
            Not After : Jul 27 08:18:20 2022 GMT
        Subject: CN=5d3eabd4-cfe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:49:0a:90:f9:34:fe:e3:d1:83:7e:89:c1:
                    c0:20:f5:65:b8:5b:ea:92:b0:de:17:1f:f4:4c:b7:
                    cc:a9:9e:fd:1a:ab:df:a3:c3:60:57:d3:2d:d8:34:
                    6a:09:b9:b4:cd:7a:32:35:e7:c7:cd:2b:2b:73:9a:
                    02:d6:16:e4:1a:ba:99:96:91:9c:c7:14:ce:c4:36:
                    59:1e:6e:71:a9:f3:95:0b:be:58:20:a5:ad:47:93:
                    c6:2f:cd:f8:57:b0:bd:3a:a6:71:b7:bc:1b:0a:01:
                    98:7b:36:ab:1c:ec:2b:a9:77:f1:77:d2:01:ef:90:
                    b4:29:11:58:70:bc:ec:ec:9f:37:f3:aa:b8:6f:b1:
                    4e:5d:91:60:b0:46:03:26:9d:32:b4:3b:4d:6a:65:
                    e7:6d:fb:05:14:6d:50:b2:94:c0:3c:1d:cc:00:d1:
                    e6:07:24:4b:f0:8f:21:f4:c6:1e:f8:3a:bd:49:ee:
                    59:cc:6a:1d:89:06:81:08:8f:7b:7e:2c:58:a2:cb:
                    2f:a9:24:0b:33:c1:73:44:10:08:f3:30:d5:ce:ed:
                    aa:ca:b8:3b:4d:21:b3:38:05:1e:75:52:47:7f:eb:
                    c9:19:6a:2e:5a:5d:38:1a:4c:40:41:07:ca:18:8b:
                    d1:ef:04:70:6e:60:f6:b5:9a:e9:81:08:90:89:b3:
                    26:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:76:75:50:89:FB:B5:77:B1:78:97:B8:2C:DD:74:80:3D:89:42:D1
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/713A34FEB1D911E9A941F946F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:0e:ed:82:84:8f:f2:2e:a0:3d:9c:9f:a0:5b:6d:50:00:ec:
         0a:0d:32:6e:3a:45:4b:bb:4a:d9:b9:1a:1c:bb:7c:7d:a1:b9:
         f6:83:3b:47:5e:ec:9b:93:65:a0:c7:22:36:0e:c6:63:5d:62:
         53:ee:55:51:80:69:c5:6d:6b:f4:77:f3:01:70:ed:4d:5a:50:
         6f:43:de:58:d5:f1:1f:0a:c6:c1:e7:68:e8:ee:0e:93:a4:64:
         87:28:9a:07:19:9d:80:ca:5d:aa:35:33:7f:8c:ed:e5:e3:7f:
         e3:55:32:a9:da:dd:26:b0:09:5b:62:56:88:2f:b4:02:6d:01:
         e1:00:d1:4c:c6:25:eb:f0:57:bb:60:9a:3f:77:bf:f7:33:58:
         8a:d2:3c:e8:13:8f:18:38:41:b2:0d:5f:0f:6c:e1:78:60:50:
         98:9e:fb:b0:9d:2c:3d:35:16:d6:3a:f4:ee:f1:53:c7:6d:14:
         8b:07:5a:96:ff:fa:37:2f:a4:0d:c0:8b:24:46:93:30:80:01:
         2f:5e:01:be:29:c2:05:1a:e9:aa:11:fa:f0:49:79:56:85:5a:
         06:3b:fb:e2:22:61:c3:c0:c3:db:b8:6b:d9:a6:b3:9c:5b:9a:
         ec:c3:30:29:d4:e7:c0:24:cd:50:e9:91:2a:07:6e:4b:17:3a:
         91:43:0b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----