Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/843A86CAD5F711E995E1C035F8AEA228.roa
File:                     843A86CAD5F711E995E1C035F8AEA228.roa (raw, json)
Hash identifier:          G+ZSdAEAubG7i6UGl+mqVFd4NYKDBk7Dfi1LjIqwfjI=
Subject key identifier:   9F:F3:71:F0:C3:98:AE:0A:E2:D7:B9:33:D8:61:A5:73:9E:C9:DB:4B
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       B6
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/843A86CAD5F711E995E1C035F8AEA228.roa
Signing time:             Fri 13 Sep 2019 07:24:27 +0000
ROA not before:           Fri 13 Sep 2019 07:24:22 +0000
ROA not after:            Wed 21 Sep 2022 07:24:22 +0000
asID:                     36916
IP address blocks:        41.180.52.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Sep 13 07:24:22 2019 GMT
            Not After : Sep 21 07:24:22 2022 GMT
        Subject: CN=5d7b442a-b0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:e5:1b:ca:87:f4:c3:d0:61:96:fa:49:62:
                    62:39:3d:24:ee:46:2e:f6:83:b0:7d:bb:da:c9:40:
                    3b:3c:4b:88:3b:80:e8:7c:1c:21:ff:dc:b1:91:ee:
                    83:76:91:08:74:04:27:7a:7d:17:a8:50:7c:47:2a:
                    de:b1:e6:c2:32:e9:47:cf:7f:8c:07:8e:cc:02:ce:
                    aa:d7:a2:36:84:2d:23:61:7b:d9:b1:78:5b:ac:1b:
                    d8:77:05:18:6f:70:be:80:a9:ba:bd:18:4f:44:e5:
                    80:4f:40:5b:0f:3d:1d:3f:9b:5b:cd:f3:e1:58:fb:
                    a5:52:a4:ba:63:11:14:9f:52:66:f3:4b:c6:24:f8:
                    fb:a0:42:a6:ec:9f:95:87:74:a6:22:da:80:a6:76:
                    a5:5b:3d:d6:54:44:dc:1e:33:00:89:72:5a:8a:cc:
                    d8:92:fa:50:cf:b4:61:91:9b:c9:d4:45:cf:39:49:
                    b6:c1:46:e4:dc:a3:9c:5c:1c:f7:fc:ac:6d:cb:24:
                    5f:89:d7:68:25:1d:a3:17:ed:bf:60:fa:dc:49:13:
                    be:e0:0c:f9:30:37:75:2b:47:e1:01:73:73:ed:74:
                    4e:35:ae:23:42:fd:12:56:f6:b2:f2:ff:f4:be:b6:
                    94:03:06:a3:29:77:6b:2f:03:7d:cf:69:19:c1:60:
                    a5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F3:71:F0:C3:98:AE:0A:E2:D7:B9:33:D8:61:A5:73:9E:C9:DB:4B
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/843A86CAD5F711E995E1C035F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:07:f5:75:13:9f:36:d2:a8:3d:c0:f9:6e:04:f0:f7:d4:98:
         e9:f1:66:dc:ee:f1:81:76:f4:b2:3e:77:6c:22:b3:81:4a:cf:
         86:77:d5:29:fe:8f:3a:07:5d:a8:d5:63:ee:0b:25:99:61:a9:
         10:2f:df:50:c7:2a:0b:1d:eb:1f:57:ef:9c:46:c7:33:f0:28:
         05:6d:b6:04:58:6f:59:fd:8a:d5:ee:c4:af:05:e0:19:a7:4a:
         ad:aa:48:00:48:00:ad:8d:17:67:93:89:90:9a:99:bd:99:19:
         7c:73:62:d9:f1:6d:53:c5:89:39:46:cb:16:d0:94:51:18:83:
         7a:d0:c3:69:f9:2b:13:4f:1f:95:73:2e:20:b3:4f:40:47:3e:
         4b:71:11:71:c2:19:91:ff:e9:06:d6:6f:1e:dd:5a:35:b6:92:
         1d:eb:03:aa:1a:34:eb:94:88:cc:96:a1:30:d3:4d:08:08:c6:
         d2:aa:39:1f:d4:a3:ff:d2:47:64:31:30:c3:fc:29:08:16:04:
         b2:55:79:0b:10:4c:a6:9f:c8:91:0b:79:90:5d:e7:7d:19:c7:
         19:d1:87:5f:3a:db:d6:03:08:d0:c5:b8:c9:6f:98:32:c8:55:
         e5:24:70:50:c1:0f:06:34:cb:16:39:64:6a:de:e0:cd:73:cd:
         12:49:50:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----