Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/A55BC266AF8611E983C1CB45F8AEA228.roa
File:                     A55BC266AF8611E983C1CB45F8AEA228.roa (raw, json)
Hash identifier:          hqK0MbLLfONiFp7nAdL0M3QW9+0yT+fW1FaecPT5mPY=
Subject key identifier:   48:A1:67:20:F9:AE:D3:71:F8:31:DD:5F:C6:9F:5C:8C:C5:0E:47:7E
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       41
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/A55BC266AF8611E983C1CB45F8AEA228.roa
Signing time:             Fri 26 Jul 2019 09:20:45 +0000
ROA not before:           Fri 26 Jul 2019 09:20:40 +0000
ROA not after:            Wed 27 Jul 2022 09:20:40 +0000
asID:                     36916
IP address blocks:        41.180.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 26 09:20:40 2019 GMT
            Not After : Jul 27 09:20:40 2022 GMT
        Subject: CN=5d3ac5ed-0c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:33:36:06:18:f7:80:7b:70:81:36:5e:9e:24:
                    db:36:1b:30:eb:36:34:63:6b:e0:7c:ad:65:1e:8b:
                    06:49:e2:ab:71:37:6c:33:67:0e:80:a0:72:13:2d:
                    bf:29:33:00:24:b1:12:aa:ba:ee:d6:83:8c:ee:bb:
                    3a:3d:b6:fb:df:46:ca:36:58:32:ca:39:83:71:82:
                    10:6c:63:34:8e:c8:c6:c5:0d:c7:af:d9:07:94:ea:
                    47:fb:00:79:69:43:c1:ec:c1:60:0b:57:03:a6:40:
                    20:39:8a:ef:b1:e6:7f:cc:1c:ac:c5:a1:04:af:9b:
                    0e:1a:76:c8:36:a3:59:a4:e9:f1:20:94:83:46:e7:
                    30:0f:e2:48:e2:36:64:f3:1c:6d:3c:16:bd:ad:4e:
                    1b:78:f2:10:65:93:93:d2:68:4d:8b:2c:62:00:47:
                    96:87:8f:68:ed:9f:44:89:cc:3d:ab:92:42:98:c7:
                    a4:aa:2a:fc:1a:d3:64:48:a1:19:b6:47:1d:33:56:
                    54:9a:b6:75:dc:88:36:a1:0a:70:c9:c8:23:e4:02:
                    2c:24:31:09:0e:41:23:87:d7:81:e3:f8:41:b9:24:
                    50:da:21:bc:a2:47:73:4b:36:47:b5:ba:5d:bc:32:
                    38:a4:7f:2f:b2:72:1e:35:b9:1b:78:6c:4d:cf:f4:
                    2d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A1:67:20:F9:AE:D3:71:F8:31:DD:5F:C6:9F:5C:8C:C5:0E:47:7E
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/A55BC266AF8611E983C1CB45F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         64:86:3d:ba:51:fe:f7:21:29:6e:69:1b:6f:95:00:f6:b9:01:
         1e:c8:99:81:d6:ff:e2:14:25:dc:40:b5:fd:5b:30:cc:8c:a7:
         d4:7b:50:37:94:0f:04:85:01:2a:11:b9:aa:77:e7:2b:80:b3:
         00:9d:d0:85:2d:c9:74:24:89:64:9a:ab:97:02:63:26:e0:16:
         86:da:73:3d:95:07:e7:bd:f8:85:af:d6:4b:d7:5f:e7:df:38:
         6d:c3:ab:46:36:99:85:a3:ef:b0:ac:91:fd:e8:8a:69:83:c9:
         43:b7:07:5e:c8:98:96:35:66:a1:ef:95:0a:4a:91:ae:56:9a:
         3b:81:b2:0d:04:4c:76:6c:ee:b6:b0:0f:8f:d1:a2:d1:f5:21:
         3d:d2:6c:c5:ea:3c:24:30:93:4f:d2:e8:a7:d6:3a:b4:87:75:
         52:c6:4b:f0:0b:02:57:76:83:a9:70:8a:ec:88:14:a8:91:8f:
         62:6d:f3:f3:23:4a:2d:d5:bf:c0:4d:34:95:09:71:e1:e5:ef:
         bd:19:de:be:ba:cc:bf:3c:28:71:67:93:86:d3:29:36:0b:00:
         03:e9:30:fa:69:74:67:a7:20:0e:7a:d7:d5:b7:d1:1e:43:a4:
         67:81:f9:7d:bb:5a:83:48:50:5a:b9:a4:a2:8b:ce:14:75:7c:
         c8:30:41:46
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIBQTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY2
OUQ2QkFGMTEwLwYDVQQFEyg5NTk3MzNERjU5RTg2RUE3QzIzQjJGQjM3QTZFODQ2
REJCMTg4MjdCMB4XDTE5MDcyNjA5MjA0MFoXDTIyMDcyNzA5MjA0MFowGDEWMBQG
A1UEAxMNNWQzYWM1ZWQtMGMwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMIzNgYY94B7cIE2Xp4k2zYbMOs2NGNr4HytZR6LBkniq3E3bDNnDoCgchMt
vykzACSxEqq67taDjO67Oj22+99GyjZYMso5g3GCEGxjNI7IxsUNx6/ZB5TqR/sA
eWlDwezBYAtXA6ZAIDmK77Hmf8wcrMWhBK+bDhp2yDajWaTp8SCUg0bnMA/iSOI2
ZPMcbTwWva1OG3jyEGWTk9JoTYssYgBHloePaO2fRInMPauSQpjHpKoq/BrTZEih
GbZHHTNWVJq2ddyINqEKcMnII+QCLCQxCQ5BI4fXgeP4QbkkUNohvKJHc0s2R7W6
XbwyOKR/L7JyHjW5G3hsTc/0LSsCAwEAAaOCAm0wggJpMB0GA1UdDgQWBBRIoWcg
+a7Tcfgx3V/Gn1yMxQ5HfjAfBgNVHSMEGDAWgBSVlzPfWehup8I7L7N6boRtuxiC
ezAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjlENkIvQkVGQjQ0RUU4NzlBMTFFOTlGMzkzMzUxRjhBRUEyMjgvbFpjejMx
bm9icWZDT3ktemVtNkViYnNZZ25zLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbFpjejMxbm9icWZDT3ktemVtNkViYnNZZ25zLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjlENkIvQkVGQjQ0RUU4NzlBMTFFOTlGMzkzMzUxRjhB
RUEyMjgvQTU1QkMyNjZBRjg2MTFFOTgzQzFDQjQ1RjhBRUEyMjgucm9hMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKbQwDQYJKoZIhvcNAQELBQADggEBAGSG
PbpR/vchKW5pG2+VAPa5AR7ImYHW/+IUJdxAtf1bMMyMp9R7UDeUDwSFASoRuap3
5yuAswCd0IUtyXQkiWSaq5cCYybgFobacz2VB+e9+IWv1kvXX+ffOG3Dq0Y2mYWj
77Cskf3oimmDyUO3B17ImJY1ZqHvlQpKka5WmjuBsg0ETHZs7rawD4/RotH1IT3S
bMXqPCQwk0/S6KfWOrSHdVLGS/ALAld2g6lwiuyIFKiRj2Jt8/MjSi3Vv8BNNJUJ
ceHl770Z3r66zL88KHFnk4bTKTYLAAPpMPppdGenIA5619W30R5DpGeB+X27WoNI
UFq5pKKLzhR1fMgwQUY=
-----END CERTIFICATE-----