Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/BF6B4204B1DD11E98935B24AF8AEA228.roa
File:                     BF6B4204B1DD11E98935B24AF8AEA228.roa (raw, json)
Hash identifier:          2IKuh99+wTQHWTvh4WtyDGk14jSJvRI4pSxmpi1yDvQ=
Subject key identifier:   AE:8E:3C:F3:1F:2D:5B:CC:33:B9:4A:46:61:25:80:5E:5B:9E:C9:9D
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       7E
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/BF6B4204B1DD11E98935B24AF8AEA228.roa
Signing time:             Mon 29 Jul 2019 08:49:17 +0000
ROA not before:           Mon 29 Jul 2019 08:49:12 +0000
ROA not after:            Wed 27 Jul 2022 08:49:12 +0000
asID:                     36916
IP address blocks:        41.221.238.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 29 08:49:12 2019 GMT
            Not After : Jul 27 08:49:12 2022 GMT
        Subject: CN=5d3eb30d-2609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4a:09:91:4d:40:70:6b:b6:5e:5a:56:92:a7:
                    89:7b:5e:ab:e2:75:86:bd:42:4b:71:1c:2b:d5:88:
                    2f:40:75:8d:74:55:7b:7e:a5:05:e7:58:8d:80:cb:
                    c1:c2:1f:84:2d:43:ff:be:f9:2e:8c:7c:d8:ed:90:
                    90:dd:0f:91:fc:9e:0c:cc:a3:0b:ef:90:08:11:6c:
                    3b:34:e0:56:71:14:6d:87:15:df:5c:10:53:17:7f:
                    84:9c:d0:de:50:d1:4a:af:eb:26:d8:f3:68:75:cf:
                    97:3b:24:43:6e:28:96:85:30:8c:05:80:1d:7e:0d:
                    93:7c:eb:95:d1:a3:2e:52:ba:01:c9:06:d5:a0:5e:
                    5e:44:8f:7f:bc:6c:ef:02:82:9a:d9:e1:65:8c:b7:
                    ef:4d:e3:04:b5:68:5b:c9:cf:05:29:0f:1c:18:7f:
                    69:98:30:7f:ce:fb:08:e1:bd:a8:bc:e0:5e:64:e5:
                    97:0d:99:eb:d1:a4:1f:5b:2f:5e:91:36:94:e2:76:
                    40:b1:10:64:8b:5b:fe:a5:92:fb:f2:bf:e0:72:54:
                    ee:22:be:64:62:25:fa:57:ff:a9:f6:80:fb:41:64:
                    cf:20:55:19:d5:db:e0:0a:08:b7:02:7a:6d:8d:fe:
                    64:72:88:ab:26:17:59:f1:2a:87:53:f2:2a:9c:c4:
                    83:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8E:3C:F3:1F:2D:5B:CC:33:B9:4A:46:61:25:80:5E:5B:9E:C9:9D
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/BF6B4204B1DD11E98935B24AF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.221.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:97:55:a8:78:45:d5:46:5b:9e:68:1f:52:24:12:8f:8e:af:
         13:bf:87:46:d9:57:8c:ee:42:95:37:09:15:7e:85:ca:7a:d2:
         3a:1d:47:7b:29:01:b3:89:a1:36:78:ea:fd:a6:c4:b8:07:26:
         43:34:2b:00:2c:40:e1:8e:fb:e0:95:f3:16:af:5b:c8:68:a4:
         32:d7:e9:27:69:5b:23:8d:cd:aa:9f:b6:f2:39:6a:12:3c:a7:
         a6:21:18:ac:ca:ca:da:b9:a0:7f:a3:2c:61:22:39:bd:22:70:
         e2:2a:ed:a0:1e:67:6b:4a:60:46:52:fc:ba:8a:03:ea:92:b0:
         b6:fa:45:dc:46:a8:28:28:f4:e1:58:d0:f2:3c:0f:38:b8:ce:
         c4:42:42:62:4c:ae:89:a2:42:4b:64:ad:a9:79:45:1e:e3:21:
         51:01:fa:ef:f7:f6:8c:0e:72:59:23:86:c0:a7:01:dc:4b:88:
         fe:a0:c3:b5:65:2d:78:c0:ff:a8:52:5a:ce:13:2b:21:b4:56:
         e3:ac:1a:31:b7:a0:23:d0:54:fb:e2:dd:fc:13:7f:9d:5f:52:
         5a:14:d2:fb:7b:a0:df:8a:85:4a:5a:e9:52:5a:83:fd:10:6b:
         e8:ec:63:1a:5b:ed:b1:c1:e3:5b:0c:ac:da:24:86:2b:31:d6:
         17:c1:69:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----