Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C9FE75EEB1DB11E9A79B0049F8AEA228.roa
File:                     C9FE75EEB1DB11E9A79B0049F8AEA228.roa (raw, json)
Hash identifier:          5LWpTnvAF72GPbIenwqYvWIle50djelwsK+yD7mwl4c=
Subject key identifier:   2B:9A:04:41:5E:4D:A5:BE:74:C1:BE:58:A4:5B:18:F3:D2:9E:D1:43
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       6A
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C9FE75EEB1DB11E9A79B0049F8AEA228.roa
Signing time:             Mon 29 Jul 2019 08:35:16 +0000
ROA not before:           Mon 29 Jul 2019 08:35:09 +0000
ROA not after:            Wed 27 Jul 2022 08:35:09 +0000
asID:                     36916
IP address blocks:        41.180.96.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 29 08:35:09 2019 GMT
            Not After : Jul 27 08:35:09 2022 GMT
        Subject: CN=5d3eafc4-7513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:00:2a:73:d0:b4:85:6b:c6:3c:c2:c5:c9:
                    69:9e:49:eb:74:af:2c:3d:67:09:03:57:e7:d8:17:
                    19:d4:be:21:50:af:d9:6d:ce:e0:ba:1e:2f:0b:e7:
                    94:0f:a0:b0:37:fa:b3:06:16:0b:bc:63:f8:f5:9f:
                    4c:37:49:c0:3e:ca:9d:d3:af:cf:2a:da:8a:9c:b2:
                    29:23:70:6d:a2:c2:4d:05:ba:0b:5c:6d:fd:02:1c:
                    7f:55:ad:0d:06:f4:e9:47:1c:db:48:6e:d7:f9:c7:
                    6a:88:28:7d:43:0d:be:00:56:9c:27:5b:3e:64:ee:
                    fd:b5:4f:b8:c0:ea:19:00:66:ff:6c:f7:0a:6b:87:
                    1a:63:c3:bf:bb:e1:8a:6e:3a:62:c7:fa:09:f3:8f:
                    a7:dd:a3:ed:3f:94:3d:fd:97:92:97:6e:43:3f:f4:
                    4a:7f:db:31:fa:f4:45:1c:7e:41:18:36:7e:3b:62:
                    8b:4e:12:a8:58:f2:d3:38:7f:64:ed:1d:09:36:bf:
                    26:38:bf:f9:6f:17:b0:ce:ca:86:3f:31:a4:75:05:
                    6c:77:9f:86:6b:32:46:a7:d5:2d:76:22:4c:83:56:
                    09:17:7b:d2:95:0c:24:66:35:15:ca:73:36:3d:62:
                    03:52:b0:9e:71:b9:d6:85:da:fc:2c:af:a1:ca:5e:
                    8b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9A:04:41:5E:4D:A5:BE:74:C1:BE:58:A4:5B:18:F3:D2:9E:D1:43
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C9FE75EEB1DB11E9A79B0049F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:cb:fc:27:9b:ea:56:c1:da:22:4b:ba:92:92:20:a2:b5:a8:
         70:a6:47:66:86:27:3d:a1:b8:a6:ae:11:27:ea:19:dd:e4:20:
         7a:71:e0:94:c6:4b:02:ba:ef:1d:9f:7a:6c:a4:e1:0f:92:44:
         c3:fd:a7:c6:6d:6f:17:e4:f8:dd:22:39:c1:d7:67:4a:34:28:
         51:9e:1a:6c:8d:79:89:ad:f5:b8:4f:78:e1:3b:dc:0b:94:f2:
         5e:d5:23:f0:ae:d8:0e:32:05:47:ad:dc:cb:b3:f7:80:2a:e7:
         44:9d:67:c9:e5:46:82:aa:4e:67:ac:e4:db:91:c0:25:c3:83:
         3a:03:b7:d1:9d:6e:55:b8:99:c8:41:30:73:03:24:dc:77:e5:
         ca:8f:7a:7a:2f:b3:07:d0:b0:fb:d4:d2:92:d7:8d:f7:2e:20:
         21:02:94:3a:71:12:57:ba:ac:ca:83:40:df:29:fd:d9:2e:7c:
         6d:02:14:78:d1:f5:85:7d:6e:19:6c:bb:eb:9d:5c:fc:08:47:
         f9:2c:7d:e2:72:b1:2f:85:66:79:2a:98:f0:7f:ea:1f:d0:bc:
         8f:a7:55:b6:f9:e1:a0:9d:f2:1e:07:44:17:03:4a:0e:95:f4:
         a8:a2:9d:d9:42:55:65:dc:a2:41:28:f6:13:f6:56:20:b8:b6:
         07:dc:a4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----