Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/D592E0C6B1DA11E993F12E48F8AEA228.roa
File:                     D592E0C6B1DA11E993F12E48F8AEA228.roa (raw, json)
Hash identifier:          WiqBepi/ZFyx1W7uhzPtYjwh6EueNOkZcYQ1/tpVlqA=
Subject key identifier:   CD:9A:03:DB:67:3C:04:0E:3A:3E:5D:1E:4F:02:63:7F:F8:35:92:E1
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       60
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/D592E0C6B1DA11E993F12E48F8AEA228.roa
Signing time:             Mon 29 Jul 2019 08:28:26 +0000
ROA not before:           Mon 29 Jul 2019 08:28:21 +0000
ROA not after:            Wed 27 Jul 2022 08:28:21 +0000
asID:                     36916
IP address blocks:        41.180.74.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 29 08:28:21 2019 GMT
            Not After : Jul 27 08:28:21 2022 GMT
        Subject: CN=5d3eae2a-9e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:56:47:5b:b7:9f:4b:cd:4d:8c:6d:da:29:11:
                    57:d7:d4:68:ea:3c:71:7a:25:65:12:36:db:a8:80:
                    3f:e6:08:f8:8f:4f:0c:86:51:9e:76:8b:ee:54:96:
                    6e:46:c8:38:1a:dc:25:6d:ac:8f:e8:82:c3:0a:25:
                    52:79:b4:b3:18:2d:4b:6d:77:05:7b:d9:f8:d5:6d:
                    89:3b:d7:f8:36:cd:0e:7e:17:74:b6:11:fd:7f:9f:
                    9d:32:4e:54:5a:58:2f:28:a5:61:e1:fb:d4:bb:73:
                    99:78:f0:cb:f9:48:75:6d:16:6f:d5:31:c1:c2:d9:
                    e5:0f:d3:23:75:9c:c3:92:c3:4f:d2:1b:5e:eb:08:
                    93:01:1a:1b:17:c6:28:b7:98:24:ff:d0:71:99:3c:
                    7a:60:d9:98:97:2b:54:1c:8e:76:4c:68:c2:b1:12:
                    a3:e2:ba:ce:cb:14:b9:83:60:6c:65:dc:ed:90:f4:
                    97:dd:68:ac:fe:56:8e:35:10:18:13:d0:7f:05:da:
                    6b:c0:31:8d:f3:0d:46:0a:2c:8e:6f:80:a5:ca:65:
                    e4:42:40:f1:39:48:74:03:20:39:ac:b8:af:0e:44:
                    5d:cd:1e:bc:72:34:6d:3a:ef:d4:83:a6:5a:3f:54:
                    da:f3:27:94:4d:e8:83:ac:4e:5b:7e:cc:35:3a:9c:
                    de:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9A:03:DB:67:3C:04:0E:3A:3E:5D:1E:4F:02:63:7F:F8:35:92:E1
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/D592E0C6B1DA11E993F12E48F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:af:aa:12:00:26:31:a2:40:6d:06:e5:cf:17:1d:49:5f:3e:
         6a:58:36:b7:de:4c:d3:ea:b1:e6:09:6d:3a:94:17:c4:56:de:
         0b:72:40:56:6b:8f:f8:46:dc:06:79:2a:64:68:12:5e:72:01:
         e1:02:21:8e:ef:a2:da:07:41:78:bc:c5:58:95:c6:4f:1f:fb:
         8b:94:00:83:17:fa:3c:58:9a:f9:cf:53:41:db:b6:72:a6:44:
         85:77:46:12:24:f0:98:64:de:f7:b5:52:0b:a7:0f:72:59:16:
         8a:af:28:6d:8b:28:4b:32:61:69:d4:57:42:68:d2:a6:29:3a:
         5c:e6:e5:2c:56:42:89:bb:b8:63:e5:cb:c4:85:1e:3d:79:b9:
         79:0f:0a:5d:b7:9c:24:0d:f1:cc:63:bf:b9:ab:a4:1b:db:ac:
         00:b3:cd:9c:2a:47:61:c8:76:a8:c2:37:e4:44:3a:c0:10:7d:
         d4:32:0c:3b:ae:70:6f:a1:d2:f9:01:92:ce:f7:ac:47:d3:04:
         d7:e9:b9:a4:9b:ea:c5:1e:d7:95:72:0b:53:08:3a:a2:d9:cb:
         5a:e0:b4:e5:2a:75:53:3e:f6:51:2a:46:a6:14:c8:db:cf:ae:
         2e:1d:da:fc:c8:8a:17:d8:21:88:73:f9:85:f2:57:9f:ed:77:
         48:c4:1d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----