Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/E4C44710AF8C11E98D715C4AF8AEA228.roa
File:                     E4C44710AF8C11E98D715C4AF8AEA228.roa (raw, json)
Hash identifier:          rWCbOc+EF8YAOoIxuM7ARApikH03IXbpnrMvoswGJjc=
Subject key identifier:   C7:8C:2E:5E:4B:0C:89:A6:17:4C:A9:03:2E:4E:8C:2C:3F:D8:85:53
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       45
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/E4C44710AF8C11E98D715C4AF8AEA228.roa
Signing time:             Fri 26 Jul 2019 10:05:28 +0000
ROA not before:           Fri 26 Jul 2019 10:05:21 +0000
ROA not after:            Wed 27 Jul 2022 10:05:21 +0000
asID:                     36916
IP address blocks:        41.180.104.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 26 10:05:21 2019 GMT
            Not After : Jul 27 10:05:21 2022 GMT
        Subject: CN=5d3ad068-9080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:79:d5:14:e0:2f:7f:82:3b:45:88:7d:9d:
                    e7:92:a9:77:84:54:54:f0:08:36:1a:0d:89:78:dd:
                    67:e2:97:e3:c9:03:85:40:89:a8:4a:f3:9e:cc:e2:
                    0e:23:60:7b:d4:14:fe:4a:39:a5:ef:f9:85:d9:a9:
                    e8:bb:75:04:83:e5:a0:d4:d1:d8:bc:09:c8:b6:18:
                    7b:d6:ee:61:e0:cb:f5:9c:7e:4f:51:88:ba:88:d5:
                    57:93:29:84:f7:b1:ef:ae:fe:cf:b2:cd:e2:2e:c7:
                    cc:83:e7:e7:7f:31:71:a6:b3:f4:c4:fa:98:15:be:
                    81:e7:5b:92:15:2b:fa:ab:52:a7:d6:2c:69:6d:d4:
                    91:17:63:b5:f2:81:cb:8c:04:9b:02:8c:d6:e0:62:
                    1c:a6:1c:de:96:60:42:4c:83:70:66:41:79:4f:97:
                    0b:d6:da:4d:51:a5:2a:e3:17:57:d9:c3:77:cc:f7:
                    68:07:ab:40:f2:94:69:7a:ed:10:20:f3:2c:4a:ab:
                    fa:1d:3c:2b:bc:39:b6:7b:39:c2:df:fb:06:1f:a8:
                    f3:5a:4f:9a:8d:f7:3b:15:41:85:e6:77:2a:16:2c:
                    d3:8b:e7:6b:e8:5f:2b:d8:f7:c9:2e:ae:0f:c3:e7:
                    8d:9f:fe:57:ea:e9:82:f6:8f:63:ee:1e:18:94:14:
                    8b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8C:2E:5E:4B:0C:89:A6:17:4C:A9:03:2E:4E:8C:2C:3F:D8:85:53
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/E4C44710AF8C11E98D715C4AF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:8b:aa:64:11:e7:02:14:44:e2:de:bb:26:88:32:f6:77:aa:
         42:43:6a:86:73:13:cb:53:68:68:78:02:97:41:ad:31:44:f4:
         d6:6d:b4:d0:dc:56:6f:2b:01:7e:be:01:62:f6:d9:40:85:a6:
         c9:6e:92:6e:a2:44:bd:56:c6:fc:0c:2d:0b:8f:00:33:e9:6f:
         b8:bc:e8:e0:bf:d3:d8:29:e5:c5:ed:12:b9:20:5b:86:1e:d4:
         b4:e0:5c:4e:d2:2c:33:73:cb:f2:f7:02:24:6f:e2:e4:6e:d9:
         5f:75:cf:d6:f8:92:ce:96:d7:ba:3e:47:59:8f:ab:76:1f:4e:
         0e:d1:f8:46:f1:3a:cf:be:c6:b2:f0:3d:ee:df:f7:0e:9e:c1:
         cf:b2:9d:8e:7d:01:88:de:49:5e:63:78:1a:8b:3c:67:7b:ef:
         cd:0a:66:23:73:d7:68:0e:30:db:2d:49:31:18:c7:fc:33:60:
         33:ae:a7:b2:85:61:a5:03:33:06:c7:53:1c:5e:ed:3d:03:37:
         65:b9:1e:a7:05:d2:4f:78:43:94:ae:73:aa:04:49:35:4f:04:
         03:2f:52:72:58:b4:eb:0c:0e:1f:97:35:1d:a7:c3:cf:1e:68:
         9b:20:c0:01:ec:a5:7e:28:cf:4d:ee:e2:50:c9:5d:40:80:00:
         00:ec:47:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----