Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/ED0033ECB1DC11E9892FF349F8AEA228.roa
File:                     ED0033ECB1DC11E9892FF349F8AEA228.roa (raw, json)
Hash identifier:          9mXrCra47C5/p4AQj0Z6osfcEdc8LZ8Bk6RDeLn2nEI=
Subject key identifier:   94:E3:1D:2A:1A:FD:9A:93:24:D7:0B:D1:DF:5B:01:B8:43:C1:94:67
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       74
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/ED0033ECB1DC11E9892FF349F8AEA228.roa
Signing time:             Mon 29 Jul 2019 08:43:24 +0000
ROA not before:           Mon 29 Jul 2019 08:43:18 +0000
ROA not after:            Wed 27 Jul 2022 08:43:18 +0000
asID:                     36916
IP address blocks:        41.221.230.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 29 08:43:18 2019 GMT
            Not After : Jul 27 08:43:18 2022 GMT
        Subject: CN=5d3eb1ac-4333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:fc:94:b5:1f:42:c3:5e:c8:9e:92:d4:7b:
                    b4:05:8e:ce:07:6d:ac:a4:d3:e2:ba:8e:00:74:26:
                    b7:eb:2d:31:e1:06:7a:79:82:97:2c:34:f3:31:a6:
                    b8:b9:ee:5f:7f:13:b7:6d:e3:b8:92:83:48:97:f0:
                    79:9d:64:d5:cc:e2:3f:4a:cc:d4:33:71:9c:38:35:
                    81:f6:c8:76:4f:4f:06:dc:28:b3:0c:33:1e:7e:a0:
                    d7:da:18:a6:86:18:e9:3e:dd:f2:42:6c:bf:c0:7c:
                    9d:9e:30:e5:db:50:f0:8f:d4:43:bb:6e:ed:97:4c:
                    01:e6:61:0b:22:6f:ca:2e:ce:67:53:57:0d:5d:8a:
                    9e:e3:0a:12:21:53:05:8d:4b:b1:a1:72:7e:c3:e4:
                    25:37:ce:a4:21:ab:9d:15:14:47:e8:ad:a9:79:a9:
                    d0:0f:69:ba:e7:a8:ef:25:c4:66:68:b1:b6:af:25:
                    75:15:f0:df:b2:ad:12:82:e6:e1:46:1c:bf:c2:fe:
                    06:4a:98:f1:3d:7e:ca:4f:6e:7e:e8:30:8f:d6:7d:
                    b3:3c:97:86:a5:fb:71:b8:1a:df:93:fc:9a:92:2f:
                    ea:44:1b:35:ca:b5:cf:70:5a:7a:fb:6d:b4:af:f6:
                    08:44:c3:d6:c0:2d:a2:21:5f:c1:55:f0:0c:4b:2d:
                    61:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E3:1D:2A:1A:FD:9A:93:24:D7:0B:D1:DF:5B:01:B8:43:C1:94:67
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/ED0033ECB1DC11E9892FF349F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.221.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:2c:19:21:1c:7d:19:e3:bb:c0:ca:27:e6:6b:de:d6:95:54:
         4b:db:39:14:bd:03:63:9b:b8:28:93:18:e9:04:88:63:1d:c3:
         4e:3a:10:cd:77:0e:8b:65:c9:79:b7:fd:00:88:30:f0:86:5d:
         43:e7:10:ee:1c:ff:65:0e:c4:0a:87:6e:6d:98:9b:b4:15:10:
         bc:6d:44:7a:fb:94:54:b6:ce:90:37:7d:ce:0f:5a:04:b9:63:
         92:d1:15:89:77:1e:01:f5:30:b9:b0:39:4d:4d:54:5e:06:ed:
         14:21:64:84:21:b7:b6:31:63:2a:e7:29:cc:e3:f8:34:cb:ce:
         e5:b8:dc:33:8a:60:c4:3c:15:d1:98:e9:ab:6a:72:8f:e8:c2:
         22:a8:cb:88:2d:b0:e2:2c:55:68:3d:8d:c6:27:7c:61:2d:e9:
         eb:32:51:3b:a7:0d:5e:39:88:e4:79:7c:a9:65:a9:5a:b5:da:
         20:54:8a:fd:a1:44:2b:e6:25:58:4d:79:af:ff:fd:07:6e:38:
         55:12:68:07:9c:0d:18:67:f8:e4:b7:a1:a1:16:a9:f7:74:f9:
         a9:6a:49:7a:dc:ac:3c:15:30:b9:e7:c6:8d:7a:21:7f:18:35:
         ed:26:be:06:94:94:47:ac:5d:19:c2:cc:41:79:c3:31:ea:4e:
         b6:a1:b2:3b
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBdDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY2
OUQ2QkFGMTEwLwYDVQQFEyg5NTk3MzNERjU5RTg2RUE3QzIzQjJGQjM3QTZFODQ2
REJCMTg4MjdCMB4XDTE5MDcyOTA4NDMxOFoXDTIyMDcyNzA4NDMxOFowGDEWMBQG
A1UEAxMNNWQzZWIxYWMtNDMzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALRu/JS1H0LDXsiektR7tAWOzgdtrKTT4rqOAHQmt+stMeEGenmClyw08zGm
uLnuX38Tt23juJKDSJfweZ1k1cziP0rM1DNxnDg1gfbIdk9PBtwoswwzHn6g19oY
poYY6T7d8kJsv8B8nZ4w5dtQ8I/UQ7tu7ZdMAeZhCyJvyi7OZ1NXDV2KnuMKEiFT
BY1LsaFyfsPkJTfOpCGrnRUUR+itqXmp0A9puueo7yXEZmixtq8ldRXw37KtEoLm
4UYcv8L+BkqY8T1+yk9ufugwj9Z9szyXhqX7cbga35P8mpIv6kQbNcq1z3Baevtt
tK/2CETD1sAtoiFfwVXwDEstYSECAwEAAaOCAm4wggJqMB0GA1UdDgQWBBSU4x0q
Gv2akyTXC9HfWwG4Q8GUZzAfBgNVHSMEGDAWgBSVlzPfWehup8I7L7N6boRtuxiC
ezAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjlENkIvQkVGQjQ0RUU4NzlBMTFFOTlGMzkzMzUxRjhBRUEyMjgvbFpjejMx
bm9icWZDT3ktemVtNkViYnNZZ25zLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbFpjejMxbm9icWZDT3ktemVtNkViYnNZZ25zLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjlENkIvQkVGQjQ0RUU4NzlBMTFFOTlGMzkzMzUxRjhB
RUEyMjgvRUQwMDMzRUNCMURDMTFFOTg5MkZGMzQ5RjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBKd3mMA0GCSqGSIb3DQEBCwUAA4IBAQCl
LBkhHH0Z47vAyifma97WlVRL2zkUvQNjm7gokxjpBIhjHcNOOhDNdw6LZcl5t/0A
iDDwhl1D5xDuHP9lDsQKh25tmJu0FRC8bUR6+5RUts6QN33OD1oEuWOS0RWJdx4B
9TC5sDlNTVReBu0UIWSEIbe2MWMq5ynM4/g0y87luNwzimDEPBXRmOmranKP6MIi
qMuILbDiLFVoPY3GJ3xhLenrMlE7pw1eOYjkeXypZalatdogVIr9oUQr5iVYTXmv
//0HbjhVEmgHnA0YZ/jkt6GhFqn3dPmpakl63Kw8FTC558aNeiF/GDXtJr4GlJRH
rF0ZwsxBecMx6k62obI7
-----END CERTIFICATE-----