Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/05CEBEFCAE8D11ECA2B944855A40D577.roa
File:                     05CEBEFCAE8D11ECA2B944855A40D577.roa (raw, json)
Hash identifier:          ig2fcbZAMXyiWgWfut1/NXoxy/6fX+JZYNK6/uB95ac=
Subject key identifier:   26:65:14:05:67:B7:DE:A5:35:5F:F2:E1:23:75:93:75:9D:E6:D9:50
Certificate issuer:       /CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Certificate serial:       01A6
Authority key identifier: 38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/05CEBEFCAE8D11ECA2B944855A40D577.roa
Signing time:             Mon 28 Mar 2022 11:48:45 +0000
ROA not before:           Mon 28 Mar 2022 11:48:42 +0000
ROA not after:            Tue 28 Mar 2023 11:48:42 +0000
asID:                     328010
IP address blocks:        196.49.19.0/24 maxlen: 24
                          2001:43f8:b61::/48 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
        Validity
            Not Before: Mar 28 11:48:42 2022 GMT
            Not After : Mar 28 11:48:42 2023 GMT
        Subject: CN=6241a09d-772c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:54:f1:6c:b9:0b:32:b4:91:8b:a2:fe:49:
                    69:41:e0:04:52:0a:dc:7f:5e:7f:76:88:0e:3a:95:
                    17:59:34:3d:d2:6a:2d:0c:52:95:ab:47:46:b0:88:
                    71:19:ed:4e:93:e7:22:0b:1c:fe:ee:e8:25:5a:72:
                    66:d0:b4:39:f8:f4:c5:c9:c9:fc:b5:18:a2:f0:61:
                    fc:81:45:3a:c8:a6:92:15:4f:10:13:87:da:21:2b:
                    ef:40:85:eb:97:bf:f7:92:4f:3a:c8:a6:0c:af:0a:
                    9f:45:e0:53:38:ed:92:7e:aa:88:8c:5e:e3:3e:8a:
                    2e:01:ea:b9:b8:76:50:c3:91:96:df:b6:e7:e2:38:
                    5d:b4:db:99:6e:8d:29:1d:ba:ab:b3:d0:a3:68:42:
                    15:42:9b:2f:6b:c9:f4:58:ca:c9:c7:36:90:af:cf:
                    63:a5:83:0b:cd:ad:49:f2:1d:52:b4:a6:dd:18:89:
                    af:41:28:9b:4b:1b:3e:21:d3:bf:bf:b4:92:e1:06:
                    fb:0a:e7:c3:c3:5e:e6:0a:37:e8:f3:c0:51:76:a4:
                    68:75:34:7c:a8:35:d6:08:41:c2:33:93:7c:09:f1:
                    61:93:b3:fd:ef:8d:05:7c:40:c1:40:cd:57:5e:5d:
                    7d:73:4a:ec:f4:bd:86:ed:bc:8d:1a:32:ca:61:05:
                    06:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:65:14:05:67:B7:DE:A5:35:5F:F2:E1:23:75:93:75:9D:E6:D9:50
            X509v3 Authority Key Identifier:
                keyid:38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/05CEBEFCAE8D11ECA2B944855A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.49.19.0/24
                IPv6:
                  2001:43f8:b61::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:d5:40:12:2f:2b:2e:42:1c:ba:a5:f8:fe:8d:1b:4e:02:0a:
         ec:30:89:45:19:ce:ca:1b:c1:25:2c:2d:68:6c:ef:c9:91:d8:
         3d:3e:8d:05:87:38:99:fe:fb:b6:1d:e9:5f:8c:fd:2e:c7:a9:
         e7:59:de:ef:91:f1:87:c2:d7:88:69:5c:7a:ee:0d:3c:4e:eb:
         98:e2:c1:07:14:f1:66:82:71:ae:ba:8f:39:9b:75:17:00:51:
         b6:88:f3:b5:76:a3:4c:b3:ab:09:a4:1c:0d:c1:7d:bc:87:b9:
         e2:ab:a2:80:db:eb:88:3b:a2:e6:ef:6e:99:7b:be:76:87:3f:
         1a:01:6a:65:39:1e:f8:87:a2:43:7e:bd:18:75:01:03:a2:9e:
         64:d0:fd:83:5c:dc:4b:93:db:3d:01:55:01:49:87:46:c1:4d:
         aa:d3:01:69:43:8b:61:73:f2:1c:7b:fd:96:03:d5:9c:50:7d:
         1c:64:fe:cb:81:74:26:e8:26:5f:28:80:8a:8c:3b:75:0f:b2:
         b8:48:9c:a8:e8:8a:36:4b:50:37:de:50:6f:d1:f0:e1:09:6a:
         ed:bc:e9:a2:8d:6f:7c:67:4f:f0:36:2e:80:39:db:17:72:81:
         8d:dd:19:71:1d:9e:30:ba:c8:12:e2:2a:8d:e0:f1:58:95:3c:
         c1:df:c1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----