Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/26F4A978776A11EEAC03E77A4AD9E6FC.roa
File:                     26F4A978776A11EEAC03E77A4AD9E6FC.roa (raw, json)
Hash identifier:          vQvaCr3nSkDbg9wO3IGX6zUZCIaraYiKCGY0D+dvWw4=
Subject key identifier:   38:09:7E:BA:C8:E6:37:42:3F:14:DD:72:7B:73:C9:11:48:3E:5F:CC
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0423
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/26F4A978776A11EEAC03E77A4AD9E6FC.roa
Signing time:             Mon 30 Oct 2023 21:20:30 +0000
ROA not before:           Mon 30 Oct 2023 21:20:27 +0000
ROA not after:            Sun 19 Nov 2023 21:20:27 +0000
asID:                     209242
IP address blocks:        102.177.176.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059 (0x423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Oct 30 21:20:27 2023 GMT
            Not After : Nov 19 21:20:27 2023 GMT
        Subject: CN=65401e1e-ffcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:27:77:08:9c:7d:14:3f:19:19:74:d3:80:8a:
                    19:39:24:17:37:05:79:c1:95:e9:e9:be:4b:53:24:
                    b8:aa:0a:ac:5d:74:06:d3:9a:29:a6:43:a6:48:fa:
                    46:a9:71:ee:3d:d5:53:d2:0d:cc:a1:a1:08:22:0b:
                    26:29:c8:ed:d9:85:82:a3:18:d9:6c:f1:ee:1a:d3:
                    13:0b:d1:e4:2f:fa:bf:20:7a:7a:28:ae:b5:de:58:
                    c6:78:43:4a:bb:03:7b:10:25:34:68:d9:63:85:2d:
                    5e:d3:34:d4:1f:cd:c6:45:13:eb:04:47:ac:5e:a0:
                    bf:a0:25:e0:f8:db:c0:3a:7a:2a:43:01:66:2b:83:
                    3b:33:ef:b1:ba:5e:e4:a9:95:8a:a7:5a:a6:8b:5c:
                    99:45:7e:94:7f:70:ce:dc:01:d6:78:86:bf:31:e1:
                    96:aa:02:87:7d:11:5b:0b:01:e1:db:3a:c4:50:40:
                    fb:7d:6b:dd:a7:8b:bc:8d:f7:cf:87:8a:4d:21:89:
                    a0:df:2f:ff:55:b6:6f:dc:02:66:81:1c:ba:df:95:
                    07:fb:d0:ac:e6:96:cb:d9:0d:1e:b4:2a:46:aa:6e:
                    d4:ce:da:ab:13:8b:cb:de:73:4e:bd:d8:4a:43:c1:
                    16:f8:d2:e2:4f:22:cc:b5:bc:91:8b:1f:db:f7:2a:
                    46:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:09:7E:BA:C8:E6:37:42:3F:14:DD:72:7B:73:C9:11:48:3E:5F:CC
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/26F4A978776A11EEAC03E77A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:ee:94:e9:f0:06:63:e8:9d:6c:26:44:d7:d2:b9:47:89:87:
         e1:59:6a:09:4e:4d:f6:ce:d7:c6:d5:80:55:62:18:fd:5e:9e:
         32:0e:b6:e8:08:de:b8:0e:77:b4:f3:d2:e3:fe:a4:03:a5:87:
         85:c4:b9:43:af:29:5e:61:37:81:5c:9f:28:9c:89:3d:bb:4a:
         d6:03:91:65:ee:d8:61:eb:f8:5a:0d:4b:e4:9e:a4:86:bc:1e:
         9d:8c:8a:c9:a9:51:3e:ee:4c:fc:c0:50:16:d1:c4:54:28:09:
         00:f7:7f:14:cd:bc:58:62:1d:66:27:fc:ce:c5:bd:9a:6a:cc:
         38:d3:0a:a0:39:62:29:00:5a:33:47:52:d1:f8:b9:c2:7b:76:
         b2:84:c4:54:10:00:c6:fa:e7:13:2d:8a:50:f6:76:43:00:27:
         1b:ea:41:cf:69:d7:56:e1:b6:33:b7:76:7c:a9:6c:b9:87:15:
         2d:55:60:0a:59:91:b5:a0:99:13:49:6b:2e:d0:4b:33:19:7e:
         e5:7c:88:cb:d2:26:d9:51:88:a3:ad:37:6d:f8:12:24:b0:8a:
         13:ed:ed:6c:fc:e6:6b:f1:c4:af:6d:d3:a2:ed:d4:5a:b6:59:
         b2:dd:9a:2e:15:8a:8e:41:76:6f:5b:91:8d:d9:72:b0:ac:c2:
         12:3c:76:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----