Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/8C03F68CE54211EB8F227D59F8AEA228.roa
File:                     8C03F68CE54211EB8F227D59F8AEA228.roa (raw, json)
Hash identifier:          TiIlD/zbU7xfBk6L/vLaLQySDIFJh8iDzIICAHVXg+w=
Subject key identifier:   79:14:32:98:92:20:C1:09:FB:6C:B2:24:FD:5F:5A:67:A9:4B:74:D3
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       6B
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/8C03F68CE54211EB8F227D59F8AEA228.roa
Signing time:             Thu 15 Jul 2021 07:59:15 +0000
ROA not before:           Thu 15 Jul 2021 07:59:10 +0000
ROA not after:            Fri 29 Jul 2022 07:59:10 +0000
asID:                     22724
IP address blocks:        102.177.160.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Jul 15 07:59:10 2021 GMT
            Not After : Jul 29 07:59:10 2022 GMT
        Subject: CN=60efead3-8c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3c:3b:94:25:9b:52:ae:b4:57:9b:81:3d:ef:
                    fc:10:23:2b:e4:51:7b:6b:34:dd:ed:ad:94:40:85:
                    c7:d6:8d:a4:33:ab:e1:5a:a3:07:36:82:64:40:3c:
                    6e:79:a0:86:31:25:89:e0:c6:fd:7f:5e:9c:93:a9:
                    e7:fb:1e:1e:d1:48:05:e3:ec:ef:6d:db:92:5f:e6:
                    86:87:76:79:01:2b:bc:f9:4a:b6:87:b4:6c:08:6d:
                    2d:e4:ce:ee:61:ea:ac:d9:5c:95:9c:ae:98:ef:1e:
                    2e:aa:4c:17:07:29:5e:27:a5:20:b5:e6:15:99:02:
                    c8:18:b8:ec:5b:04:16:6f:57:4e:a4:cd:e0:3c:c6:
                    55:8b:db:57:7f:e9:03:95:33:21:9e:d5:0a:6c:95:
                    38:dc:55:3b:94:fc:bf:72:24:7c:72:a2:9d:27:e3:
                    ac:82:86:ca:39:b0:4b:23:86:2f:4b:da:28:c1:61:
                    db:c4:5a:fd:6f:b4:3f:f5:a9:84:5a:e4:01:79:e6:
                    d3:76:81:89:26:e3:0e:27:a2:c6:2c:a5:35:c5:58:
                    bd:16:21:44:85:24:69:67:25:79:9e:61:ce:cc:5e:
                    b2:60:cc:3d:c4:b9:5e:d2:f7:a7:63:85:df:da:5e:
                    bb:95:30:ba:b1:56:78:5a:90:4c:6b:3b:28:a3:61:
                    07:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:14:32:98:92:20:C1:09:FB:6C:B2:24:FD:5F:5A:67:A9:4B:74:D3
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/8C03F68CE54211EB8F227D59F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:54:28:56:b6:37:a9:55:cd:fd:ba:dc:3b:b1:1c:6a:1e:99:
         68:c8:90:45:1b:58:e1:f5:98:7a:2a:59:37:e9:bf:f1:ca:08:
         10:e1:62:86:1f:b5:5c:b3:a8:46:ac:a6:9b:a8:26:57:39:5d:
         f5:05:4a:99:a4:e7:71:c0:31:d5:30:b7:28:11:69:db:a5:5b:
         6a:da:da:d5:33:0c:bf:30:3d:d5:6f:e5:ef:ca:21:20:31:c8:
         92:1a:00:15:97:5e:76:e1:ce:87:7c:d1:7b:8f:c3:e2:ff:06:
         63:36:f3:e6:f8:fd:91:01:b1:ec:4f:cf:c0:67:de:11:c6:26:
         bd:25:b0:40:79:fc:63:c0:44:63:39:f0:37:fd:40:1b:e8:53:
         90:3d:c9:0a:0b:03:b0:06:d3:cc:c6:17:e9:fd:37:33:7d:6e:
         71:22:b5:68:a9:39:54:a2:8d:33:45:56:e3:21:6b:11:e2:f5:
         35:6a:f9:5f:53:7c:cd:b2:9f:7a:31:e6:a1:6a:07:a3:23:98:
         07:d7:5b:3e:99:51:94:0f:c3:1f:d0:00:82:71:fa:95:3f:03:
         e0:65:fd:44:3b:17:05:56:aa:9e:9f:8c:18:9e:f5:3f:91:8e:
         4f:2a:76:30:81:b2:76:33:1f:31:dd:5d:fa:6d:bb:3a:20:b2:
         0d:b6:6a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----