Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3AE3E21A9C0611EB91760E2BF8AEA228.roa
File:                     3AE3E21A9C0611EB91760E2BF8AEA228.roa (raw, json)
Hash identifier:          V8bIkGNsWgrS1aF+pivGuIks01A6brtBImXQMgOhVg4=
Subject key identifier:   FD:D4:EC:C4:04:26:43:9E:4F:ED:B9:4D:E9:53:C8:FA:F1:3F:FF:C0
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0551
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3AE3E21A9C0611EB91760E2BF8AEA228.roa
Signing time:             Tue 13 Apr 2021 03:13:34 +0000
ROA not before:           Tue 13 Apr 2021 03:13:27 +0000
ROA not after:            Wed 13 Apr 2022 03:13:27 +0000
asID:                     40676
IP address blocks:        154.16.182.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1361 (0x551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Apr 13 03:13:27 2021 GMT
            Not After : Apr 13 03:13:27 2022 GMT
        Subject: CN=60750c5e-2499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:94:f9:d7:60:c9:1c:f4:35:0c:91:e9:6f:9a:
                    a8:ee:02:bb:e3:1a:d5:5f:4e:98:74:54:e7:1c:c4:
                    81:b6:8b:c8:73:e1:ed:4d:ad:3d:a6:8c:0a:c7:01:
                    3c:0e:00:36:30:12:7a:c4:bb:dd:10:8b:b4:b8:1c:
                    e5:ca:a8:26:54:73:7d:99:e0:71:e9:11:ca:2b:8e:
                    f6:f0:32:d1:03:ae:57:d4:ad:c0:80:90:ec:4e:7a:
                    61:4b:ac:c5:07:53:2d:34:ea:3e:b5:1a:94:e7:39:
                    ac:5d:6f:1a:8f:19:47:2e:b4:b2:92:83:2d:3f:08:
                    ce:39:cc:0b:79:07:e3:26:6a:0f:28:54:24:61:93:
                    f5:ed:bb:21:8f:ef:9d:c8:98:94:64:0c:44:45:87:
                    1b:15:6c:ce:39:e0:54:ec:35:ac:87:dd:95:d8:cf:
                    ab:f0:b5:2f:f3:3b:7d:fb:c6:07:f2:c5:10:14:f8:
                    58:8a:02:c9:06:09:0f:df:10:00:6c:4a:e9:be:11:
                    27:30:a9:33:0d:a6:1c:3d:ae:cc:15:28:67:ce:ac:
                    b8:47:b5:fc:8b:e8:8d:c1:8e:71:d8:57:36:65:4f:
                    15:26:9f:74:73:58:61:28:fc:0b:c3:5f:7d:ad:f9:
                    7f:bb:04:fc:c9:bf:e9:4c:25:34:c4:df:e7:ad:a0:
                    c4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D4:EC:C4:04:26:43:9E:4F:ED:B9:4D:E9:53:C8:FA:F1:3F:FF:C0
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3AE3E21A9C0611EB91760E2BF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:20:c4:d8:6c:f3:f8:2d:7c:97:e0:fd:df:91:53:cb:26:ea:
         f9:53:cf:64:7f:f8:14:da:6c:c6:65:ec:45:38:5f:c0:1b:f7:
         15:c2:d8:fd:93:50:92:4a:ec:57:d1:30:1e:c5:32:b4:40:03:
         e8:17:be:c0:f0:2d:3f:94:5c:08:ae:91:9b:ad:7a:1c:31:db:
         c6:14:c8:68:71:66:57:b7:bd:3e:0a:c5:40:15:dd:60:4e:11:
         99:54:4d:38:3e:7f:f1:cd:6b:5f:54:e9:7a:16:9c:5d:07:5f:
         29:70:8b:ec:b7:60:4e:1c:fb:d0:92:bf:8d:db:72:a2:3b:27:
         83:b2:2f:24:36:40:64:f7:bf:a6:18:41:2d:79:f2:9c:15:89:
         dc:4c:cb:b1:ba:da:dc:98:f8:13:db:8d:db:3d:3f:b8:e1:a3:
         dc:4e:da:a7:07:c3:26:6e:96:e5:60:e1:59:a6:13:3f:29:f7:
         63:82:7c:b6:6d:44:4c:70:9d:7d:08:ee:53:61:84:ba:b9:c1:
         16:a4:0a:b2:a5:b0:53:2f:d3:a7:fc:1a:d5:9e:1b:14:14:2f:
         22:0f:41:bc:73:2a:d7:06:93:13:57:da:c4:34:a1:a5:a8:99:
         88:97:2f:16:6e:71:eb:0e:31:a4:e6:63:76:30:3a:ce:a6:5b:
         ca:1d:53:2f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMTA0MTMwMzEzMjdaFw0yMjA0MTMwMzEzMjdaMBgxFjAU
BgNVBAMTDTYwNzUwYzVlLTI0OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJlPnXYMkc9DUMkelvmqjuArvjGtVfTph0VOccxIG2i8hz4e1NrT2mjArH
ATwOADYwEnrEu90Qi7S4HOXKqCZUc32Z4HHpEcorjvbwMtEDrlfUrcCAkOxOemFL
rMUHUy006j61GpTnOaxdbxqPGUcutLKSgy0/CM45zAt5B+Mmag8oVCRhk/XtuyGP
753ImJRkDERFhxsVbM454FTsNayH3ZXYz6vwtS/zO337xgfyxRAU+FiKAskGCQ/f
EABsSum+EScwqTMNphw9rswVKGfOrLhHtfyL6I3BjnHYVzZlTxUmn3RzWGEo/AvD
X32t+X+7BPzJv+lMJTTE3+etoMTZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/dTs
xAQmQ55P7blN6VPI+vE//8AwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzNBRTNFMjFBOUMwNjExRUI5MTc2MEUyQkY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGaELYwDQYJKoZIhvcNAQEL
BQADggEBAEcgxNhs8/gtfJfg/d+RU8sm6vlTz2R/+BTabMZl7EU4X8Ab9xXC2P2T
UJJK7FfRMB7FMrRAA+gXvsDwLT+UXAiukZutehwx28YUyGhxZle3vT4KxUAV3WBO
EZlUTTg+f/HNa19U6XoWnF0HXylwi+y3YE4c+9CSv43bcqI7J4OyLyQ2QGT3v6YY
QS158pwVidxMy7G62tyY+BPbjds9P7jho9xO2qcHwyZuluVg4VmmEz8p92OCfLZt
RExwnX0I7lNhhLq5wRakCrKlsFMv06f8GtWeGxQULyIPQbxzKtcGkxNX2sQ0oaWo
mYiXLxZucesOMaTmY3YwOs6mW8odUy8=
-----END CERTIFICATE-----