Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C763E0A7D3E11ECB02AF6A95A40D577.roa
File:                     4C763E0A7D3E11ECB02AF6A95A40D577.roa (raw, json)
Hash identifier:          QMvTZz4UwFHyIm8nmWenrTey/m2dOVPduaD7bZJlbG8=
Subject key identifier:   E0:7B:83:05:55:41:CC:2A:4D:7A:86:C9:78:65:E7:15:77:D7:CD:4A
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0793
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C763E0A7D3E11ECB02AF6A95A40D577.roa
Signing time:             Mon 24 Jan 2022 17:51:47 +0000
ROA not before:           Mon 24 Jan 2022 17:51:43 +0000
ROA not after:            Tue 24 Jan 2023 17:51:43 +0000
asID:                     64267
IP address blocks:        154.16.230.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1939 (0x793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jan 24 17:51:43 2022 GMT
            Not After : Jan 24 17:51:43 2023 GMT
        Subject: CN=61eee733-c558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d1:a0:3d:f3:53:bb:b5:01:e8:8c:c5:3a:41:
                    57:5c:28:4b:24:53:95:6e:80:c7:20:6b:b7:05:4c:
                    62:b8:e7:2e:9b:65:fe:ed:65:0a:d1:a9:aa:e2:42:
                    96:a9:00:9b:8b:2b:36:fe:ac:79:eb:19:0e:64:59:
                    8f:2b:b7:76:5a:d0:39:c9:b8:e7:3b:d6:9f:3e:73:
                    6b:92:07:cd:37:a7:86:d3:24:18:22:5b:14:2c:ed:
                    f0:49:b1:7b:05:8c:23:df:9f:2f:4c:70:13:c3:4c:
                    c5:81:c3:b3:4c:3e:5e:1e:35:ba:fd:68:45:1c:99:
                    c5:96:49:11:9c:b4:82:4e:b1:e5:8c:7e:f5:98:81:
                    20:e3:c9:0d:bf:b1:f6:58:b9:82:27:e4:b9:4b:9d:
                    c7:b5:f3:53:99:0e:5b:ad:6d:6a:ae:5a:6d:95:68:
                    3a:41:dd:35:0c:f0:e8:e5:57:92:08:73:b8:a3:00:
                    8e:d2:b6:91:fe:48:f6:65:2d:03:e8:7f:ab:ce:fc:
                    b8:d3:46:a6:3c:11:a9:05:bf:06:10:1b:ee:c8:04:
                    81:15:da:de:78:a5:c7:51:98:96:8d:55:99:76:87:
                    bb:8a:d7:e1:a3:68:ae:f2:19:16:0c:a1:54:40:ac:
                    e4:d2:04:5f:fb:82:c9:af:db:44:74:71:4d:f8:af:
                    5a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7B:83:05:55:41:CC:2A:4D:7A:86:C9:78:65:E7:15:77:D7:CD:4A
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4C763E0A7D3E11ECB02AF6A95A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:39:53:98:d3:1b:32:b9:56:0d:39:81:c1:e1:68:21:ba:54:
         40:83:6b:34:35:5a:17:b9:bc:50:37:40:c4:9e:0c:67:ea:41:
         fa:d7:ba:80:7f:e8:3d:67:4d:9d:f8:57:22:c1:71:48:f2:52:
         96:f1:c3:cb:28:28:ff:24:8b:be:62:e2:32:38:a6:6a:89:f5:
         55:15:e9:66:d9:e9:13:19:3c:26:8d:e8:63:a0:df:55:81:1b:
         fe:2f:4e:35:fe:9b:5d:c8:5f:a8:30:cb:d3:d5:d0:35:af:a2:
         ce:c3:e8:05:04:28:4e:1e:6d:33:71:2f:9b:3f:8f:a9:62:1b:
         c2:19:39:7a:39:40:3a:8d:88:55:f9:a6:7f:25:ef:36:bc:d5:
         62:04:14:7e:10:57:70:71:b4:9f:6a:3c:7e:bd:db:29:ae:b8:
         7f:98:87:41:33:9c:8d:05:b3:a7:6d:03:1d:05:8a:17:e4:42:
         d4:e9:be:07:1f:fc:df:02:3b:45:6f:c1:0b:61:39:cd:6a:7a:
         96:a2:b0:80:ef:67:ef:12:03:8d:11:27:01:48:cf:0f:d8:3c:
         78:e3:0b:05:40:f8:5f:2f:72:e2:01:76:1c:d6:83:13:17:40:
         b8:ef:3a:71:d4:76:12:f0:6f:26:e4:6a:d8:62:eb:be:9d:2b:
         6b:d6:82:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----