Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7A3B00D6699E11ECAE1AE2AA5A40D577.roa
File:                     7A3B00D6699E11ECAE1AE2AA5A40D577.roa (raw, json)
Hash identifier:          BGyqaxJI4wO4pdjMbgySjfmiKcAezyOlFqjOgWyPxSI=
Subject key identifier:   4F:1A:E7:E2:5B:2B:D6:E3:46:A4:98:9C:98:2C:1F:D5:A7:9B:FB:C4
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0755
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7A3B00D6699E11ECAE1AE2AA5A40D577.roa
Signing time:             Thu 30 Dec 2021 18:29:52 +0000
ROA not before:           Thu 30 Dec 2021 18:29:47 +0000
ROA not after:            Fri 30 Dec 2022 18:29:47 +0000
asID:                     207326
IP address blocks:        154.16.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1877 (0x755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Dec 30 18:29:47 2021 GMT
            Not After : Dec 30 18:29:47 2022 GMT
        Subject: CN=61cdfaa0-1eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:83:9d:97:ab:76:d5:49:51:53:ad:30:8c:
                    9f:66:c1:85:ab:a5:18:6c:ef:e7:2d:6c:73:b6:f0:
                    a3:73:87:42:ec:18:6b:1c:33:dd:f7:ec:6a:1d:84:
                    74:ee:52:bf:60:2d:1f:50:5c:5d:92:f8:2f:e4:d1:
                    a4:18:a4:e4:d5:3c:dd:f5:94:b5:ea:83:c2:52:21:
                    34:c1:48:b8:29:fc:b7:20:3d:9a:8c:10:e4:0f:1b:
                    fa:62:52:e5:74:0e:83:cf:83:77:98:c0:18:4f:7b:
                    1e:df:21:7a:57:0f:3a:82:d1:b9:8f:e0:7b:1d:76:
                    39:f6:61:3c:06:c6:6c:f1:90:e3:cb:94:14:8f:3d:
                    12:c3:d3:ee:43:bf:cb:18:c5:98:e4:5f:d5:d3:cc:
                    8b:ec:e0:4e:f8:65:2d:6b:6b:65:0b:82:02:96:b8:
                    d7:bd:fa:e0:42:33:f4:f5:ae:b5:5b:0e:4b:56:3c:
                    8f:32:08:8c:a0:d7:83:87:e8:4f:30:1d:17:50:29:
                    38:5c:55:da:ea:78:5b:9d:d6:76:94:b0:3a:e2:72:
                    c1:92:7b:98:bb:89:68:a6:b7:f7:b5:e7:b7:ad:0e:
                    06:ab:d7:5d:ec:21:87:3b:b9:d6:ab:09:9b:d0:83:
                    cf:6d:56:b4:8e:26:d8:91:f7:d5:b1:02:50:f5:99:
                    36:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1A:E7:E2:5B:2B:D6:E3:46:A4:98:9C:98:2C:1F:D5:A7:9B:FB:C4
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7A3B00D6699E11ECAE1AE2AA5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:ca:d6:de:35:74:1a:36:f4:cd:c2:db:23:8c:05:33:3f:80:
         11:82:6d:24:96:9b:42:2f:22:62:11:7c:37:9d:22:d0:71:f1:
         d8:43:c9:c7:60:5d:e2:8d:8c:9c:54:86:fd:6c:00:08:42:7a:
         5f:41:ea:de:fb:f8:5f:d2:21:3b:52:28:96:c9:db:ab:88:34:
         f1:c6:84:1c:b4:6c:ae:06:e7:d8:6a:bf:29:c5:49:0e:a5:dc:
         1b:3b:e7:9c:d0:45:60:c4:d1:62:fe:42:e4:fc:9d:15:57:a8:
         56:d6:ea:e0:40:23:90:d7:ed:e0:c2:d1:74:b4:5e:77:fe:0e:
         06:db:dc:8f:97:c8:99:fc:fc:7e:dd:9e:f3:76:f8:7e:14:71:
         25:b4:1a:29:01:d9:c7:09:32:ae:66:a9:43:c8:61:49:d2:50:
         8f:f1:02:f9:8b:55:24:0f:a7:72:55:e7:64:3b:df:8a:b9:a1:
         99:cf:4e:61:df:4c:bd:29:51:07:e9:c1:c4:5c:5d:b9:91:58:
         df:b7:88:70:12:89:e9:01:70:ae:4a:e4:f7:4a:d9:49:df:3b:
         39:6e:dd:50:27:69:1e:01:19:4a:35:e1:6d:a0:ea:51:e9:65:
         95:9a:eb:6a:ad:96:f9:b3:4c:90:dd:a2:6f:ad:a2:6a:e8:fb:
         a9:67:2e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----