Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2595D63C155A11EE9BDEAF414AD9E6FC.roa
File:                     2595D63C155A11EE9BDEAF414AD9E6FC.roa (raw, json)
Hash identifier:          ma5AmbqBBhj7yvGmwutH23awwpTJQwW1JfSOm1Mho7s=
Subject key identifier:   33:69:17:4E:F6:CA:25:28:88:E3:6C:26:4D:25:9F:31:03:59:0E:28
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2E47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2595D63C155A11EE9BDEAF414AD9E6FC.roa
Signing time:             Wed 28 Jun 2023 02:19:02 +0000
ROA not before:           Wed 28 Jun 2023 02:18:58 +0000
ROA not after:            Wed 24 Apr 2024 02:18:58 +0000
asID:                     63888
IP address blocks:        154.209.64.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11847 (0x2e47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 28 02:18:58 2023 GMT
            Not After : Apr 24 02:18:58 2024 GMT
        Subject: CN=649b9896-c5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8c:8f:14:9a:33:4f:96:14:b8:9f:30:68:2d:
                    2a:17:a0:9a:ce:36:1c:88:88:aa:c5:47:7b:75:95:
                    09:95:ee:13:00:b9:47:ab:71:37:94:d3:be:69:bf:
                    df:45:b4:11:40:dd:bd:01:e6:06:ae:16:b5:fb:48:
                    10:74:a4:8d:0a:66:c1:85:e4:15:c4:47:aa:29:c6:
                    62:a1:49:ec:77:85:6e:b4:1f:6d:79:13:fd:7d:fb:
                    75:8e:ea:1c:e7:8b:3c:e0:48:95:c4:1f:61:b8:28:
                    3b:33:2b:72:79:28:46:13:ab:c1:3c:14:41:18:eb:
                    ce:70:20:d1:09:d0:c4:6b:d9:86:93:11:0b:fa:b0:
                    8e:c2:f8:bc:db:1c:6e:da:be:41:4b:7f:7c:d0:dd:
                    09:f5:a9:9b:7d:14:74:06:ff:23:ff:b7:ff:cb:83:
                    b9:c4:2d:f7:fa:59:95:83:c9:ac:7f:7b:78:2c:e6:
                    e7:3d:14:0d:6e:9c:d2:2d:02:a9:e0:31:5d:06:ac:
                    be:f9:ff:df:cb:c2:e4:fa:3e:75:33:c6:3f:6a:91:
                    7f:57:e5:d1:bc:74:7a:c4:55:65:a8:8b:c9:4c:49:
                    95:d3:68:5d:55:10:a7:6f:6c:55:30:ba:f4:49:53:
                    2b:1d:0f:69:ba:59:37:6f:d8:89:69:16:01:67:79:
                    68:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:69:17:4E:F6:CA:25:28:88:E3:6C:26:4D:25:9F:31:03:59:0E:28
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2595D63C155A11EE9BDEAF414AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:b0:47:3f:f1:99:aa:4b:59:b7:ea:09:31:5a:64:c1:e7:07:
         27:a8:91:97:35:c3:87:be:58:98:e7:73:25:bd:9e:24:44:98:
         ed:8f:e1:43:83:b0:36:b3:06:82:fa:4e:fe:1d:2f:6e:2d:e6:
         94:40:1b:97:4c:e2:9c:a9:ba:24:c8:9a:fb:13:cf:e3:0c:1c:
         57:13:6e:53:6c:a1:10:bd:e8:03:ae:35:06:ec:42:d6:34:17:
         2a:95:bd:58:ff:45:8c:52:71:89:5b:fd:dc:63:8b:56:6a:42:
         c7:3e:17:02:a5:d0:43:35:5c:97:7e:6f:08:07:08:50:58:09:
         3b:5a:0d:e6:23:0a:1a:09:54:4b:ae:91:5e:16:65:9a:46:2c:
         2c:79:53:c3:62:72:3f:c5:8a:d1:f6:06:47:b0:ca:6f:3e:76:
         e1:8f:29:82:64:67:d4:9d:2b:dc:28:c7:43:63:c1:86:50:0c:
         aa:43:20:a9:68:0a:de:ed:bb:88:56:2f:a7:a5:df:65:3c:ea:
         b8:ad:a3:2f:2a:6b:a7:8a:fa:4d:69:53:72:e7:e8:70:6d:65:
         f0:8a:73:8a:aa:3c:37:ce:39:1c:c9:f6:ea:61:a2:2c:51:e3:
         3d:96:5b:2b:33:51:f1:48:ee:91:4f:95:4f:4b:59:b7:18:4d:
         5a:df:9b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----