Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EB04DC8BBB611ECB817A4AF5A40D577.roa
File:                     2EB04DC8BBB611ECB817A4AF5A40D577.roa (raw, json)
Hash identifier:          qzgfOFsY5onxtRlBZCHM0/kaPpjqJ3qPNt6XKZ7usv0=
Subject key identifier:   9E:DB:FD:85:4F:BC:82:A5:60:74:05:CE:02:89:DF:2E:A3:2C:9B:50
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       15C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EB04DC8BBB611ECB817A4AF5A40D577.roa
Signing time:             Thu 14 Apr 2022 05:46:08 +0000
ROA not before:           Thu 14 Apr 2022 05:46:04 +0000
ROA not after:            Wed 31 May 2023 05:46:04 +0000
asID:                     399674
IP address blocks:        154.203.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5575 (0x15c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 14 05:46:04 2022 GMT
            Not After : May 31 05:46:04 2023 GMT
        Subject: CN=6257b520-a29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:63:fd:38:34:8d:f9:01:f9:05:71:86:5e:bb:
                    3d:12:41:26:33:0f:94:df:77:f7:48:1f:07:17:4b:
                    06:06:40:1c:3f:0f:29:e5:8a:8a:44:00:11:32:0c:
                    78:d4:79:84:c4:d4:3a:fb:3c:1a:cc:4a:2c:d2:39:
                    37:1b:6f:26:21:da:5d:e3:7d:6c:54:54:d8:d7:bd:
                    30:85:1e:2f:00:77:c9:12:c9:38:76:ff:62:62:2f:
                    78:c4:9e:b0:da:1f:5e:f5:1c:0a:56:fc:ff:ca:94:
                    0d:9e:1b:be:23:e6:6f:52:a3:2e:6a:b9:04:e8:45:
                    37:1c:e6:25:f2:a1:f4:a8:6e:64:15:8b:e5:d8:44:
                    4c:d2:aa:85:16:65:54:65:ab:ee:85:3d:ff:88:9d:
                    a4:1e:9b:5e:fe:ec:80:e0:f9:dc:02:44:0f:de:4d:
                    8f:b1:f7:60:96:00:5b:f6:13:a9:ae:c2:31:b6:76:
                    9a:57:94:96:36:be:f5:59:bc:33:1b:1a:4f:cb:03:
                    7c:c4:87:65:d4:e4:c6:c0:79:cd:63:45:3e:22:96:
                    4e:7e:0b:1b:59:2e:e5:7f:fa:89:80:46:38:65:7e:
                    2e:97:31:4d:b8:52:d8:58:aa:79:b6:76:dc:d6:45:
                    f8:2c:48:92:ba:ab:86:6c:27:d6:1d:c4:40:90:b7:
                    d8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DB:FD:85:4F:BC:82:A5:60:74:05:CE:02:89:DF:2E:A3:2C:9B:50
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EB04DC8BBB611ECB817A4AF5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a0:53:e2:7a:31:51:b4:31:80:2b:ac:72:19:36:22:8a:96:cf:
         43:6e:43:e3:5f:04:da:62:18:55:02:f0:f6:ff:bb:34:f9:81:
         d7:a3:58:96:7e:f0:22:18:c5:69:4b:6f:6c:55:70:08:b9:7f:
         cb:bf:e3:85:41:7b:7f:de:ad:94:d5:64:77:b1:e0:07:30:d1:
         59:6a:8f:97:84:35:ae:fb:2c:42:e6:e1:02:be:76:09:01:41:
         ce:ab:ba:8c:8a:52:8f:c2:90:3b:ae:0d:f5:61:5d:4b:d2:42:
         28:51:56:ff:87:65:4c:5e:a6:7f:80:f3:f7:4f:40:83:87:44:
         ad:4b:ff:de:85:4a:01:f4:dc:d5:38:a3:14:e9:64:cb:a1:26:
         fc:12:b6:85:33:49:46:8f:e1:4b:a5:81:dc:ea:85:fa:20:a1:
         86:fa:e2:89:7b:a5:d0:7f:10:c3:5e:bb:12:46:b4:67:eb:5e:
         bd:2f:b0:fb:64:cb:da:b5:d3:37:ae:8f:96:2b:ad:25:3e:bb:
         93:0b:4e:24:96:5d:85:95:3c:73:17:2e:a1:5a:56:60:9c:3a:
         98:58:33:91:6b:f9:a9:c4:cd:9b:b3:d1:a7:24:a4:b1:f4:52:
         be:03:f8:b2:f5:99:6b:f2:ec:be:b3:e3:66:17:f2:c4:fd:29:
         9e:5c:40:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----