Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30BD574AA85711F1BDE8B2C3CE1D38B0.roa
File:                     30BD574AA85711F1BDE8B2C3CE1D38B0.roa (raw, json)
Hash identifier:          zm5hJ/LlVt3WD6+s2tL1lvGX8yeAidOsH6rw2NtbWoo=
Subject key identifier:   F6:E2:9E:64:90:F5:FC:28:50:45:F9:03:DC:1B:BC:30:B7:DD:2C:EF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E575
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30BD574AA85711F1BDE8B2C3CE1D38B0.roa
Signing time:             Fri 04 Sep 2026 11:53:06 +0000
ROA not before:           Fri 04 Sep 2026 11:53:02 +0000
ROA not after:            Fri 11 Sep 2026 11:53:02 +0000
asID:                     18229
IP address blocks:        154.206.22.0/24 maxlen: 24
                          154.206.23.0/24 maxlen: 24
                          154.210.197.0/24 maxlen: 24
                          154.210.202.0/24 maxlen: 24
                          154.210.203.0/24 maxlen: 24
                          154.210.226.0/24 maxlen: 24
                          154.210.227.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124277 (0x1e575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  4 11:53:02 2026 GMT
            Not After : Sep 11 11:53:02 2026 GMT
        Subject: CN=6a9ab122-4560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:9f:8c:5d:52:ea:1f:1d:98:60:a1:ce:c1:
                    33:e8:ae:a2:83:e0:34:7d:17:da:86:ea:59:31:c3:
                    c8:a0:c9:81:ae:a8:82:2a:3b:40:e9:2d:a2:83:31:
                    b7:18:f3:93:e5:c1:d4:51:09:cd:c0:52:76:2f:30:
                    76:f9:d4:7c:2f:c1:91:d8:27:63:1a:0e:2d:9a:37:
                    ca:47:b0:74:1c:52:38:f1:c2:79:3a:52:ae:82:8c:
                    da:ea:4c:ec:68:a4:d8:18:6e:f6:cb:58:b2:98:f1:
                    41:8b:4f:74:75:a3:c3:ea:c9:fb:a6:85:45:f5:4b:
                    1b:ce:34:8a:7c:6a:f3:f9:c5:1a:53:d0:92:68:4e:
                    8c:2e:8b:f4:e6:55:c0:fd:f2:2e:ae:43:86:75:43:
                    d1:c7:3e:f5:f3:3b:c0:32:02:aa:44:b5:96:17:d0:
                    b2:1e:d8:e2:04:11:4b:54:f8:c2:88:55:5b:b2:b4:
                    03:b2:76:54:32:24:cc:e7:98:6d:f9:b0:8a:ad:e8:
                    c7:f4:a3:d0:de:fc:89:01:3f:2f:39:b3:7e:0c:25:
                    5b:96:b5:5b:a1:30:08:17:4f:74:38:4e:af:1d:ce:
                    ac:50:b2:52:57:7c:36:da:24:9b:99:6d:61:2c:74:
                    5d:30:2c:2a:4b:c9:c2:53:ea:b9:08:cd:e3:49:fd:
                    1a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E2:9E:64:90:F5:FC:28:50:45:F9:03:DC:1B:BC:30:B7:DD:2C:EF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30BD574AA85711F1BDE8B2C3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.22.0/23
                  154.210.197.0/24
                  154.210.202.0/23
                  154.210.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:4a:17:f7:8c:d0:48:e7:af:d9:0f:a8:d1:ce:9c:ef:83:ac:
         b0:58:4f:9d:0e:e5:4c:52:ff:8f:0b:86:d5:ea:62:64:1a:71:
         e4:3c:30:2c:39:a2:69:db:b9:4a:67:de:03:bd:e8:8e:6d:69:
         dc:a6:ee:e7:5e:a4:ae:91:9d:96:dc:17:09:02:cd:43:02:41:
         83:cd:da:57:58:30:4e:10:b4:09:60:b6:e5:bf:7f:d6:1a:28:
         36:42:f4:21:16:36:83:7a:04:e1:0b:f7:5f:1e:a2:ad:fa:c3:
         b6:27:5e:68:31:34:8e:44:8c:b2:52:ea:30:44:e0:40:20:dc:
         54:92:19:0c:4e:52:4f:c0:e9:9e:0a:7e:c6:65:f8:d4:92:c3:
         51:43:cb:d3:ad:98:81:46:de:39:6f:8a:e9:8c:ec:ea:e1:2b:
         22:c7:64:68:70:29:03:7e:1c:b6:4e:bb:5a:8b:9d:95:fe:27:
         3a:7c:db:04:60:ee:d7:32:f2:2d:02:53:11:04:72:1b:69:30:
         0e:02:b9:4c:4f:44:7a:e0:e5:69:6d:73:2a:e2:cf:15:5f:4a:
         20:18:0e:0b:60:e4:dc:f0:dd:6e:17:01:9a:d0:9d:47:b8:d3:
         15:8d:3f:38:06:97:18:fa:97:be:5c:7c:a1:89:3b:5b:68:54:
         fc:00:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----