Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6766FC685F2011EC938150DD5A40D577.roa
File:                     6766FC685F2011EC938150DD5A40D577.roa (raw, json)
Hash identifier:          8x8V7zWGxT8XmowPyt4SGXjHAeTQz+gX7Cjd4xzFQlM=
Subject key identifier:   96:CA:16:F8:F8:8E:9F:27:5D:06:B4:03:AF:FB:A3:A9:84:3A:58:A6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       13FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6766FC685F2011EC938150DD5A40D577.roa
Signing time:             Fri 17 Dec 2021 10:02:12 +0000
ROA not before:           Fri 17 Dec 2021 10:02:08 +0000
ROA not after:            Sun 30 Oct 2022 10:02:08 +0000
asID:                     399626
IP address blocks:        154.206.64.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5118 (0x13fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 17 10:02:08 2021 GMT
            Not After : Oct 30 10:02:08 2022 GMT
        Subject: CN=61bc6024-ec51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:75:15:07:a3:86:17:07:ae:d1:97:cf:e9:
                    15:f5:6d:17:30:98:cf:b5:e7:89:a9:d6:c1:56:11:
                    78:3b:c6:b1:b5:de:af:b1:e3:e6:fc:d9:3c:5b:6a:
                    9b:fc:af:19:42:9a:03:46:bd:f8:09:a9:26:bd:7b:
                    56:56:5b:30:61:c7:6c:b5:c2:11:18:39:f7:73:69:
                    d0:20:09:68:41:62:be:38:b4:92:56:30:8c:b1:25:
                    fb:01:32:b7:38:5b:53:ee:4a:b4:74:ae:76:5a:6e:
                    31:18:d9:3c:a7:ed:43:14:56:66:5d:7b:87:d1:39:
                    eb:7b:b7:70:f0:32:82:92:e5:b6:0f:f3:f8:0e:14:
                    dc:37:6a:85:19:37:6f:b4:43:e9:4f:1b:5f:06:ce:
                    5d:33:4d:e6:ef:5f:15:74:3f:a6:89:fe:6e:90:1c:
                    e8:d6:ef:13:69:dc:8b:b6:93:e3:9e:06:6e:04:8d:
                    e6:75:14:63:52:d7:b0:fa:54:33:1b:b0:ec:7a:38:
                    69:a3:99:d0:28:22:70:94:05:4b:9b:4c:7c:2c:62:
                    97:7a:44:4a:7c:c5:e8:f2:f3:76:4c:fe:e0:66:1f:
                    f4:16:a9:7a:3c:8f:e0:4a:3d:69:dc:39:d9:1f:55:
                    46:55:3c:0d:a1:95:a3:09:48:9b:83:4d:77:b1:38:
                    d5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CA:16:F8:F8:8E:9F:27:5D:06:B4:03:AF:FB:A3:A9:84:3A:58:A6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6766FC685F2011EC938150DD5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7c:6c:e5:ff:35:d9:3d:22:70:03:c4:89:0c:ad:79:b0:3d:1a:
         c9:98:55:56:1d:69:2f:a1:7e:8c:a7:93:20:2a:9a:ed:4e:1a:
         7f:e0:f8:15:bb:82:4c:e4:16:a8:c7:31:75:41:df:8c:1c:30:
         b7:7d:6e:9c:24:66:dc:1f:a5:66:06:fa:c1:2d:c4:10:4b:d4:
         ae:be:c4:db:39:0d:00:0f:f9:5f:4f:99:8f:52:f4:d3:f5:f1:
         3f:ba:54:42:f5:1f:20:5d:d2:4e:c0:2b:20:41:d8:d4:c0:15:
         5f:1b:ec:04:e1:03:3f:e0:af:43:61:60:61:db:48:8b:94:e4:
         57:fc:f9:29:be:fd:44:7d:7a:3f:f9:cc:5c:1b:0f:3a:fb:c8:
         de:f5:fb:c9:6d:e6:51:9b:68:81:39:6f:6e:6d:81:35:9a:c2:
         d2:5c:92:9a:25:2a:33:f8:4e:4c:49:68:c8:ad:e2:4a:a4:1d:
         68:6a:b7:ca:56:e6:0c:10:fb:2e:ad:06:8f:92:01:43:df:ca:
         11:4d:9d:6e:c6:d3:98:d9:6a:4a:62:db:ce:40:26:85:b2:d4:
         7c:c9:31:9d:40:c0:aa:f6:09:eb:1a:2f:49:80:49:4b:0c:0c:
         a9:0f:26:56:a6:12:00:e3:93:19:7c:f1:40:2c:5f:f9:79:d5:
         07:0b:5f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----