Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75F80B889D3611F18CF78FA5CE1D38B0.roa
File:                     75F80B889D3611F18CF78FA5CE1D38B0.roa (raw, json)
Hash identifier:          e9akaLEdklBG6n9OcmGvqhIxKrViwwkDMmSUmsXMvKk=
Subject key identifier:   81:32:B6:64:C4:45:5D:E5:19:08:CA:0E:96:84:39:3F:14:4D:98:7E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E159
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75F80B889D3611F18CF78FA5CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 08:01:06 +0000
ROA not before:           Fri 21 Aug 2026 08:01:02 +0000
ROA not after:            Sat 19 Sep 2026 08:01:02 +0000
asID:                     395886
IP address blocks:        154.193.192.0/20 maxlen: 24
                          154.193.208.0/21 maxlen: 24
                          154.193.216.0/21 maxlen: 24
                          154.193.224.0/20 maxlen: 24
                          154.193.240.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123225 (0x1e159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 08:01:02 2026 GMT
            Not After : Sep 19 08:01:02 2026 GMT
        Subject: CN=6a8805c2-dc77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:59:c8:00:43:b4:c5:80:7b:50:57:3f:8c:b8:
                    b3:8a:de:8a:80:ae:01:80:d7:0c:4c:0b:46:b0:e2:
                    88:d4:11:4c:d8:2f:0c:53:0c:40:03:25:6e:53:3a:
                    87:97:63:0b:18:a8:70:8b:ab:91:e4:b2:2f:06:9b:
                    fb:67:7f:b4:b5:28:6b:b3:68:12:f1:fe:5e:e4:c7:
                    dc:06:24:a2:8f:14:25:12:05:80:13:48:f2:7b:cc:
                    01:df:19:f8:25:a7:b0:30:3d:ad:3a:0f:37:41:ff:
                    24:d5:e6:e5:59:59:ae:6b:a8:57:55:e9:7b:78:70:
                    83:9a:f8:9a:fd:df:0b:5f:85:92:cf:46:92:a0:af:
                    82:af:07:b2:45:c0:f3:bc:6f:67:e2:80:45:68:4c:
                    44:5c:93:76:c3:66:d6:7b:84:6a:d4:cd:70:45:55:
                    42:be:8e:8f:c6:9e:94:04:54:f9:3b:e4:1e:db:4b:
                    5b:5e:c9:43:36:c1:7a:85:61:83:57:60:b5:c9:81:
                    13:4c:39:84:5d:11:b5:90:93:d8:6b:92:cb:c7:44:
                    3d:18:fa:c3:46:b2:58:0e:f5:4a:80:cf:90:69:3d:
                    57:96:e1:99:35:ed:2e:7a:ca:1a:97:2e:90:96:d5:
                    51:0a:b6:8f:41:1a:08:b4:b0:ae:9c:fd:d3:73:d9:
                    c1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:32:B6:64:C4:45:5D:E5:19:08:CA:0E:96:84:39:3F:14:4D:98:7E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75F80B889D3611F18CF78FA5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ac:87:b8:d5:e9:f7:a8:6a:e6:1e:77:85:81:f9:9d:c5:1f:00:
         3b:cb:16:5d:f3:d2:d5:03:70:04:4b:be:68:8f:12:18:d4:ab:
         21:64:1f:6c:62:35:85:fb:82:a3:5a:3b:2f:68:cc:3e:a2:80:
         43:11:48:ca:fc:01:d0:97:d0:75:14:6c:7e:96:33:cd:84:82:
         35:fb:d3:f4:d6:07:cd:f9:5d:2d:5c:59:22:8f:70:03:cc:a5:
         7b:ca:0a:b4:61:d3:81:7c:bd:86:a1:5c:04:33:89:4e:64:91:
         53:05:da:db:78:a7:53:9b:d8:de:f0:c1:8c:56:3a:95:68:cf:
         85:dc:e4:bf:86:8d:03:45:2e:d8:98:40:18:cd:0f:47:d0:38:
         10:99:6d:76:cf:54:f6:f4:c1:4d:7a:f1:28:a2:d6:b5:91:f1:
         6c:37:23:e0:64:99:d3:f1:d5:82:d7:8c:dc:a9:f1:9e:fa:e4:
         c1:fc:4f:c3:6d:f2:66:4c:bd:2c:2f:a1:e9:6d:66:92:88:23:
         5c:33:1a:8a:0f:72:b7:e7:40:97:6e:c9:0d:9d:4b:b8:26:9b:
         04:78:68:53:d5:fd:17:a9:8b:8e:f2:9b:b5:90:96:7b:6f:0a:
         16:d4:b8:78:07:06:f6:0d:74:de:a4:a6:ba:c6:21:4c:94:b7:
         0d:27:80:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----