Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CA12BD4A85A11F19253DFD8CE1D38B0.roa
File:                     7CA12BD4A85A11F19253DFD8CE1D38B0.roa (raw, json)
Hash identifier:          e+uOcn4P1A9ShhyDKNgpp1ge+sxvhK0FdxZBeesiyxI=
Subject key identifier:   78:BB:E7:28:C3:EF:2D:68:9F:B1:1A:CE:B3:FC:07:53:F5:E5:EF:E9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E57D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CA12BD4A85A11F19253DFD8CE1D38B0.roa
Signing time:             Fri 04 Sep 2026 12:16:42 +0000
ROA not before:           Fri 04 Sep 2026 12:16:38 +0000
ROA not after:            Fri 11 Sep 2026 12:16:38 +0000
asID:                     18229
IP address blocks:        154.209.6.0/24 maxlen: 24
                          154.209.7.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124285 (0x1e57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  4 12:16:38 2026 GMT
            Not After : Sep 11 12:16:38 2026 GMT
        Subject: CN=6a9ab6aa-7be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:09:80:17:75:85:8c:73:95:cc:b1:3e:b0:18:
                    45:36:95:ac:86:cd:81:82:6e:d9:b9:20:10:ae:65:
                    b2:d2:88:fd:f8:c1:e9:74:1b:cc:34:cc:0b:d9:01:
                    f4:71:cc:49:38:2f:5e:17:41:70:a5:32:27:a3:58:
                    32:99:45:c5:1c:83:02:11:06:08:f9:d8:32:2b:33:
                    5a:84:b5:a2:5e:00:dd:d5:40:50:8c:81:59:ed:c1:
                    10:87:b5:4b:be:0e:71:49:b3:ca:76:3f:b5:b9:d5:
                    ad:94:9f:43:0c:88:2a:d5:80:c8:44:24:9b:0a:98:
                    0f:9b:bc:98:a3:c3:16:c1:91:2e:49:53:32:41:61:
                    07:f5:9d:59:56:fa:9a:5e:20:02:ba:cd:55:94:e6:
                    66:6d:10:68:cb:b6:a1:f6:da:00:f4:b7:a9:9b:21:
                    d0:67:90:f8:a3:b3:a8:7f:bc:a3:3d:78:8f:8c:c4:
                    91:01:e7:8a:73:72:2a:d4:e0:3e:66:63:ae:e5:23:
                    a4:ef:6d:47:44:e6:93:c5:ed:96:20:a8:0c:4d:34:
                    38:8f:f1:2f:07:d8:a9:80:e5:c8:94:c6:40:a0:8c:
                    e9:ad:77:cf:25:0d:e3:dd:b1:a0:d7:8e:2e:59:56:
                    8d:0d:d5:53:17:eb:56:d3:d4:11:bb:d2:37:44:4f:
                    29:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BB:E7:28:C3:EF:2D:68:9F:B1:1A:CE:B3:FC:07:53:F5:E5:EF:E9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CA12BD4A85A11F19253DFD8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:1d:93:b0:1a:43:1f:5e:97:3a:2a:f5:84:5c:49:9b:b9:f3:
         89:43:66:f9:96:a7:c3:8e:a3:77:d7:20:34:69:5d:b8:9d:82:
         ee:71:2c:c5:9e:fd:b7:9f:35:94:5a:93:8d:0e:94:9f:a5:37:
         82:e2:ea:8a:87:ed:0d:88:c4:b8:e2:19:db:58:c7:e4:7f:a3:
         f4:03:32:23:d5:90:54:b1:be:72:04:9d:14:8f:4a:ce:8f:10:
         65:ef:4f:e7:e7:14:69:29:41:c1:f0:5d:e2:09:4b:68:e7:fd:
         a9:f0:ac:bb:b2:7e:91:4c:41:92:30:24:bc:ca:16:61:44:9b:
         c5:51:a3:6c:b6:4c:44:b9:ea:3d:3e:37:4a:86:f9:5d:0d:aa:
         3b:08:46:df:d1:c6:da:10:aa:a4:1d:9f:bf:9e:a4:41:c4:97:
         01:00:a6:f2:12:12:5e:9e:85:56:3c:f7:e5:f2:8a:7c:b5:68:
         4c:2a:d6:37:2e:50:2d:5d:5b:76:78:5f:1e:e6:71:2d:47:de:
         63:68:37:90:e9:f3:18:76:5f:7c:af:0a:01:9b:a9:df:2b:29:
         bc:2a:bc:17:23:c7:c9:5f:32:e1:33:b1:1a:9d:ff:29:e5:b9:
         f9:d0:85:d9:fc:41:7c:6f:e1:90:26:4a:88:ff:66:91:46:84:
         2f:a8:01:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----