Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86260128E57F11EB8846442DF8AEA228.roa
File:                     86260128E57F11EB8846442DF8AEA228.roa (raw, json)
Hash identifier:          MmR1wQcPYRqeQWK7sDuUR4rS4ZJ55k0rBLic+Xg9WDk=
Subject key identifier:   0B:9E:D6:B0:F0:15:04:90:12:B9:33:B8:1C:A4:A2:80:9C:A3:0C:34
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       07E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86260128E57F11EB8846442DF8AEA228.roa
Signing time:             Thu 15 Jul 2021 15:15:44 +0000
ROA not before:           Thu 15 Jul 2021 15:15:41 +0000
ROA not after:            Sat 09 Jul 2022 15:15:41 +0000
asID:                     397630
IP address blocks:        154.202.113.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2018 (0x7e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 15 15:15:41 2021 GMT
            Not After : Jul  9 15:15:41 2022 GMT
        Subject: CN=60f05120-fbaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:2f:ce:01:d4:f5:f5:57:1c:4c:40:70:e5:
                    95:1c:a1:2e:28:f4:a0:aa:23:dc:0d:55:84:3c:c2:
                    1a:e4:1e:c5:6d:a5:7a:4b:d3:91:e3:9c:d6:f8:78:
                    96:41:c1:81:72:57:fb:77:22:78:c9:6d:1d:44:72:
                    55:58:cb:d7:9d:b8:5e:af:89:53:9d:02:fe:17:2e:
                    0f:2c:12:2b:c3:87:6b:71:03:49:73:31:92:ca:68:
                    c6:b9:b3:c6:d9:c9:68:b2:8d:0f:98:35:0c:a2:f7:
                    d5:ee:ac:58:fa:af:c4:39:32:a6:a7:12:2b:51:d5:
                    88:92:a2:a4:ed:93:27:19:9d:73:66:89:07:34:f3:
                    02:89:b3:5a:f2:46:da:60:ee:5d:35:c9:09:87:8a:
                    ed:17:3c:54:1d:87:4f:37:05:fc:68:01:a5:19:76:
                    bd:31:94:39:7d:f1:f0:74:97:b3:de:08:52:79:ca:
                    36:3b:57:2f:17:7a:f1:c5:74:96:02:38:84:67:da:
                    90:43:82:c9:25:d9:68:3a:22:9d:72:c1:57:24:96:
                    2d:67:59:7c:26:61:3f:aa:d2:41:cf:cc:59:e1:97:
                    f9:16:d5:f4:f0:0f:c8:bd:61:3f:69:3b:c0:7c:6a:
                    bd:4b:3d:e8:79:a6:b7:2b:2b:ae:97:03:5e:6d:20:
                    7c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9E:D6:B0:F0:15:04:90:12:B9:33:B8:1C:A4:A2:80:9C:A3:0C:34
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86260128E57F11EB8846442DF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:18:4e:a0:89:37:e7:e8:be:eb:2e:f6:92:b1:51:99:e4:82:
         5b:c3:20:a2:0a:5e:34:72:3f:6c:b1:ee:7f:47:00:ab:06:26:
         75:9e:dd:0c:42:f3:50:b6:f3:25:ee:31:2c:df:ab:83:2d:f8:
         6e:c7:69:15:45:e1:0b:19:d4:0e:1c:46:6c:a2:bd:58:00:53:
         f9:be:da:6d:01:a9:cb:2e:29:5a:d9:05:9a:90:7a:56:91:e0:
         21:3b:9e:fc:69:4a:ef:aa:10:8f:71:c5:a2:a7:b6:3e:91:3d:
         b7:9c:5f:b8:12:2f:5d:65:56:73:26:a2:dd:c3:ff:55:8d:92:
         42:26:6f:0d:cc:93:f9:a8:e0:a5:81:1f:2c:80:c9:f2:98:c1:
         59:5f:2c:a9:23:df:f3:e6:57:bf:f8:8e:c6:c0:e8:57:18:31:
         88:44:1d:a8:62:5b:f0:04:f4:67:23:13:46:76:c8:e6:e5:ea:
         3d:a1:b3:15:52:6f:ab:02:c6:25:74:de:8d:62:ff:ff:56:0b:
         3b:4a:9c:55:03:08:52:e7:68:ac:e6:f2:0c:66:9f:20:d4:e4:
         bf:08:f6:06:c1:00:82:74:63:48:18:7f:1d:fa:ca:c1:8e:06:
         9e:00:b8:b2:f0:c5:9d:af:72:1d:88:3f:61:04:22:d7:d4:1a:
         d7:bf:85:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:11 2023 by rpki-client on console-fra.rpki-client.org