Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92C518A2EF6F11EB94923E54D8A014CE.roa
File:                     92C518A2EF6F11EB94923E54D8A014CE.roa (raw, json)
Hash identifier:          JqRbH19Wk63YCbYlv9bnLUn6ziqQP+gbNfhnNh1YUOA=
Subject key identifier:   D9:33:56:AC:57:5E:53:92:15:4D:D8:2A:3B:47:9A:FF:A5:3A:47:10
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       084D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92C518A2EF6F11EB94923E54D8A014CE.roa
Signing time:             Wed 28 Jul 2021 06:47:04 +0000
ROA not before:           Wed 28 Jul 2021 06:47:00 +0000
ROA not after:            Wed 28 Sep 2022 06:47:00 +0000
asID:                     7018
IP address blocks:        154.198.16.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2125 (0x84d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 28 06:47:00 2021 GMT
            Not After : Sep 28 06:47:00 2022 GMT
        Subject: CN=6100fd68-16b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:4e:e8:15:9f:c7:af:c4:2a:5f:ba:c7:4d:
                    e3:78:f3:67:77:89:0e:3e:5b:e6:12:47:c2:6b:08:
                    44:0d:bb:50:de:80:48:ff:b1:39:71:13:1f:e4:38:
                    3b:d0:5d:e3:61:bc:69:0f:5e:c0:7b:ee:18:55:d3:
                    b0:a8:ea:3c:39:d6:78:bd:7e:91:fa:f3:1a:a5:d0:
                    5c:db:7c:8d:5f:7d:88:f0:39:05:82:d4:d7:d2:e5:
                    4c:b2:c5:6f:e8:ff:9b:82:e7:a4:93:41:ea:bf:fe:
                    da:1b:82:18:da:d9:1d:34:84:34:02:53:8c:2c:c3:
                    80:82:4e:c5:12:45:cb:d8:8b:b7:ec:52:7d:94:5e:
                    25:5a:ec:36:85:06:83:03:e9:b0:4f:22:43:e3:9b:
                    24:35:ae:80:51:78:08:6c:38:4f:b5:6c:c2:3a:52:
                    32:c2:22:cf:9c:82:75:40:47:86:e4:58:53:49:26:
                    95:d3:ec:3b:7d:20:2a:80:c1:47:a6:06:26:07:1a:
                    ca:85:f4:88:06:35:2c:42:c0:8c:21:3a:70:61:4f:
                    e2:f9:d4:ad:ef:d0:d5:4c:e5:ad:b9:3b:d7:99:eb:
                    39:77:42:ce:3f:db:f6:41:a5:08:52:f6:e7:15:c7:
                    e1:1b:6b:60:71:8e:fe:f2:ba:10:32:ac:13:a4:da:
                    9c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:33:56:AC:57:5E:53:92:15:4D:D8:2A:3B:47:9A:FF:A5:3A:47:10
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92C518A2EF6F11EB94923E54D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:91:aa:cf:78:73:38:17:50:50:7b:f1:f3:b5:be:10:72:62:
         f9:9c:98:f7:16:29:98:c3:e4:8b:13:e8:3c:0b:e6:c7:da:2d:
         f2:88:bd:63:33:10:dc:36:3a:1e:13:0e:21:28:96:c9:b2:a9:
         fb:36:d9:16:14:29:73:40:61:fc:41:92:fb:8f:5d:77:19:d6:
         a2:30:19:c0:66:0c:c9:b0:8d:a5:5f:f3:ae:70:f4:2f:74:dd:
         0d:72:a3:fa:a3:16:c4:34:35:ea:91:a5:ef:bc:ed:20:4a:e1:
         cc:72:a7:6e:64:7f:17:9d:7d:cc:6c:48:1a:f3:34:15:7a:a2:
         e4:7e:b3:99:81:9a:51:c5:02:5b:38:77:f1:15:d0:ce:ad:5e:
         48:2f:b7:50:e2:54:c8:d6:23:0c:3d:5e:06:1d:0e:43:61:76:
         cb:5f:52:91:09:bd:72:4f:99:24:ef:85:2e:50:7b:f4:7a:40:
         bc:34:21:61:ba:95:85:bc:1b:21:c3:b7:29:fd:5a:b4:ce:e6:
         4e:6d:1e:22:fc:a4:30:ed:bc:44:05:02:3b:3f:4f:71:e5:6f:
         69:53:a2:1b:cf:6d:be:35:2b:5a:63:9b:bc:2f:ca:ee:2a:a8:
         60:43:40:7b:cf:1f:c2:9c:a7:82:6a:ac:59:6f:2b:24:84:65:
         b1:d5:bb:6a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCE0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTA3MjgwNjQ3MDBaFw0yMjA5MjgwNjQ3MDBaMBgxFjAU
BgNVBAMMDTYxMDBmZDY4LTE2YjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCztk7oFZ/Hr8QqX7rHTeN482d3iQ4+W+YSR8JrCEQNu1DegEj/sTlxEx/k
ODvQXeNhvGkPXsB77hhV07Co6jw51ni9fpH68xql0FzbfI1ffYjwOQWC1NfS5Uyy
xW/o/5uC56STQeq//tobghja2R00hDQCU4wsw4CCTsUSRcvYi7fsUn2UXiVa7DaF
BoMD6bBPIkPjmyQ1roBReAhsOE+1bMI6UjLCIs+cgnVAR4bkWFNJJpXT7Dt9ICqA
wUemBiYHGsqF9IgGNSxCwIwhOnBhT+L51K3v0NVM5a25O9eZ6zl3Qs4/2/ZBpQhS
9ucVx+Eba2Bxjv7yuhAyrBOk2px1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU2TNW
rFdeU5IVTdgqO0ea/6U6RxAwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzkyQzUxOEEyRUY2RjExRUI5NDkyM0U1NEQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASaxhAwDQYJKoZIhvcNAQEL
BQADggEBACqRqs94czgXUFB78fO1vhByYvmcmPcWKZjD5IsT6DwL5sfaLfKIvWMz
ENw2Oh4TDiEolsmyqfs22RYUKXNAYfxBkvuPXXcZ1qIwGcBmDMmwjaVf865w9C90
3Q1yo/qjFsQ0NeqRpe+87SBK4cxyp25kfxedfcxsSBrzNBV6ouR+s5mBmlHFAls4
d/EV0M6tXkgvt1DiVMjWIww9XgYdDkNhdstfUpEJvXJPmSTvhS5Qe/R6QLw0IWG6
lYW8GyHDtyn9WrTO5k5tHiL8pDDtvEQFAjs/T3Hlb2lTohvPbb41K1pjm7wvyu4q
qGBDQHvPH8Kcp4JqrFlvKySEZbHVu2o=
-----END CERTIFICATE-----