Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/969C4840614011ECB86D739F5A40D577.roa
File:                     969C4840614011ECB86D739F5A40D577.roa (raw, json)
Hash identifier:          wKI2dw3TJoKrxfTqnXX8i1l/o8uq1vcpL379O65q9+k=
Subject key identifier:   8A:FA:21:36:37:7C:D5:54:8D:7D:10:8D:34:D7:F3:4F:34:73:0B:EF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1405
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/969C4840614011ECB86D739F5A40D577.roa
Signing time:             Mon 20 Dec 2021 02:57:37 +0000
ROA not before:           Mon 20 Dec 2021 02:57:31 +0000
ROA not after:            Sun 30 Oct 2022 02:57:31 +0000
asID:                     399626
IP address blocks:        154.206.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5125 (0x1405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 20 02:57:31 2021 GMT
            Not After : Oct 30 02:57:31 2022 GMT
        Subject: CN=61bff121-1ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e7:1e:90:18:43:ff:d3:14:2c:0c:ba:4e:d4:
                    11:2b:93:9e:b0:4b:3e:e0:ad:04:f9:3c:ad:08:bd:
                    84:e1:77:15:2d:d4:47:e7:b7:99:f2:95:04:b4:5e:
                    81:0f:b1:c3:ce:d4:80:82:c2:3f:a7:82:1a:e8:35:
                    7b:87:f6:16:f8:d9:60:d4:f3:30:44:78:76:08:f6:
                    b3:9a:b2:f3:0f:0d:7a:80:01:8c:a6:1a:31:54:5e:
                    d2:df:1b:19:b6:23:0c:9b:2c:d0:51:b8:23:89:e2:
                    4a:1b:a5:14:2d:c6:84:fa:66:2d:5b:f5:59:69:68:
                    0d:45:e3:14:14:24:03:e7:65:3a:d3:e4:af:98:34:
                    ce:64:d7:b1:1f:a3:b5:35:d1:e0:d0:53:c9:82:fe:
                    0a:ef:3b:70:8e:5f:0e:1e:7e:9e:d6:1a:5b:2b:17:
                    69:92:41:35:12:fa:f1:f9:7f:ce:32:40:19:5c:75:
                    2f:cd:42:d1:2f:5c:a6:7f:c0:a7:f4:6a:5b:da:59:
                    b2:44:f4:65:db:72:95:e5:af:b5:06:d5:c4:44:46:
                    4c:cb:22:e4:d1:b5:4e:cd:fb:ca:19:8a:ef:21:a0:
                    91:c9:ed:fb:37:16:19:45:7b:82:11:09:39:4f:15:
                    0c:f0:82:e3:3c:94:56:ce:2e:84:21:d4:c6:74:c3:
                    63:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FA:21:36:37:7C:D5:54:8D:7D:10:8D:34:D7:F3:4F:34:73:0B:EF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/969C4840614011ECB86D739F5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8f:8e:43:71:c3:9d:25:9b:e0:9e:42:a8:39:64:c1:01:97:6b:
         7b:56:ef:35:98:30:d7:01:58:ab:da:82:c1:7f:72:fd:17:e8:
         0b:1c:24:75:36:ec:09:d2:58:fb:4f:2d:20:c1:23:1b:e1:80:
         04:3c:be:16:03:18:b0:32:8f:73:29:5a:f9:ba:d5:9d:86:05:
         1b:94:c5:5f:75:4f:9c:2a:d6:bd:42:9f:c4:3b:f9:09:b7:fd:
         9f:6c:d9:98:f0:76:fd:87:9b:ce:6f:28:5d:07:eb:3c:cd:53:
         a7:ea:81:7f:50:a2:a7:ac:73:d7:a6:57:d4:8f:49:f2:32:42:
         ec:c3:44:12:75:fd:1d:ea:bc:36:1a:35:f9:81:81:af:1e:50:
         77:f0:12:03:f3:35:00:08:3a:dc:b3:ad:fb:d0:d9:f7:2b:a0:
         ae:6d:5c:f7:df:0e:a1:89:c5:f9:60:49:04:c3:4b:b1:51:d7:
         9c:95:ea:8b:c8:6e:49:fd:f6:8d:00:0d:47:73:ae:90:ca:2b:
         0a:cf:60:cb:9d:e6:f7:ab:5a:9a:cf:e7:a2:8c:fa:87:7f:ed:
         f1:54:fc:5d:e7:0a:e4:5a:15:08:37:18:cc:93:e5:bc:99:ef:
         55:75:a9:8f:cd:a8:b2:17:08:a5:1b:0d:6c:df:d2:99:5a:e0:
         bb:3f:0e:e7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFAUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTEyMjAwMjU3MzFaFw0yMjEwMzAwMjU3MzFaMBgxFjAU
BgNVBAMMDTYxYmZmMTIxLTFhZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDh5x6QGEP/0xQsDLpO1BErk56wSz7grQT5PK0IvYThdxUt1Efnt5nylQS0
XoEPscPO1ICCwj+nghroNXuH9hb42WDU8zBEeHYI9rOasvMPDXqAAYymGjFUXtLf
Gxm2IwybLNBRuCOJ4kobpRQtxoT6Zi1b9VlpaA1F4xQUJAPnZTrT5K+YNM5k17Ef
o7U10eDQU8mC/grvO3COXw4efp7WGlsrF2mSQTUS+vH5f84yQBlcdS/NQtEvXKZ/
wKf0alvaWbJE9GXbcpXlr7UG1cRERkzLIuTRtU7N+8oZiu8hoJHJ7fs3FhlFe4IR
CTlPFQzwguM8lFbOLoQh1MZ0w2OJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUivoh
Njd81VSNfRCNNNfzTzRzC+8wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4Lzk2OUM0ODQwNjE0MDExRUNCODZENzM5RjVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAaazkAwDQYJKoZIhvcNAQEL
BQADggEBAI+OQ3HDnSWb4J5CqDlkwQGXa3tW7zWYMNcBWKvagsF/cv0X6AscJHU2
7AnSWPtPLSDBIxvhgAQ8vhYDGLAyj3MpWvm61Z2GBRuUxV91T5wq1r1Cn8Q7+Qm3
/Z9s2Zjwdv2Hm85vKF0H6zzNU6fqgX9Qoqesc9emV9SPSfIyQuzDRBJ1/R3qvDYa
NfmBga8eUHfwEgPzNQAIOtyzrfvQ2fcroK5tXPffDqGJxflgSQTDS7FR15yV6ovI
bkn99o0ADUdzrpDKKwrPYMud5verWprP56KM+od/7fFU/F3nCuRaFQg3GMyT5byZ
71V1qY/NqLIXCKUbDWzf0pla4Ls/Duc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:09 2023 by rpki-client on console-ams.rpki-client.org