Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF3C1CF6488911ECA690F23DD8A014CE.roa
File:                     AF3C1CF6488911ECA690F23DD8A014CE.roa (raw, json)
Hash identifier:          eTj867Xams/t1JYzGNLdhcez4BGPmv1c2WBBdjCZyj8=
Subject key identifier:   7A:AE:57:9F:3D:C2:AE:21:F2:F8:F0:EC:AA:54:6D:91:08:85:E3:58
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0D8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF3C1CF6488911ECA690F23DD8A014CE.roa
Signing time:             Thu 18 Nov 2021 16:07:53 +0000
ROA not before:           Fri 19 Nov 2021 16:07:49 +0000
ROA not after:            Sat 19 Nov 2022 16:07:49 +0000
asID:                     139879
IP address blocks:        154.80.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3466 (0xd8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 19 16:07:49 2021 GMT
            Not After : Nov 19 16:07:49 2022 GMT
        Subject: CN=61967a59-bdef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:49:37:c6:8d:08:c8:1f:9d:b8:2c:cf:f2:5c:
                    f1:ab:d7:c2:f4:b0:4c:69:f6:bb:c2:13:db:17:97:
                    fa:15:93:71:cb:39:f1:45:25:54:c0:9e:63:9e:49:
                    10:0e:c3:8f:f2:1f:17:71:02:1b:76:8d:c2:25:67:
                    e1:48:5f:96:44:bc:8b:66:bb:34:76:cb:de:25:cb:
                    2c:8a:f1:8d:95:36:8b:3e:0a:46:9d:0b:94:47:6d:
                    f3:cb:b8:3e:db:0e:3d:01:bf:07:c8:52:5e:e2:bf:
                    eb:2e:da:e8:0b:af:76:83:55:44:a8:5a:1e:71:b3:
                    20:a9:78:d0:7a:db:fe:8d:ee:09:1a:9b:db:3d:83:
                    9b:b7:b2:f2:f8:d1:ae:a5:39:2a:0b:db:27:11:3b:
                    77:1c:05:45:6d:01:9e:e5:e3:5f:35:73:c3:2e:ff:
                    ac:fd:51:25:4d:0e:21:3a:8f:57:a5:ec:a2:b3:ea:
                    cb:07:8a:4a:d7:7f:e7:69:b3:aa:1c:6b:76:78:8f:
                    8b:5f:ae:c7:77:42:89:6b:c9:3f:97:2c:12:fb:ab:
                    cd:bb:75:6b:90:5f:50:c7:9b:ca:50:4b:24:b4:98:
                    49:f8:0b:4f:dd:6a:25:ed:04:88:af:69:69:b9:97:
                    0e:96:38:f2:d4:07:9b:fb:c7:2a:a4:26:23:0b:c7:
                    20:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AE:57:9F:3D:C2:AE:21:F2:F8:F0:EC:AA:54:6D:91:08:85:E3:58
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF3C1CF6488911ECA690F23DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:01:64:da:6f:63:d0:91:72:4a:2e:9b:1b:48:61:1a:16:ad:
         c7:c1:eb:12:f0:a0:85:32:d1:ae:c0:42:eb:07:86:68:0f:ff:
         28:3c:86:2a:01:47:6b:ed:c8:cf:49:8d:60:9d:71:57:2c:83:
         4d:2c:e1:a6:35:51:71:5e:80:83:7c:a9:d7:f6:55:d7:ee:c9:
         8e:42:27:9a:31:4a:61:41:e9:9b:0e:ad:27:ba:8b:07:e4:66:
         d1:3c:37:32:99:8d:d0:03:1b:58:02:aa:aa:dd:e9:16:84:40:
         77:9a:fa:49:19:9f:71:a3:17:26:74:1b:97:ce:10:c2:0a:47:
         29:5d:a1:ee:4c:69:88:49:78:cb:ac:89:22:75:e7:f9:17:aa:
         b5:91:57:a5:fd:22:0a:65:3c:9d:a7:e0:e2:34:2e:58:0d:55:
         99:e4:d4:9f:47:35:47:e4:25:39:6c:8c:1f:02:9f:e7:d1:fd:
         d9:bb:69:aa:ff:eb:71:f3:6b:ff:47:f6:f5:62:47:8a:a2:ae:
         7d:63:9e:4b:be:d8:5a:ad:1d:4b:73:7d:98:23:93:5c:01:7d:
         9e:ab:d6:93:40:7b:11:e8:f7:c8:79:dd:27:e3:ea:75:51:25:
         4d:10:35:1e:f8:54:40:05:a2:63:18:d8:58:14:19:2c:e0:ef:
         d9:23:a7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----