Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D480991CF82211EC927C55AEF1222468.roa
File:                     D480991CF82211EC927C55AEF1222468.roa (raw, json)
Hash identifier:          oYlouuF6u2FPSA5WFyXLkNnUFkihoJSushk0T6H8tTU=
Subject key identifier:   CD:06:19:21:F5:18:B8:F5:E6:4B:70:45:0B:6D:8F:5F:27:C9:80:34
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       170E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D480991CF82211EC927C55AEF1222468.roa
Signing time:             Thu 30 Jun 2022 03:15:02 +0000
ROA not before:           Thu 30 Jun 2022 03:14:58 +0000
ROA not after:            Fri 30 Dec 2022 03:14:58 +0000
asID:                     328608
IP address blocks:        154.205.160.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5902 (0x170e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 30 03:14:58 2022 GMT
            Not After : Dec 30 03:14:58 2022 GMT
        Subject: CN=62bd1536-7139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:30:43:26:f8:34:b0:9e:f8:8c:e5:85:21:63:
                    47:79:2a:70:b3:30:16:6d:e4:99:42:23:69:bd:fa:
                    7b:3f:12:eb:c7:08:7c:d3:8b:d5:b4:44:87:6a:b1:
                    bb:15:68:0c:d6:b2:54:1f:5e:e9:17:c8:f0:35:44:
                    28:cb:5f:70:73:7a:fc:71:b1:f8:30:f9:03:eb:3c:
                    fe:b3:33:17:53:0f:ab:34:f6:f8:87:7f:ef:6b:ae:
                    78:63:40:6d:ea:dd:69:cd:0f:f3:8d:84:d0:57:e7:
                    06:0a:74:7f:1c:2a:cc:bb:9d:07:21:4e:5d:e2:81:
                    64:be:bb:c2:10:40:2d:f2:1f:d0:96:a9:89:e2:ef:
                    30:ab:32:5d:ed:b4:ae:65:e8:05:77:a7:f1:cd:f2:
                    44:01:3b:26:23:84:b2:ac:37:4d:8b:37:5f:b1:1a:
                    8e:7b:ac:41:ea:ee:cb:f6:96:ea:f9:3a:fb:56:bf:
                    fa:2e:60:47:65:76:87:41:bd:78:75:5a:9d:4c:85:
                    88:f4:be:cf:3f:49:64:02:37:ce:64:7d:f6:63:ef:
                    5b:f4:fc:db:85:fa:fd:40:2e:b0:92:e8:62:f2:3a:
                    8b:c4:94:9d:68:05:d2:c3:b1:88:2e:73:86:57:bf:
                    8e:c1:28:e5:20:e1:63:07:01:8b:f3:e0:a6:46:94:
                    bc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:06:19:21:F5:18:B8:F5:E6:4B:70:45:0B:6D:8F:5F:27:C9:80:34
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D480991CF82211EC927C55AEF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:d1:3b:de:fa:47:c5:95:05:4c:a6:b1:b7:a9:df:a2:09:57:
         77:44:09:75:e4:2d:e4:60:5f:b4:6a:a1:05:ab:97:33:f7:93:
         60:5a:6e:cd:5c:2c:44:95:a8:01:2b:c6:cf:52:10:d0:b4:28:
         48:22:49:5f:a1:7b:bc:75:50:63:b9:06:fc:73:a9:1a:93:46:
         b5:e1:dd:98:3a:78:f8:a7:99:e7:26:82:6d:60:3b:4b:ea:88:
         56:03:f3:5a:42:2c:86:7e:ea:c5:f3:9f:03:60:4b:3d:65:b4:
         03:ad:2b:3b:3f:b9:8d:4e:1e:60:45:8f:e1:ef:7d:30:c4:87:
         c8:78:a1:d5:65:d8:c3:3d:29:c9:db:56:d8:52:f4:f3:88:76:
         f5:b3:67:25:8d:8b:4b:0a:1d:ca:fb:ed:52:25:7b:65:dc:33:
         ee:f7:2f:3f:c7:3a:de:82:48:57:03:72:3b:71:2f:03:d9:77:
         79:36:9f:bf:75:91:76:1c:39:e9:6e:de:79:0a:a9:f8:d7:f8:
         67:51:a9:0c:44:3b:dd:e5:d6:fe:1f:7e:62:de:d9:7b:b0:95:
         00:72:60:fa:18:51:cc:55:c0:26:24:10:7a:1f:60:70:b6:c5:
         c6:f8:d7:d4:f7:32:18:92:40:31:b4:ea:eb:3b:ae:8b:38:82:
         6a:87:0c:f2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFw4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA2MzAwMzE0NThaFw0yMjEyMzAwMzE0NThaMBgxFjAU
BgNVBAMMDTYyYmQxNTM2LTcxMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdMEMm+DSwnviM5YUhY0d5KnCzMBZt5JlCI2m9+ns/EuvHCHzTi9W0RIdq
sbsVaAzWslQfXukXyPA1RCjLX3Bzevxxsfgw+QPrPP6zMxdTD6s09viHf+9rrnhj
QG3q3WnND/ONhNBX5wYKdH8cKsy7nQchTl3igWS+u8IQQC3yH9CWqYni7zCrMl3t
tK5l6AV3p/HN8kQBOyYjhLKsN02LN1+xGo57rEHq7sv2lur5OvtWv/ouYEdldodB
vXh1Wp1MhYj0vs8/SWQCN85kffZj71v0/NuF+v1ALrCS6GLyOovElJ1oBdLDsYgu
c4ZXv47BKOUg4WMHAYvz4KZGlLxlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUzQYZ
IfUYuPXmS3BFC22PXyfJgDQwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0Q0ODA5OTFDRjgyMjExRUM5MjdDNTVBRUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASazaAwDQYJKoZIhvcNAQEL
BQADggEBAIXRO976R8WVBUymsbep36IJV3dECXXkLeRgX7RqoQWrlzP3k2Babs1c
LESVqAErxs9SENC0KEgiSV+he7x1UGO5BvxzqRqTRrXh3Zg6ePinmecmgm1gO0vq
iFYD81pCLIZ+6sXznwNgSz1ltAOtKzs/uY1OHmBFj+HvfTDEh8h4odVl2MM9Kcnb
VthS9POIdvWzZyWNi0sKHcr77VIle2XcM+73Lz/HOt6CSFcDcjtxLwPZd3k2n791
kXYcOelu3nkKqfjX+GdRqQxEO93l1v4ffmLe2XuwlQByYPoYUcxVwCYkEHofYHC2
xcb419T3MhiSQDG06us7ros4gmqHDPI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:12 2023 by rpki-client on console-ams.rpki-client.org