Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE8BC074BD0111EBBE716947F8AEA228.roa
File:                     DE8BC074BD0111EBBE716947F8AEA228.roa (raw, json)
Hash identifier:          d+oA/XqINN3Kvf92IEHBJ+UWctm53eLM7co3tkm/NWw=
Subject key identifier:   96:39:C9:E6:D3:E2:E6:E7:1D:0F:9E:D7:9D:2F:79:6C:D8:1D:BF:93
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0697
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE8BC074BD0111EBBE716947F8AEA228.roa
Signing time:             Tue 25 May 2021 02:35:29 +0000
ROA not before:           Tue 25 May 2021 02:35:23 +0000
ROA not after:            Mon 25 Jul 2022 02:35:23 +0000
asID:                     399674
IP address blocks:        154.94.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687 (0x697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 25 02:35:23 2021 GMT
            Not After : Jul 25 02:35:23 2022 GMT
        Subject: CN=60ac6271-c592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f7:aa:9f:b9:90:33:64:2f:14:95:c1:de:c3:
                    04:8b:69:d3:38:4d:6c:83:1b:f4:b7:94:ee:ad:dd:
                    67:66:60:fe:8b:36:39:3e:eb:04:28:48:d4:14:01:
                    4b:85:a7:64:33:16:b2:41:c6:f2:46:1f:c0:28:d1:
                    6c:31:08:93:a8:7d:c6:d3:24:49:a5:d9:bf:4a:1c:
                    0d:e1:7e:16:c9:b9:30:6d:52:3c:b9:6d:76:d5:fe:
                    05:6b:67:56:f3:07:6e:e2:a5:73:39:fb:9e:a7:e9:
                    63:90:da:53:89:69:9b:90:7f:4c:63:c8:cf:f3:ba:
                    4b:f5:6f:bf:22:fd:d9:0b:36:6e:d7:5c:d9:a7:03:
                    40:94:60:67:68:dc:31:b1:ae:b6:bf:3e:cd:fc:76:
                    9f:a0:a6:92:a3:9e:c0:1d:52:c5:a9:b3:99:10:33:
                    11:d7:ec:d6:04:81:0c:fe:0b:b1:a6:fb:f8:f5:61:
                    27:2e:34:c1:9f:a2:9a:61:5d:3e:24:99:7e:62:32:
                    f8:4d:a9:48:90:0e:6d:2d:2e:21:5a:3f:75:d1:80:
                    45:a4:aa:15:6d:50:15:75:fa:c5:27:60:4a:f7:e7:
                    e4:0e:8a:e9:16:e0:b2:ca:cb:55:e6:64:ee:64:e8:
                    27:90:69:e2:af:b8:1b:03:0a:8e:15:d3:7c:fd:15:
                    87:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:39:C9:E6:D3:E2:E6:E7:1D:0F:9E:D7:9D:2F:79:6C:D8:1D:BF:93
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE8BC074BD0111EBBE716947F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         38:36:b2:56:3b:46:50:60:ae:68:3b:46:b9:f5:5f:c9:1a:84:
         bb:ce:a7:3c:03:45:a7:2a:06:df:cc:48:3c:26:90:21:0e:4c:
         28:fe:81:f2:bc:35:04:c5:c2:92:e8:27:ee:79:43:35:6d:39:
         8e:86:5c:70:ea:69:0f:ec:f0:9b:4c:fc:5f:fb:a7:b8:1d:a8:
         96:65:a7:39:d4:cd:9a:c5:dd:f7:ef:bc:c3:0b:48:fd:9a:7a:
         09:0f:92:f2:b7:0d:32:0f:3e:19:70:d0:a3:c4:48:4a:3a:d2:
         7d:6d:e6:7a:c5:4b:b8:ca:5e:84:58:7b:d5:6d:fa:2a:b4:f4:
         1d:96:c2:f8:d7:b5:56:b3:1a:ce:89:7f:49:6f:e9:f2:3f:ce:
         99:ed:c9:62:6b:aa:e5:d3:3b:a6:f8:7f:aa:24:23:2d:13:f6:
         ba:76:9e:9d:3d:24:7b:3e:bb:61:b4:c1:b0:a3:9a:79:26:74:
         db:1c:cc:b3:40:df:7d:71:1d:b5:25:92:fc:84:12:92:e3:62:
         f2:d8:bb:ec:d1:1b:bf:61:d0:fa:2e:f8:ee:27:cf:f3:ec:2c:
         84:11:99:6a:21:9f:9b:4a:94:5f:2c:32:8d:22:4a:bd:b4:cd:
         32:8f:57:21:a4:4c:6f:ef:77:5c:fc:53:7e:c7:dd:3f:d5:0f:
         b0:ac:28:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----