Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5B7599AA85A11F1BDF0FFD8CE1D38B0.roa
File:                     E5B7599AA85A11F1BDF0FFD8CE1D38B0.roa (raw, json)
Hash identifier:          YCMbxYXlmoflvjuGxx4a2OgYSiFxLoByDscjxHFdN3g=
Subject key identifier:   EC:58:32:57:CD:DF:2A:31:D2:C3:E6:B3:44:BF:D1:55:AC:53:F5:53
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E580
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5B7599AA85A11F1BDF0FFD8CE1D38B0.roa
Signing time:             Fri 04 Sep 2026 12:19:38 +0000
ROA not before:           Fri 04 Sep 2026 12:19:34 +0000
ROA not after:            Fri 11 Sep 2026 12:19:34 +0000
asID:                     46071
IP address blocks:        154.210.160.0/24 maxlen: 24
                          154.210.169.0/24 maxlen: 24
                          154.210.171.0/24 maxlen: 24
                          154.210.178.0/24 maxlen: 24
                          154.210.179.0/24 maxlen: 24
                          154.210.180.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124288 (0x1e580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  4 12:19:34 2026 GMT
            Not After : Sep 11 12:19:34 2026 GMT
        Subject: CN=6a9ab75a-b763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:01:7a:3d:0c:f2:92:ba:2a:ce:fc:00:75:d8:
                    64:4c:d3:82:b4:49:e1:fd:a5:18:c4:64:08:a8:a0:
                    62:f3:fe:57:0d:b8:d9:9f:18:e4:20:3f:f5:f0:e6:
                    dc:a5:19:06:c6:5a:cb:e4:fe:b5:d5:4d:5f:93:1a:
                    0c:8d:6c:7f:15:91:66:0d:6e:9f:6d:42:6d:5e:1f:
                    b5:e6:95:65:2d:45:9e:e7:23:eb:01:25:37:c0:20:
                    56:b1:91:1d:79:35:0a:8e:1f:26:fa:e8:c5:fe:55:
                    f4:3e:d6:f3:a6:71:66:8f:b1:d9:08:bd:bc:4e:6f:
                    9a:e0:23:70:09:e1:97:53:22:31:83:f7:55:da:57:
                    24:4e:f8:b6:c6:e4:1b:3d:c2:ff:5b:2b:e0:59:bd:
                    c3:9e:d5:f2:89:b4:fc:f6:78:00:ba:33:86:5b:45:
                    66:07:22:b7:98:65:c2:3c:f5:f4:f3:f5:f2:43:f7:
                    0e:ff:6d:0d:23:b7:d5:d3:b3:b1:25:b6:bf:0b:06:
                    9b:6f:5d:b6:0f:cc:72:9a:04:c2:d7:62:ba:d6:ce:
                    43:3d:ec:47:e3:5d:8b:9a:50:34:84:98:f4:d8:0c:
                    e0:bf:f1:50:09:51:bd:55:29:e1:bb:41:58:d1:cf:
                    0d:45:d3:d4:42:95:75:72:d1:2b:23:c9:4b:05:32:
                    f8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:58:32:57:CD:DF:2A:31:D2:C3:E6:B3:44:BF:D1:55:AC:53:F5:53
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5B7599AA85A11F1BDF0FFD8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.160.0/24
                  154.210.169.0/24
                  154.210.171.0/24
                  154.210.178.0-154.210.180.255

    Signature Algorithm: sha256WithRSAEncryption
         90:87:3d:d0:d5:07:d1:4d:f0:31:33:4c:dc:58:74:28:1e:bc:
         2a:9e:69:47:fe:d0:e0:5a:de:d9:a1:a5:4d:76:6c:2a:7a:e1:
         11:74:7d:a2:f7:1d:8c:4d:49:ea:87:e2:67:e2:77:af:ef:be:
         31:65:dd:06:1c:04:15:44:aa:eb:79:6c:d5:a9:36:ec:f4:14:
         21:c5:f0:40:5c:d2:87:b6:d4:4b:0a:12:83:b0:af:33:86:9d:
         10:69:46:48:7e:63:0f:cd:ce:63:e3:0d:e9:36:3c:be:02:da:
         84:6a:de:f8:71:77:2c:8d:19:3b:52:7a:08:86:b3:d6:81:e0:
         1d:2c:85:26:8a:8f:04:c0:a2:33:57:a4:cd:d1:54:8d:a8:15:
         d1:a0:a6:33:8f:f8:53:40:28:d2:92:ad:f3:9b:3d:be:f2:c9:
         94:a6:79:b8:2f:65:70:0d:06:b7:e3:73:0b:17:c1:15:42:d2:
         69:31:44:22:4f:b2:bf:a4:7a:00:bb:09:37:81:be:c5:73:95:
         3b:89:98:c7:f7:4b:e7:df:94:6c:ee:8e:9d:21:32:92:d9:1a:
         ed:f7:b7:7d:90:3b:ed:00:7e:f9:f0:de:ee:72:d7:22:4e:04:
         cd:46:83:44:b1:8d:ab:0f:93:d4:39:80:83:86:f4:21:c2:14:
         9b:79:d0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----