Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6CF693CA85711F1BDEDD3C8CE1D38B0.roa
File:                     F6CF693CA85711F1BDEDD3C8CE1D38B0.roa (raw, json)
Hash identifier:          c+l4Qm1fjqo7AcCMJZfzGPmTM57+sNTs45V6Ct1NhUk=
Subject key identifier:   61:11:F2:E8:15:36:0C:B6:69:29:A9:64:8E:CA:E6:26:DD:27:62:AC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E577
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6CF693CA85711F1BDEDD3C8CE1D38B0.roa
Signing time:             Fri 04 Sep 2026 11:58:39 +0000
ROA not before:           Fri 04 Sep 2026 11:58:34 +0000
ROA not after:            Fri 11 Sep 2026 11:58:34 +0000
asID:                     46071
IP address blocks:        154.209.6.0/24 maxlen: 24
                          154.209.7.0/24 maxlen: 24
                          154.210.203.0/24 maxlen: 24
                          154.210.204.0/24 maxlen: 24
                          154.210.205.0/24 maxlen: 24
                          154.210.222.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124279 (0x1e577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  4 11:58:34 2026 GMT
            Not After : Sep 11 11:58:34 2026 GMT
        Subject: CN=6a9ab26e-58bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:a1:80:79:f1:4f:8a:ae:c8:75:b9:b4:d6:
                    fd:a7:3e:ac:c7:c7:85:5b:5b:98:61:f8:8a:cc:d5:
                    09:57:0b:6d:12:f7:f1:62:db:59:55:8c:c8:a1:3a:
                    14:b4:13:13:98:8d:2b:48:7a:38:53:a4:41:30:82:
                    77:12:5d:fd:f4:e1:bf:5a:60:1b:b4:62:ab:43:2a:
                    6d:d4:60:a5:a5:f8:f1:25:f0:a7:71:88:32:93:89:
                    e8:87:c5:ed:19:93:8b:c7:9b:1c:f1:a9:30:2d:b3:
                    cd:aa:0e:34:7c:af:e1:6e:a1:5c:9d:66:1d:3d:17:
                    9c:3b:31:23:0a:31:09:2e:10:c8:21:b7:57:88:2f:
                    87:67:df:df:a2:19:ca:e9:3a:6d:62:ac:ca:d3:6c:
                    65:7e:4d:2d:12:7b:81:98:53:dc:26:db:6a:c7:79:
                    e9:0a:96:25:27:f9:66:b5:20:51:da:63:d8:4b:99:
                    23:af:97:46:a5:c0:e1:0b:0a:45:3a:6d:8b:9d:ce:
                    88:99:d9:a5:28:19:62:73:2c:36:e5:12:c7:6c:9c:
                    79:d4:20:9c:09:3b:f6:8e:6a:17:29:14:65:23:a5:
                    24:31:d8:ca:f1:40:76:38:1e:10:40:d7:b7:d2:8b:
                    86:ea:ac:c9:9d:35:4e:c0:7e:77:aa:d5:70:dd:0f:
                    53:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:11:F2:E8:15:36:0C:B6:69:29:A9:64:8E:CA:E6:26:DD:27:62:AC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6CF693CA85711F1BDEDD3C8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.6.0/23
                  154.210.203.0-154.210.205.255
                  154.210.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:e2:71:69:10:07:bb:ce:86:7a:21:c9:cb:00:02:1e:44:85:
         d7:9c:3f:0f:2e:fb:07:1a:3f:5b:16:cd:17:67:30:ca:cc:81:
         78:5f:98:d8:ca:5c:cc:6b:66:1a:82:95:1e:9e:af:fa:8f:c9:
         ff:73:69:ca:a2:1b:1b:74:1f:c1:1b:5f:e3:fd:ec:49:e3:91:
         4b:5d:58:80:78:83:d7:3e:f2:49:62:3d:db:5d:0d:02:78:d5:
         65:cf:b3:d9:d7:f7:c2:ad:8a:07:74:16:23:98:4a:54:a0:1c:
         77:99:b9:52:de:81:bd:8e:d1:0a:c5:ed:dc:89:f8:e7:b7:13:
         39:cb:3a:68:a0:c6:de:94:5f:e4:2e:47:78:17:bb:ef:e6:9e:
         97:c2:16:84:77:c0:bd:8e:98:22:f0:8f:0c:b6:95:b6:d5:36:
         b4:d0:b2:7a:38:10:2c:f9:ef:28:b0:a3:43:b7:8c:6e:49:fd:
         8b:9e:8e:b4:41:e0:4e:a2:65:0f:5f:ab:01:de:bb:ec:3e:ef:
         24:39:36:ea:3f:72:cc:b6:b5:57:fb:1f:a3:e2:57:25:c8:7b:
         bb:65:25:6e:87:c7:b2:a0:6f:d7:01:20:d1:39:0d:5c:b3:bb:
         95:a5:d2:86:20:48:ad:2e:da:a7:8b:aa:83:09:09:ba:21:17:
         c1:0a:03:74
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAeV3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTA0MTE1ODM0WhcNMjYwOTExMTE1ODM0WjAYMRYw
FAYDVQQDEw02YTlhYjI2ZS01OGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwk2hgHnxT4quyHW5tNb9pz6sx8eFW1uYYfiKzNUJVwttEvfxYttZVYzI
oToUtBMTmI0rSHo4U6RBMIJ3El399OG/WmAbtGKrQypt1GClpfjxJfCncYgyk4no
h8XtGZOLx5sc8akwLbPNqg40fK/hbqFcnWYdPRecOzEjCjEJLhDIIbdXiC+HZ9/f
ohnK6TptYqzK02xlfk0tEnuBmFPcJttqx3npCpYlJ/lmtSBR2mPYS5kjr5dGpcDh
CwpFOm2Lnc6ImdmlKBlicyw25RLHbJx51CCcCTv2jmoXKRRlI6UkMdjK8UB2OB4Q
QNe30ouG6qzJnTVOwH53qtVw3Q9TJwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFGER
8ugVNgy2aSmpZI7K5ibdJ2KsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNkNGNjkzQ0E4NTcxMUYxQkRFREQzQzhDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBmtEGMAwDBACa0ssDBAGa
0swDBACa0t4wDQYJKoZIhvcNAQELBQADggEBAE3icWkQB7vOhnohycsAAh5Ehdec
Pw8u+wcaP1sWzRdnMMrMgXhfmNjKXMxrZhqClR6er/qPyf9zacqiGxt0H8EbX+P9
7EnjkUtdWIB4g9c+8kliPdtdDQJ41WXPs9nX98Ktigd0FiOYSlSgHHeZuVLegb2O
0QrF7dyJ+Oe3EznLOmigxt6UX+QuR3gXu+/mnpfCFoR3wL2OmCLwjwy2lbbVNrTQ
sno4ECz57yiwo0O3jG5J/YuejrRB4E6iZQ9fqwHeu+w+7yQ5Nuo/csy2tVf7H6Pi
VyXIe7tlJW6Hx7Kgb9cBINE5DVyzu5Wl0oYgSK0u2qeLqoMJCbohF8EKA3Q=
-----END CERTIFICATE-----