Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09808602BC9811F1B571DCEBCE1D38B0.roa
File:                     09808602BC9811F1B571DCEBCE1D38B0.roa (raw, json)
Hash identifier:          CNXL6LfOsfx3BW6DZUTzJgcKB4oeciqeD4/ShHcSBpU=
Subject key identifier:   03:46:F7:DF:AF:6B:00:D5:EB:20:63:A9:E3:BB:69:07:61:19:2B:BD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D994
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09808602BC9811F1B571DCEBCE1D38B0.roa
Signing time:             Wed 30 Sep 2026 06:27:41 +0000
ROA not before:           Wed 30 Sep 2026 06:27:37 +0000
ROA not after:            Sat 10 Oct 2026 06:27:37 +0000
asID:                     131274
IP address blocks:        156.225.40.0/21 maxlen: 24
                          156.225.56.0/21 maxlen: 24
                          156.225.184.0/21 maxlen: 24
                          156.246.96.0/19 maxlen: 24
                          156.247.8.0/21 maxlen: 24
                          156.247.24.0/21 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121236 (0x1d994)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 30 06:27:37 2026 GMT
            Not After : Oct 10 06:27:37 2026 GMT
        Subject: CN=6abcabdd-e9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f1:db:01:16:78:0d:c9:86:dd:16:fc:a6:42:
                    a7:e6:d5:3c:99:c8:84:ef:e8:ae:bf:96:0f:b0:aa:
                    07:83:7b:81:c1:a7:b0:65:d3:25:12:a0:5b:88:19:
                    56:ca:34:35:20:66:3e:c5:b8:8d:13:80:3e:84:2a:
                    c4:76:51:7f:f3:f8:74:f9:dd:5d:e2:46:47:fd:84:
                    ed:1c:7d:3c:f6:25:75:24:72:d6:9d:55:d1:e0:9a:
                    42:c4:04:1f:a8:c6:4f:3a:ed:19:4b:44:da:ac:cb:
                    70:1e:26:79:6d:80:6e:91:8e:0e:7e:39:a2:56:e1:
                    a3:46:f0:c9:b8:ed:13:23:2f:5b:8c:ad:c8:50:d4:
                    50:55:6e:5e:17:a3:d1:0e:7e:03:97:fc:3f:5c:c8:
                    fc:bf:ca:26:2b:18:a9:01:0e:4b:78:61:67:9e:8d:
                    2f:b3:bb:c5:43:9a:9d:7e:ee:0e:f9:a3:89:2c:1d:
                    44:8a:82:1f:70:e1:ae:b7:a0:58:45:dd:0e:e4:8a:
                    87:bd:ae:9e:67:f9:65:e7:56:03:0d:61:ce:fb:55:
                    33:48:a4:a5:77:cc:62:55:66:6d:15:18:9e:96:62:
                    f6:4e:ae:9d:d9:af:a4:26:ae:00:eb:00:e9:fd:b2:
                    80:1c:cb:07:71:26:65:47:1b:65:76:ed:49:59:96:
                    0e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:46:F7:DF:AF:6B:00:D5:EB:20:63:A9:E3:BB:69:07:61:19:2B:BD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09808602BC9811F1B571DCEBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.40.0/21
                  156.225.56.0/21
                  156.225.184.0/21
                  156.246.96.0/19
                  156.247.8.0/21
                  156.247.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:4f:f3:91:bd:84:a7:d1:30:ec:f7:4c:57:c4:21:41:c5:2b:
         a2:89:48:77:39:41:b8:c9:c5:10:08:8b:40:67:36:95:b2:11:
         17:38:06:94:86:93:6f:b4:da:d9:a6:c0:02:27:b0:43:94:4d:
         2e:a6:6c:a8:6c:21:f4:1d:87:04:11:6e:b6:4a:6d:4a:11:63:
         35:68:20:df:4d:db:90:6a:4c:36:0f:e8:d8:1f:a7:8b:ca:ae:
         22:07:94:fc:67:32:d0:bf:15:15:aa:6b:4a:e2:57:eb:c9:d2:
         7f:35:c2:43:0f:c9:4c:ec:a6:21:7f:9d:bf:34:d9:9b:42:a9:
         43:1e:bf:d9:04:17:d8:49:23:72:47:40:e4:8f:39:8e:00:77:
         63:1f:09:e9:06:17:2b:eb:0d:84:c1:a3:bc:a6:c8:06:02:89:
         aa:45:a0:35:39:f9:fb:4b:ab:f6:34:7a:0e:8b:5f:15:99:f2:
         d2:74:cd:30:c4:92:6e:c2:0e:94:8e:c3:d5:a0:ae:af:34:27:
         a8:45:72:56:eb:2b:05:d3:1b:78:a3:01:b4:b4:75:f3:34:27:
         4a:ea:f9:23:29:cd:8a:dd:bc:ac:6f:26:43:2b:10:b4:0a:df:
         8b:f6:e6:63:e2:04:f3:9c:e1:1a:c0:1e:67:a3:24:e7:ca:71:
         01:8e:4c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----