Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F04032AC3B611F1834FE6F3CE1D38B0.roa
File:                     2F04032AC3B611F1834FE6F3CE1D38B0.roa (raw, json)
Hash identifier:          2QyacjQgNCl7/05lcp4voRRIbefcJgUMK71tPoe7MSQ=
Subject key identifier:   D0:BD:71:FD:8A:C6:77:BC:4D:7A:17:16:ED:5D:2B:BF:B2:B8:05:85
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F04032AC3B611F1834FE6F3CE1D38B0.roa
Signing time:             Fri 09 Oct 2026 07:51:07 +0000
ROA not before:           Fri 09 Oct 2026 07:51:02 +0000
ROA not after:            Mon 19 Oct 2026 07:51:02 +0000
asID:                     40115
IP address blocks:        45.194.16.0/21 maxlen: 24
                          45.194.16.0/22 maxlen: 24
                          45.194.16.0/23 maxlen: 24
                          45.194.16.0/24 maxlen: 24
                          45.194.17.0/24 maxlen: 24
                          45.194.18.0/23 maxlen: 24
                          45.194.18.0/24 maxlen: 24
                          45.194.19.0/24 maxlen: 24
                          45.194.20.0/22 maxlen: 24
                          45.194.20.0/23 maxlen: 24
                          45.194.20.0/24 maxlen: 24
                          45.194.21.0/24 maxlen: 24
                          45.194.22.0/23 maxlen: 24
                          45.194.22.0/24 maxlen: 24
                          45.194.23.0/24 maxlen: 24
                          45.207.8.0/24 maxlen: 24
                          45.207.9.0/24 maxlen: 24
                          45.207.10.0/24 maxlen: 24
                          45.207.11.0/24 maxlen: 24
                          45.207.12.0/24 maxlen: 24
                          45.207.13.0/24 maxlen: 24
                          45.207.14.0/24 maxlen: 24
                          45.207.15.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121865 (0x1dc09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  9 07:51:02 2026 GMT
            Not After : Oct 19 07:51:02 2026 GMT
        Subject: CN=6ac89ceb-8425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:bb:ff:b7:d6:fc:bb:b7:27:69:cf:a5:f5:
                    52:aa:57:d2:de:98:4d:c4:97:2a:ea:8f:ec:b6:f7:
                    71:20:f8:5c:e2:82:a8:59:bf:63:c8:34:95:db:1b:
                    53:85:a9:d1:0a:41:0a:c2:18:1a:4f:23:6c:51:99:
                    6a:17:85:8b:c7:ee:5f:cc:be:9b:2c:3d:ff:c2:8d:
                    33:fb:b1:3d:e6:58:12:ca:27:0f:88:c5:50:2f:78:
                    93:56:3b:2f:a0:15:df:65:6b:35:49:b8:98:40:17:
                    7d:ce:bb:65:22:2e:df:84:36:b7:5b:99:94:f8:9e:
                    1b:30:c2:70:29:ab:77:36:21:b8:4d:30:d8:fe:2a:
                    4a:18:e2:db:db:c7:8f:95:4a:d1:46:28:b9:37:d2:
                    9f:70:5b:d5:b9:11:6f:09:81:1a:03:6c:2c:04:87:
                    a7:e2:0d:a6:ee:7e:6f:e9:ea:79:6e:7f:d0:eb:05:
                    e7:8c:bd:31:65:74:c2:a3:28:e8:d9:e2:c6:50:9a:
                    31:0f:2a:c8:2b:a1:e3:ec:5d:08:49:39:2e:dc:03:
                    ae:2e:05:77:f9:77:10:da:7a:5a:2e:c4:71:56:3e:
                    ae:40:d2:ae:6d:01:1f:57:ea:17:59:d5:77:ab:b1:
                    2b:83:af:be:33:6e:73:0c:92:59:0b:02:bb:19:b3:
                    e8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BD:71:FD:8A:C6:77:BC:4D:7A:17:16:ED:5D:2B:BF:B2:B8:05:85
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F04032AC3B611F1834FE6F3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.16.0/21
                  45.207.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2d:1d:d9:f4:83:05:1a:b8:f7:a9:fa:5b:8f:31:2f:9f:8a:bf:
         ab:76:ac:43:56:2c:4b:07:22:0b:4c:b0:20:c3:9d:f6:c4:84:
         a7:5a:cb:23:e2:86:77:d2:21:90:fa:3b:21:48:22:34:be:74:
         e3:f0:92:96:31:31:11:41:94:cc:c3:26:49:53:8f:d4:7c:87:
         c9:5c:75:bf:d9:59:46:6f:62:57:cb:86:d9:0b:47:8a:77:7f:
         fe:72:5f:75:80:31:04:e5:f4:9f:91:44:0e:5d:15:72:3e:63:
         7a:f4:92:6c:29:d4:1d:a0:05:62:73:d5:ca:fc:31:ba:15:58:
         67:f1:ac:81:40:94:ad:da:8a:fd:2d:8d:e0:61:d7:a9:e6:80:
         28:b0:a0:b0:c5:1a:4e:da:e8:59:a9:25:9b:f5:41:6c:c1:24:
         46:1e:9e:a4:03:f1:24:f1:e0:07:d6:9a:44:62:50:fa:b3:fe:
         5c:05:fe:ef:31:7f:41:06:04:73:e8:f3:e8:c5:1c:7a:ed:4d:
         24:73:b3:a7:73:04:a4:db:3f:91:4f:fc:d3:a3:2f:b0:27:4c:
         ad:55:2d:e4:63:e0:0f:88:0c:ae:c8:9f:82:a3:e6:c2:22:28:
         47:43:36:a6:ba:e4:5f:68:2f:b4:fb:8c:28:72:36:ec:ea:40:
         0b:22:4c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----