Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/488F1E2AB97411F1B31C90F1CE1D38B0.roa
File:                     488F1E2AB97411F1B31C90F1CE1D38B0.roa (raw, json)
Hash identifier:          9wbn9TkkNdOvEDDFqlTvfSdH2WpX0mlVgiSZw2heY4I=
Subject key identifier:   78:F3:59:68:9F:2A:75:21:1A:56:B8:15:43:0F:AE:96:90:E9:AA:31
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D8BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/488F1E2AB97411F1B31C90F1CE1D38B0.roa
Signing time:             Sat 26 Sep 2026 06:34:11 +0000
ROA not before:           Sat 26 Sep 2026 06:34:07 +0000
ROA not after:            Sun 18 Oct 2026 06:34:07 +0000
asID:                     139613
IP address blocks:        45.194.85.0/24 maxlen: 24
                          45.195.60.0/24 maxlen: 24
                          45.195.62.0/24 maxlen: 24
                          45.195.192.0/24 maxlen: 24
                          45.195.196.0/24 maxlen: 24
                          45.195.197.0/24 maxlen: 24
                          45.197.1.0/24 maxlen: 24
                          45.197.2.0/24 maxlen: 24
                          45.197.4.0/24 maxlen: 24
                          45.197.5.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121022 (0x1d8be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 06:34:07 2026 GMT
            Not After : Oct 18 06:34:07 2026 GMT
        Subject: CN=6ab76763-16ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:7b:cf:94:bd:4c:10:12:cc:6d:cc:27:83:
                    fc:8f:07:66:09:77:a3:4e:4e:15:71:ea:68:63:be:
                    13:49:01:7e:dc:57:a1:14:57:e7:d8:47:46:2f:61:
                    43:57:15:55:d2:e8:57:e8:78:c5:e6:70:98:b2:39:
                    21:73:a0:04:77:87:34:1c:77:48:5a:43:a4:f6:37:
                    98:c4:68:f0:17:9e:11:71:20:a3:73:44:5c:94:99:
                    95:10:74:47:1a:5d:5f:cb:99:89:7b:ad:f7:fb:dd:
                    34:88:c1:fa:e2:a9:11:10:d0:2f:29:61:10:7c:33:
                    d5:f4:cd:7e:a6:69:95:a5:3d:bf:ac:90:07:b6:a0:
                    b0:9c:52:69:f3:cb:0f:f1:25:52:f9:bd:2c:8b:6a:
                    33:93:e1:fb:58:33:3a:bd:4a:ae:73:61:08:0e:19:
                    1c:c8:7e:f4:3d:92:f4:cc:83:3e:87:41:24:13:6e:
                    04:5c:28:5d:38:d3:24:74:97:f4:9f:35:aa:98:0a:
                    6d:e6:d8:7a:4a:76:4b:b8:fb:21:cd:ed:28:58:12:
                    79:85:8f:8c:fa:0e:43:15:c1:39:d4:22:3d:3e:02:
                    cd:90:6d:d8:d5:e9:d7:7a:c8:ca:18:1e:f9:57:44:
                    b7:08:98:13:3e:20:74:d9:3e:56:af:99:f4:47:15:
                    be:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F3:59:68:9F:2A:75:21:1A:56:B8:15:43:0F:AE:96:90:E9:AA:31
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/488F1E2AB97411F1B31C90F1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.85.0/24
                  45.195.60.0/24
                  45.195.62.0/24
                  45.195.192.0/24
                  45.195.196.0/23
                  45.197.1.0-45.197.2.255
                  45.197.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:30:2c:75:5a:dd:31:ba:90:2f:e3:bf:94:17:25:e1:f4:23:
         15:20:e8:a2:20:f7:b6:60:85:b1:af:0c:ee:6b:eb:74:91:04:
         10:cd:f5:72:f0:50:7e:aa:00:9b:5e:44:3f:08:82:db:e5:7b:
         c1:cc:c5:80:cc:f5:a3:9a:23:50:2b:51:44:e2:ca:f6:8a:36:
         b7:4a:b1:00:b3:6b:6b:81:ed:39:36:40:fb:77:52:eb:39:d9:
         1d:c6:84:dc:3a:b5:56:e7:a9:e5:45:da:15:22:d4:0f:00:75:
         e0:95:19:83:6b:d2:3f:e1:ec:22:8f:36:46:a3:86:b2:a4:74:
         7b:9e:07:83:53:9a:e9:6a:37:ee:54:f5:e8:cb:8b:a1:bd:17:
         14:36:2b:29:6d:c5:be:e9:77:91:b8:37:b7:a0:e0:28:5b:b3:
         11:e0:c1:d7:cc:04:f9:18:02:d8:35:cb:3b:ce:25:e5:98:ba:
         ab:73:80:6e:f1:b7:c9:71:f8:3a:f6:91:c2:64:28:ad:d5:b5:
         2d:e2:60:6a:1a:f5:2b:53:98:ef:03:18:f3:4e:ad:8d:61:3d:
         e8:67:6e:68:e2:8d:a4:ff:84:ff:e5:82:60:29:a3:a0:0e:23:
         85:16:48:ab:31:c4:40:7a:a5:f0:98:fd:ed:b5:ec:28:e0:4d:
         01:c9:b7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----