Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AF91F08BDD311F19163CCE4CE1D38B0.roa
File:                     5AF91F08BDD311F19163CCE4CE1D38B0.roa (raw, json)
Hash identifier:          9l3VRXExtp/nXyV7XUEJWXqXKKErnyT09oEi3rSGeI8=
Subject key identifier:   B0:B4:EF:41:D2:FA:49:6C:3B:C1:C2:65:76:4A:B7:9C:FF:C3:03:05
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D9C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AF91F08BDD311F19163CCE4CE1D38B0.roa
Signing time:             Thu 01 Oct 2026 20:04:49 +0000
ROA not before:           Thu 01 Oct 2026 20:04:44 +0000
ROA not after:            Sat 24 Oct 2026 20:04:44 +0000
asID:                     154566
IP address blocks:        45.194.14.0/23 maxlen: 24
                          45.194.25.0/24 maxlen: 24
                          45.194.26.0/24 maxlen: 24
                          45.194.80.0/23 maxlen: 24
                          45.194.88.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121289 (0x1d9c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  1 20:04:44 2026 GMT
            Not After : Oct 24 20:04:44 2026 GMT
        Subject: CN=6abebce1-ba18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:26:1d:3e:a2:66:86:b6:c0:64:df:28:70:
                    82:1e:4f:3f:1c:03:e9:c9:96:c9:9f:2a:52:05:e7:
                    cb:34:c9:a3:25:78:70:eb:f4:0f:64:27:56:b4:db:
                    c4:de:c6:d4:c7:ec:e5:18:14:0c:f0:1b:92:b0:84:
                    71:01:c6:30:79:0e:50:54:be:13:21:d1:f7:ec:2a:
                    fb:2e:28:04:a3:8d:02:07:7a:ea:eb:e6:08:1b:86:
                    8f:12:7b:c5:6b:eb:3d:fb:2f:95:2f:71:ff:a8:cd:
                    11:62:92:cc:c9:d3:27:40:1a:c6:bc:00:90:2d:59:
                    6a:d9:41:e2:6a:eb:c4:ac:22:98:47:c1:1a:f6:68:
                    c5:39:a0:cc:f9:c6:4e:c5:31:47:47:bf:3f:ab:67:
                    d7:00:71:8c:45:fa:2c:fc:4d:8a:55:0c:d6:e6:0c:
                    c8:13:ae:48:eb:e8:cc:54:36:07:24:ce:73:f1:85:
                    3a:f0:ec:28:ff:a6:51:7e:cd:45:01:b2:d9:94:35:
                    a3:45:1f:8a:56:24:75:64:5c:ef:4f:b3:a2:76:a2:
                    64:d0:08:8d:a2:57:5f:62:79:94:e2:57:02:ea:24:
                    bf:ca:4c:a0:1d:0a:f2:68:b6:f3:07:68:84:b7:7c:
                    fb:9e:09:52:5f:58:f1:a0:dc:13:0f:5e:1b:a6:96:
                    b3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B4:EF:41:D2:FA:49:6C:3B:C1:C2:65:76:4A:B7:9C:FF:C3:03:05
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AF91F08BDD311F19163CCE4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.14.0/23
                  45.194.25.0-45.194.26.255
                  45.194.80.0/23
                  45.194.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:d2:87:1f:b8:28:9f:fd:ad:e6:4a:e0:3b:48:09:fb:ec:86:
         65:80:54:2c:1c:63:6f:9f:28:fd:5b:54:9d:ab:ee:0d:a9:90:
         97:99:f5:b6:3b:c2:81:7f:25:9e:01:94:3c:51:6a:8d:04:19:
         58:33:38:da:93:63:a5:a0:34:fd:9c:b4:bd:17:90:56:54:a9:
         c7:a7:9b:00:4a:5b:04:31:0e:3c:1e:57:e5:55:5c:fd:b9:01:
         45:42:8c:02:b0:38:7b:6f:96:f9:97:ed:83:bd:c2:d7:7e:23:
         81:b5:9b:e5:e0:f2:7e:a9:c7:9a:cf:d1:1d:f2:86:42:82:90:
         49:3d:fd:c6:0b:6f:cb:8e:c2:cb:56:41:3b:fd:bb:d6:b5:3c:
         cb:b9:14:78:ae:27:e2:61:02:d1:87:9c:94:f9:eb:96:0a:80:
         64:78:87:e8:ca:34:d7:af:b6:c4:84:02:e7:3b:1f:96:c9:a0:
         0d:9d:83:6f:83:3a:ab:2c:45:df:54:b4:2c:48:db:9d:53:24:
         9a:41:58:c5:96:35:5b:67:cb:53:b7:47:45:13:38:c7:1e:1b:
         ce:c5:cb:91:69:b1:bb:0e:02:08:ba:48:27:be:41:17:a0:b6:
         9a:ae:8c:ec:76:3a:33:57:a7:1c:ce:57:94:f1:4c:80:fb:fb:
         7d:cc:d7:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----