Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/628D0EF0B97311F1A7986FEBCE1D38B0.roa
File:                     628D0EF0B97311F1A7986FEBCE1D38B0.roa (raw, json)
Hash identifier:          8bCwVOc0Q6emZoP+gvUT1zGYHnuLxyFH2lP11qUh3fQ=
Subject key identifier:   94:AB:F2:04:6D:4F:23:61:E7:F3:2A:F2:84:BF:AD:C8:1F:31:89:E7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D8BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/628D0EF0B97311F1A7986FEBCE1D38B0.roa
Signing time:             Sat 26 Sep 2026 06:27:45 +0000
ROA not before:           Sat 26 Sep 2026 06:27:41 +0000
ROA not after:            Sun 18 Oct 2026 06:27:41 +0000
asID:                     139613
IP address blocks:        156.229.128.0/19 maxlen: 24
                          156.239.160.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121020 (0x1d8bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 06:27:41 2026 GMT
            Not After : Oct 18 06:27:41 2026 GMT
        Subject: CN=6ab765e1-c281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:35:4e:50:9c:82:68:cf:b9:64:5e:6d:88:93:
                    ef:a7:c9:e2:5b:ec:ec:4e:6d:69:26:35:82:a8:d4:
                    55:82:a6:cb:6a:06:f8:e2:6a:59:24:ec:ad:a8:c4:
                    68:c1:bd:49:36:d9:a3:73:6d:b8:9d:2f:ff:39:71:
                    e9:1e:ee:e1:18:70:2e:f8:ac:27:ab:b1:79:46:2d:
                    ef:56:0f:ce:79:0d:0a:96:e3:4f:fa:61:52:8c:36:
                    1f:30:15:b5:98:cc:99:a3:58:c1:e8:33:9d:38:aa:
                    57:34:ed:f0:5e:94:7c:a4:7c:04:b3:c2:e6:0c:eb:
                    7e:71:73:b1:e4:88:10:e9:f3:61:12:1a:67:65:9d:
                    c2:0d:0d:45:04:d5:1e:5c:47:51:92:f7:ae:bb:4b:
                    41:19:5c:1e:54:e5:18:17:1a:da:17:55:3f:1d:4b:
                    54:8f:fc:07:5c:03:23:f6:27:d4:15:a4:e5:f0:d9:
                    e7:16:a5:8a:15:af:23:e9:b0:6d:0f:28:ae:d9:5f:
                    99:45:59:2e:e8:2f:3b:de:93:b7:58:b1:f8:47:97:
                    19:79:23:2c:37:ac:2d:4b:71:c3:fc:45:22:d2:05:
                    c2:86:14:ec:2c:42:ce:74:37:f3:27:ee:04:42:57:
                    e5:65:6d:7d:49:45:64:1c:2c:28:d1:3a:f8:84:78:
                    3d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AB:F2:04:6D:4F:23:61:E7:F3:2A:F2:84:BF:AD:C8:1F:31:89:E7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/628D0EF0B97311F1A7986FEBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.128.0/19
                  156.239.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6d:ca:ee:c9:84:65:96:88:b8:59:d6:9d:7d:08:bc:c4:9b:10:
         c9:0c:b5:d6:7f:03:d6:cc:94:40:03:d6:b3:3a:93:b5:7d:14:
         7a:df:2c:4a:71:19:0e:92:0b:de:1c:68:80:b2:e4:28:b1:6e:
         f3:98:b0:4f:a5:e9:c7:fe:1d:2c:bd:65:6b:23:58:e4:7b:1d:
         c9:38:27:30:29:e6:5f:72:42:85:f4:a0:36:4d:15:78:8d:0a:
         54:9f:d0:a5:2a:88:89:c6:79:6f:9c:f9:c4:e6:c6:ed:98:a6:
         96:41:c1:d7:82:67:8e:44:7e:19:e4:3b:97:6e:4d:cf:47:4d:
         ae:ce:1b:21:cd:bf:03:35:44:f1:12:2c:85:4d:f9:c0:42:f9:
         63:a5:99:10:ef:0a:c4:01:53:bd:5d:23:93:b2:4f:08:b6:4f:
         5d:56:07:60:59:a2:20:b6:9b:88:17:3f:21:21:e2:da:56:74:
         23:a3:7b:c4:be:94:7d:3b:c0:37:f2:e1:7d:72:fb:7d:da:da:
         c5:82:3f:d0:12:4b:1a:3b:b1:76:fb:06:56:af:e4:79:86:d2:
         c4:cd:47:33:c4:07:d9:58:1e:60:37:a7:e7:a0:1b:6b:c5:8d:
         93:ed:b3:f8:e4:31:0c:f6:ac:71:46:d4:a3:e8:76:67:d4:55:
         6a:c1:80:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----