Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/732BC1EEC6DD11F1BE2A4404CF1D38B0.roa
File:                     732BC1EEC6DD11F1BE2A4404CF1D38B0.roa (raw, json)
Hash identifier:          /+xzO3gE9C9QZu3D8oYQpS4puy4A7kAd7zUVV86Jg3A=
Subject key identifier:   F9:33:41:C6:5B:9F:FB:A4:33:D8:B2:15:A2:F1:BC:B1:F6:4B:1B:15
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DD0F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/732BC1EEC6DD11F1BE2A4404CF1D38B0.roa
Signing time:             Tue 13 Oct 2026 08:09:45 +0000
ROA not before:           Tue 13 Oct 2026 08:09:40 +0000
ROA not after:            Fri 23 Oct 2026 08:09:40 +0000
asID:                     139923
IP address blocks:        156.254.5.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122127 (0x1dd0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 13 08:09:40 2026 GMT
            Not After : Oct 23 08:09:40 2026 GMT
        Subject: CN=6acde749-bc69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f8:cb:0b:9d:28:21:bb:b5:16:10:d9:f2:4e:
                    7e:bb:73:90:8f:82:45:54:f2:7e:2f:7d:4b:56:8f:
                    c3:a8:40:dc:17:58:e1:af:d8:e6:48:bd:90:68:45:
                    c5:9c:09:e0:2e:89:ae:49:5b:9c:d3:31:89:7e:f8:
                    52:32:57:d8:00:56:e7:ed:94:53:a1:a0:8e:37:e1:
                    28:41:e0:1f:92:69:38:e1:3d:77:15:d5:b2:51:6b:
                    fd:da:61:09:94:ff:ca:aa:ae:b6:b2:30:28:dd:b3:
                    dc:d2:07:d1:9d:cf:ef:79:a3:fe:ba:c5:ae:e3:61:
                    27:66:b9:1f:25:75:11:d2:7a:5b:f9:f9:33:59:54:
                    86:11:dc:62:f2:ed:5a:73:ff:b2:d3:fa:6c:cc:2c:
                    53:8b:bd:ee:7c:19:f9:f9:9c:30:94:8b:cf:44:c2:
                    17:2a:75:60:b5:6d:d7:92:9c:5e:1f:89:e2:81:60:
                    39:df:0e:b7:a7:6c:ac:8c:57:72:dc:44:a0:fc:d7:
                    27:c2:46:b6:e2:07:4a:cb:a8:a1:49:44:d0:4f:25:
                    59:57:12:67:b5:df:2e:4c:bd:65:17:ab:53:d5:0f:
                    50:6a:3f:83:c7:bf:7f:d1:69:6d:28:65:b3:2d:36:
                    cd:28:00:1f:3f:08:c5:f9:09:db:ce:99:58:68:75:
                    f3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:33:41:C6:5B:9F:FB:A4:33:D8:B2:15:A2:F1:BC:B1:F6:4B:1B:15
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/732BC1EEC6DD11F1BE2A4404CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:a7:eb:fc:26:6c:33:fc:8c:b7:83:68:d9:ab:00:75:89:a6:
         9a:10:98:6e:7f:3c:c7:d4:3a:62:90:97:fe:a5:36:01:9a:f8:
         a9:91:2a:ad:55:9d:27:2e:0c:fd:df:b7:ff:5f:c0:1d:59:77:
         06:31:bd:1a:9d:ed:ff:4c:43:c4:8c:24:25:43:a2:f3:36:68:
         00:45:b0:2f:20:21:38:59:65:e6:3b:6e:84:31:21:44:d7:45:
         89:06:5d:80:1d:7c:5a:95:b7:d0:3f:ee:7f:42:57:d7:18:3e:
         f0:4f:a0:9e:5d:2e:eb:c9:e2:2a:cc:14:54:a1:47:46:08:e2:
         46:28:af:32:bb:92:42:ee:12:25:80:50:98:db:0d:a6:f4:8f:
         dc:6f:16:91:d5:cb:42:46:dd:6a:60:c3:1d:d9:bf:19:86:28:
         6a:cd:80:b7:bf:28:65:ef:4b:28:9c:b5:d4:60:f4:9b:34:72:
         82:c4:b1:d4:77:a0:52:7c:ee:f9:3f:60:1f:ae:6a:1c:dd:45:
         8f:5b:f4:9a:b6:cd:77:cc:ae:05:01:70:6e:4f:f5:1e:9b:2f:
         0c:dd:8d:c7:91:b0:4f:20:77:47:e7:c9:20:18:01:2f:6b:93:
         a6:3a:e2:b1:52:20:61:16:83:1c:e1:36:93:ed:b9:34:10:29:
         7e:21:13:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----