Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8633F71E926911F18D2794A3CE1D38B0.roa
File:                     8633F71E926911F18D2794A3CE1D38B0.roa (raw, json)
Hash identifier:          g1kaxhYe6pVRpTGLntUZll7PumaBDTFh01ywR0DhIms=
Subject key identifier:   73:94:CF:00:5F:12:65:FE:FA:20:5A:F1:AD:FC:C7:6E:9B:A0:4C:F8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CA57
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8633F71E926911F18D2794A3CE1D38B0.roa
Signing time:             Fri 07 Aug 2026 14:08:55 +0000
ROA not before:           Fri 07 Aug 2026 14:08:51 +0000
ROA not after:            Fri 14 Aug 2026 14:08:51 +0000
asID:                     131471
IP address blocks:        156.238.64.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117335 (0x1ca57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  7 14:08:51 2026 GMT
            Not After : Aug 14 14:08:51 2026 GMT
        Subject: CN=6a75e6f7-80a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:04:03:b6:f6:6d:29:eb:34:32:23:fd:6a:a6:
                    5d:06:8e:0d:fc:c2:7a:6b:46:5d:b6:a7:35:0e:63:
                    bc:7f:49:01:2e:44:04:f5:26:f2:56:8b:3f:ea:2d:
                    ef:64:cf:2c:ab:57:aa:cd:b2:7b:1d:b2:ea:39:bf:
                    85:95:78:c4:21:53:67:2c:a6:26:8e:a3:1a:6d:8b:
                    c1:2b:7a:af:b4:70:c8:4c:d9:e3:5f:57:19:14:2e:
                    bf:fb:34:a4:6d:f6:24:4e:1c:6d:f6:2b:89:c6:77:
                    4c:0f:bd:4b:d8:e4:04:50:d1:a0:53:50:d2:db:29:
                    1a:8e:9f:ea:e5:af:84:a6:de:46:0d:39:5b:f2:8a:
                    07:2b:fe:fb:56:a4:e8:64:3e:36:74:2d:dd:a0:9b:
                    56:74:f4:b6:19:f7:79:58:1c:c5:8b:95:3c:86:93:
                    7d:ae:a7:95:01:8d:8b:91:f6:90:c6:f0:f7:ba:37:
                    72:7f:55:6f:4a:b6:2c:ba:8b:49:e2:94:84:1d:cc:
                    31:54:42:c8:5d:c6:91:7e:4e:7b:3a:13:45:a8:05:
                    c5:fb:6f:2d:e1:3e:75:c8:dd:61:5c:eb:77:72:27:
                    07:03:67:87:c2:7f:27:84:ee:cc:e5:14:59:95:d3:
                    8d:81:11:5a:81:eb:b0:37:73:d4:c2:19:e0:d8:58:
                    06:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:94:CF:00:5F:12:65:FE:FA:20:5A:F1:AD:FC:C7:6E:9B:A0:4C:F8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8633F71E926911F18D2794A3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:0a:6b:bc:80:49:57:ed:23:b0:d8:bd:fb:12:74:21:6b:c7:
         fd:5e:34:4b:1b:f6:88:74:80:4e:45:cb:8e:31:ba:cc:3a:11:
         d6:69:a8:be:f6:4b:e3:4c:9b:5f:a3:2e:a0:5e:d8:0d:06:6a:
         33:b5:f1:8e:41:08:a5:eb:58:e6:19:fe:76:07:ae:8f:bb:e1:
         ac:f5:b4:cc:2f:54:5c:2a:f7:72:b9:e4:34:18:10:1e:e6:57:
         f4:c4:3f:8e:ba:02:2e:ed:66:0e:37:6f:a1:01:af:c8:77:ce:
         98:1e:d4:96:a3:15:8b:ca:28:5a:3d:c0:c9:7c:48:63:34:9b:
         db:01:d3:4c:cb:76:bc:9b:34:60:30:fd:06:f6:50:ae:45:e0:
         94:87:db:1b:a2:f9:10:23:dc:72:df:d8:ba:6c:80:a9:45:7e:
         a3:36:a5:b9:0c:07:35:e6:0e:92:55:84:64:fe:14:5b:ee:21:
         02:61:06:14:f1:64:8a:64:05:55:d4:01:c8:31:f3:5d:bc:22:
         21:cc:15:1c:2e:21:75:fc:0b:0f:06:6d:2a:67:72:07:9f:f5:
         70:e2:a6:ae:1d:d0:0f:1b:05:0a:7e:3e:4f:24:f7:c4:b3:54:
         0d:24:6a:3e:98:ba:19:da:e8:6b:85:2d:8f:ec:4c:a6:33:02:
         30:bd:1b:16
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcpXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODA3MTQwODUxWhcNMjYwODE0MTQwODUxWjAYMRYw
FAYDVQQDEw02YTc1ZTZmNy04MGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmwQDtvZtKes0MiP9aqZdBo4N/MJ6a0Zdtqc1DmO8f0kBLkQE9SbyVos/
6i3vZM8sq1eqzbJ7HbLqOb+FlXjEIVNnLKYmjqMabYvBK3qvtHDITNnjX1cZFC6/
+zSkbfYkThxt9iuJxndMD71L2OQEUNGgU1DS2ykajp/q5a+Ept5GDTlb8ooHK/77
VqToZD42dC3doJtWdPS2Gfd5WBzFi5U8hpN9rqeVAY2LkfaQxvD3ujdyf1VvSrYs
uotJ4pSEHcwxVELIXcaRfk57OhNFqAXF+28t4T51yN1hXOt3cicHA2eHwn8nhO7M
5RRZldONgRFageuwN3PUwhng2FgGXQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHOU
zwBfEmX++iBa8a38x26boEz4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84NjMzRjcxRTkyNjkxMUYxOEQyNzk0QTNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO5AMA0GCSqGSIb3DQEBCwUA
A4IBAQBnCmu8gElX7SOw2L37EnQha8f9XjRLG/aIdIBORcuOMbrMOhHWaai+9kvj
TJtfoy6gXtgNBmoztfGOQQil61jmGf52B66Pu+Gs9bTML1RcKvdyueQ0GBAe5lf0
xD+OugIu7WYON2+hAa/Id86YHtSWoxWLyihaPcDJfEhjNJvbAdNMy3a8mzRgMP0G
9lCuReCUh9sbovkQI9xy39i6bICpRX6jNqW5DAc15g6SVYRk/hRb7iECYQYU8WSK
ZAVV1AHIMfNdvCIhzBUcLiF1/AsPBm0qZ3IHn/Vw4qauHdAPGwUKfj5PJPfEs1QN
JGo+mLoZ2uhrhS2P7EymMwIwvRsW
-----END CERTIFICATE-----