Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A68160C6B97211F189A716E7CE1D38B0.roa
File:                     A68160C6B97211F189A716E7CE1D38B0.roa (raw, json)
Hash identifier:          pfNkcrEcUapG4aJ74WMpHToaoalIdSqGzmNyZdWv8wo=
Subject key identifier:   EA:E5:A6:F0:D7:53:4F:D9:C5:74:5D:B9:50:47:D2:52:5B:D9:24:DB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D8BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A68160C6B97211F189A716E7CE1D38B0.roa
Signing time:             Sat 26 Sep 2026 06:22:30 +0000
ROA not before:           Sat 26 Sep 2026 06:22:26 +0000
ROA not after:            Fri 23 Oct 2026 06:22:26 +0000
asID:                     138910
IP address blocks:        45.195.240.0/24 maxlen: 24
                          45.195.241.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121018 (0x1d8ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 06:22:26 2026 GMT
            Not After : Oct 23 06:22:26 2026 GMT
        Subject: CN=6ab764a6-79c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:92:86:49:37:17:01:05:63:79:62:8c:76:76:
                    f1:9c:a1:80:6a:75:d1:3a:19:4b:f0:e4:ca:4f:cb:
                    bc:41:76:9a:93:38:05:3d:28:74:02:61:01:1f:f6:
                    8b:56:00:14:a4:80:19:f7:86:f2:4d:d3:4a:58:3b:
                    4b:a1:56:aa:97:be:7f:7c:fa:7c:66:76:59:d4:17:
                    53:a5:77:20:a0:72:6a:68:bf:fa:b3:a7:22:0e:06:
                    9f:79:ab:6d:a7:05:62:d0:a2:8e:30:44:ec:95:f3:
                    29:60:75:bf:8b:95:08:d2:cd:f9:d2:f0:78:29:62:
                    fc:04:d4:51:8c:5e:d6:dd:47:73:85:09:0f:9f:aa:
                    73:3d:09:1f:94:f2:5f:d9:98:51:40:1f:8d:0b:e3:
                    1c:ea:0c:4e:7b:74:20:46:61:20:bd:10:a1:d8:6e:
                    81:b2:66:5e:cb:11:1f:56:a8:78:65:c8:36:ac:94:
                    0d:50:f9:72:34:80:e8:5f:9e:8d:02:a9:ee:d3:ea:
                    b3:3e:3d:27:0c:a0:e0:6f:01:07:02:b5:c6:4a:e0:
                    37:77:99:fb:f4:35:b7:01:5a:fb:d0:78:49:86:17:
                    ae:14:e2:05:fb:ab:1b:46:8a:fd:1d:91:c0:56:48:
                    72:be:2a:bb:6b:db:91:a9:45:4c:f5:bd:49:41:48:
                    d1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E5:A6:F0:D7:53:4F:D9:C5:74:5D:B9:50:47:D2:52:5B:D9:24:DB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A68160C6B97211F189A716E7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:0d:7a:c0:d7:48:84:80:af:64:fb:c9:16:88:c0:f0:03:15:
         42:74:99:a6:09:bb:f7:06:29:ee:45:40:c0:05:e4:b2:30:2b:
         11:2b:8e:2d:8f:16:77:f7:9e:07:45:81:0c:c9:4e:63:c2:bf:
         83:60:0d:e6:f3:f5:47:95:62:10:5e:c0:6e:c9:10:48:b4:52:
         ef:34:15:89:6a:fe:3b:ff:79:02:e7:d7:e6:3e:d7:01:ba:4e:
         62:cc:39:48:5b:bd:44:15:c7:be:2a:cc:6d:07:cd:83:e1:22:
         26:bc:07:e1:de:30:bb:d2:9d:b2:3d:37:d3:28:fa:d5:69:12:
         14:1b:e9:16:7b:33:99:04:f9:bd:a5:ea:50:12:65:9c:21:22:
         f4:80:d0:99:6c:be:a2:a5:20:be:c7:54:57:ef:9e:9b:e7:fc:
         62:c0:03:02:aa:61:d7:02:fe:71:6b:df:40:59:6a:b1:74:90:
         d9:0f:76:60:2c:12:7c:3a:7a:ca:4b:eb:b9:21:a3:26:93:af:
         d8:33:a5:3e:2f:ad:4d:0f:99:e4:79:e3:79:f1:58:13:34:5d:
         da:a5:40:59:e6:99:e6:02:88:7c:ba:80:5f:cb:ba:15:77:ed:
         66:61:e4:6a:c9:0a:00:dc:3f:d3:42:4b:b2:33:c9:48:e0:7d:
         3c:d4:03:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----