Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7836DF836EA11ECAA1C267DD8A014CE.roa
File:                     A7836DF836EA11ECAA1C267DD8A014CE.roa (raw, json)
Hash identifier:          xwpK69xo4ea/mu6A48aIV1qibONiSyTSiH7uGN1I1sk=
Subject key identifier:   8F:61:1D:41:51:F0:FC:9D:8A:57:DC:EB:C1:DE:51:2E:9A:38:63:2F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0BFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7836DF836EA11ECAA1C267DD8A014CE.roa
Signing time:             Wed 27 Oct 2021 05:56:40 +0000
ROA not before:           Wed 27 Oct 2021 05:56:37 +0000
ROA not after:            Thu 27 Oct 2022 05:56:37 +0000
asID:                     58895
IP address blocks:        45.206.60.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3067 (0xbfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 05:56:37 2021 GMT
            Not After : Oct 27 05:56:37 2022 GMT
        Subject: CN=6178ea18-411f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:81:16:41:56:e6:c7:33:e4:bd:9f:be:ef:95:
                    e4:da:ca:04:ee:7a:3f:23:94:56:5f:93:58:3e:b3:
                    23:d3:85:19:da:1c:26:47:f7:46:22:a4:e3:37:8d:
                    f4:a9:e9:4b:00:e2:b7:93:ce:2a:cd:9f:b2:58:5b:
                    17:b9:fa:bc:4e:5a:44:38:88:64:36:55:3f:25:b8:
                    a2:cf:26:87:6f:14:42:c3:81:0a:f6:12:b9:98:30:
                    bf:2c:3f:c6:30:d6:d8:05:ec:d1:bb:b6:a3:cb:f2:
                    32:c9:69:54:84:66:da:09:b9:2e:3a:cd:f1:29:1e:
                    91:f4:88:d1:f8:c5:f6:40:0d:b4:3b:56:66:dd:ce:
                    36:ae:dc:65:5c:05:9b:13:19:9d:fe:5b:99:15:59:
                    32:97:e2:da:10:07:de:14:3a:c5:ff:c4:13:e0:22:
                    e0:d6:e6:46:35:7f:f9:ae:34:72:b1:0a:ed:67:c7:
                    6c:f2:6b:cc:b5:1f:c1:5b:60:48:06:5d:e6:5f:82:
                    dd:75:3c:71:e2:24:f0:88:47:f2:ae:81:68:7f:6e:
                    5c:50:a2:03:cf:24:76:42:61:94:94:4d:15:06:22:
                    70:ba:43:73:45:63:70:f2:ee:4a:06:d6:3b:03:bf:
                    a5:32:29:58:cf:82:af:48:83:cc:2d:a8:40:39:a8:
                    46:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:61:1D:41:51:F0:FC:9D:8A:57:DC:EB:C1:DE:51:2E:9A:38:63:2F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7836DF836EA11ECAA1C267DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:ad:a0:9b:21:d3:0a:68:0b:94:4c:aa:e7:e3:50:08:1c:9e:
         4a:16:b8:7e:18:41:e8:27:70:fb:38:7e:f7:33:30:0d:75:bf:
         57:05:a7:ab:3a:43:d1:e0:9f:90:78:58:77:6e:26:d2:2e:69:
         d5:cd:47:5d:35:5f:28:f5:cf:c7:52:50:f0:72:52:a1:2d:07:
         b6:87:99:ae:4e:84:42:b5:24:3b:9a:56:13:54:63:db:b5:c0:
         d8:28:5a:da:6b:50:0f:fa:a1:59:46:04:cc:ac:4a:b7:f9:6d:
         8f:80:0d:99:e5:39:5d:71:86:d7:cd:1b:2a:f6:ca:fc:d0:13:
         0c:5a:73:7f:d7:e7:88:85:c9:81:74:d1:9c:d5:87:9c:aa:d8:
         26:3c:69:cd:f0:95:66:c8:f3:42:da:08:d0:50:10:1a:e9:62:
         ee:09:f9:5c:10:34:45:ca:40:64:98:d9:f7:ec:e5:be:d8:b5:
         dd:34:16:f7:63:0f:26:ed:22:7a:04:1b:f6:3e:47:b8:89:66:
         48:4c:f7:ae:e4:31:29:65:10:7e:51:31:f1:13:e0:56:d4:89:
         f3:c9:f1:07:d2:59:18:8b:14:84:ff:dc:53:67:ab:8f:e7:4b:
         85:b2:7b:9a:33:e8:31:49:64:a9:c2:51:43:05:5c:0f:75:3e:
         33:25:e6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 19:15:09 2025 by rpki-client