Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B94C527EA02711F1B654F6A4CE1D38B0.roa
File:                     B94C527EA02711F1B654F6A4CE1D38B0.roa (raw, json)
Hash identifier:          tdyeWRhQ1BpkXTQi8iKjQ7E0SYDCMUiE3E0onCJ0dz4=
Subject key identifier:   2D:92:97:DF:82:09:47:29:3E:68:35:B4:A9:D1:37:80:14:90:07:85
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D0B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B94C527EA02711F1B654F6A4CE1D38B0.roa
Signing time:             Tue 25 Aug 2026 01:53:10 +0000
ROA not before:           Tue 25 Aug 2026 01:53:06 +0000
ROA not after:            Tue 01 Sep 2026 01:53:06 +0000
asID:                     139646
IP address blocks:        45.200.14.0/23 maxlen: 24
                          45.200.16.0/23 maxlen: 24
                          45.200.18.0/23 maxlen: 24
                          45.200.20.0/22 maxlen: 24
                          45.200.24.0/21 maxlen: 24
                          45.200.32.0/19 maxlen: 24
                          45.201.214.0/23 maxlen: 24
                          45.201.216.0/21 maxlen: 24
                          45.201.224.0/21 maxlen: 24
                          45.201.240.0/20 maxlen: 24
                          45.204.0.0/24 maxlen: 24
                          45.207.224.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118965 (0x1d0b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 25 01:53:06 2026 GMT
            Not After : Sep  1 01:53:06 2026 GMT
        Subject: CN=6a8cf586-9a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:54:a0:8b:3e:2e:9c:87:ca:89:b1:43:70:f7:
                    b0:7f:19:2f:ba:b5:5a:73:f7:94:7b:36:9a:4b:c4:
                    9a:d1:de:b0:32:07:86:cd:ec:10:eb:b4:9c:ac:9f:
                    1c:0c:ba:26:4c:5a:33:f3:fc:6e:48:80:36:6f:db:
                    62:b2:39:63:ea:b6:6f:87:05:95:e7:4c:82:02:6f:
                    36:aa:0d:34:da:51:c5:8a:91:93:ba:ae:db:d0:83:
                    9d:71:03:ca:dd:14:bd:de:63:5b:fe:1e:5a:5f:6e:
                    7c:eb:7f:f5:e5:17:4d:f1:3d:5b:76:38:7e:d4:e3:
                    b6:91:b1:db:6a:9d:3f:a5:21:46:d2:98:51:f1:1a:
                    9f:11:47:27:1c:b1:86:3a:a3:09:98:a8:6c:08:53:
                    4f:7f:d3:af:f4:a8:1c:15:96:3e:a3:e3:20:e4:68:
                    ae:7c:31:f6:fb:69:0c:a1:c6:37:12:14:b1:96:fc:
                    6f:54:36:c9:35:8d:30:20:a2:d8:ed:04:45:8d:72:
                    c5:b1:7d:56:6f:cd:ec:45:26:b5:aa:43:79:a5:02:
                    1f:da:34:f4:70:a6:2f:5e:4b:5f:4e:ec:e8:3b:fe:
                    ee:f2:ae:5d:94:9b:54:5f:2b:08:ee:1b:17:b8:48:
                    5c:59:cc:bf:da:33:61:57:4b:8f:63:22:ec:da:8d:
                    5b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:92:97:DF:82:09:47:29:3E:68:35:B4:A9:D1:37:80:14:90:07:85
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B94C527EA02711F1B654F6A4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.14.0-45.200.63.255
                  45.201.214.0-45.201.231.255
                  45.201.240.0/20
                  45.204.0.0/24
                  45.207.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7c:99:e5:30:f3:8e:c3:82:15:b4:22:6c:d3:0b:0e:6e:c2:c4:
         92:e7:55:01:05:ef:5c:66:4f:fe:3d:0f:af:53:78:d8:f3:fd:
         b6:e2:e3:72:7b:fc:07:a2:16:76:b0:98:06:c3:46:64:21:40:
         36:11:ee:dd:f8:5d:45:a1:fd:99:07:aa:da:f3:f0:50:55:40:
         51:d9:53:ae:48:3a:a7:8b:49:c9:55:23:c2:b5:88:15:7d:b9:
         43:e1:47:0a:32:49:23:96:97:3c:d0:a1:d0:a5:43:96:0e:47:
         53:58:1c:b1:c9:8e:5f:71:66:80:95:72:53:81:61:59:2b:05:
         86:d7:01:43:56:2b:62:b6:0a:f5:f9:08:ec:94:bc:29:07:34:
         5b:75:94:3a:8e:5a:66:ab:c5:ed:26:27:e9:c3:7b:5e:aa:cb:
         f6:5e:fd:e3:d7:2f:04:a3:1d:4c:c7:bc:be:68:b6:8c:5f:e1:
         70:7e:6c:23:1a:1f:55:47:41:ff:cb:b0:c4:b1:29:ab:03:1d:
         65:b7:0e:e4:47:d1:9f:02:1a:c9:58:0b:ce:8d:4d:29:02:ff:
         81:68:26:a8:cd:cd:35:81:c1:87:20:af:cb:6a:1f:e6:70:d5:
         ba:59:b6:82:5e:84:b9:91:8a:b1:fb:18:29:54:79:0f:19:c7:
         a0:ad:b0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----