Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA05DD5636CE11EC8B1E874ED8A014CE.roa
File:                     BA05DD5636CE11EC8B1E874ED8A014CE.roa (raw, json)
Hash identifier:          49EkGt7lca4e0esrJObaUlp+hbaKTgAWXsKy0cMo86A=
Subject key identifier:   E6:02:0A:DA:B9:B7:10:11:EE:8D:E5:93:FB:27:E0:42:A1:B7:48:DD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0AD6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA05DD5636CE11EC8B1E874ED8A014CE.roa
Signing time:             Wed 27 Oct 2021 02:36:45 +0000
ROA not before:           Wed 27 Oct 2021 02:36:42 +0000
ROA not after:            Thu 27 Oct 2022 02:36:42 +0000
asID:                     58895
IP address blocks:        45.206.219.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2774 (0xad6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 02:36:42 2021 GMT
            Not After : Oct 27 02:36:42 2022 GMT
        Subject: CN=6178bb3d-3671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f0:96:53:2f:96:a1:f8:7c:7a:5b:c4:99:90:
                    d3:09:a5:0d:22:18:cb:be:46:f1:d8:34:09:21:3d:
                    70:28:e8:87:fb:94:4a:c8:45:5e:50:bc:c6:83:6d:
                    31:9b:90:55:81:1e:13:e8:24:01:bf:aa:98:8a:7f:
                    88:50:75:06:4d:94:58:67:a2:a8:e7:63:db:7d:aa:
                    e0:c2:68:77:15:2c:9d:17:05:31:cc:64:23:f0:df:
                    2a:00:6e:27:c5:ad:53:30:40:46:44:ff:76:5e:d7:
                    71:9b:cf:3f:de:96:e5:d7:c5:82:ab:77:bf:df:91:
                    72:87:74:d1:1e:50:8d:47:0f:c8:bc:f3:69:5e:41:
                    ad:7f:c0:e3:41:48:17:62:16:76:35:22:95:68:88:
                    3c:0c:2a:1c:2d:88:be:aa:10:2a:09:65:d6:11:34:
                    e7:01:af:00:84:2f:08:2e:a2:3b:b9:44:d6:2e:97:
                    d4:63:83:63:9a:f6:c5:3b:80:5f:e4:bd:e4:3c:5d:
                    50:06:0f:d1:e4:e2:03:5c:6a:2c:98:5c:dc:45:9f:
                    11:08:a1:8d:77:cc:9f:53:b2:8f:44:35:b7:9d:c3:
                    e2:be:92:3d:f1:a9:a8:42:f5:cf:85:e8:16:04:cb:
                    d6:9b:3b:ea:10:84:c1:73:bf:1d:07:ba:42:57:9f:
                    42:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:02:0A:DA:B9:B7:10:11:EE:8D:E5:93:FB:27:E0:42:A1:B7:48:DD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA05DD5636CE11EC8B1E874ED8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:b3:f7:6f:93:29:6c:e9:6f:bf:b5:22:f9:77:aa:9f:ee:54:
         62:46:d4:9b:bf:2e:10:17:ca:49:f9:2b:b6:00:b3:85:1a:95:
         e8:6d:06:6d:7e:74:d1:0e:50:36:3a:14:f6:c1:4e:06:57:79:
         7f:db:2b:1f:c8:10:98:46:8e:47:68:94:7c:55:e1:6a:d3:8e:
         7b:be:f1:d2:0b:77:d6:8a:be:7d:b1:4e:6e:a3:43:4b:5e:72:
         20:34:cf:c0:80:58:d7:ba:00:52:9f:62:4d:b6:d3:cc:e5:2b:
         1b:20:1b:56:1d:9d:3f:60:72:94:1c:34:df:5c:a5:e1:47:98:
         88:19:00:5f:85:16:af:a8:f0:6d:52:99:cd:27:50:b5:d8:2f:
         9f:33:60:ea:c7:f6:28:ad:74:08:b5:dc:3b:21:0a:27:7a:93:
         ca:86:2f:c5:3f:a9:36:d6:f6:22:57:59:1a:a7:84:2e:66:a1:
         35:0e:de:5e:99:d4:eb:0d:1d:71:cb:2a:b7:6a:24:83:68:2f:
         95:1f:be:c8:a0:e2:0e:c9:e6:94:af:77:f4:0b:fc:11:5d:ce:
         3e:36:43:a3:9b:39:a8:eb:a7:7a:81:c7:fd:1a:64:f9:8a:df:
         e6:16:f7:0b:cf:f8:21:bd:b9:cb:25:b1:98:c7:53:40:71:e0:
         e7:d2:a2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 00:39:56 2025 by rpki-client