Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD229396C6DC11F1BE46E3FFCE1D38B0.roa
File:                     BD229396C6DC11F1BE46E3FFCE1D38B0.roa (raw, json)
Hash identifier:          5/zlzRVBa0dICChXwAnR0jfDu45oxcYYA9Wdk9v3fHE=
Subject key identifier:   BF:E0:18:E3:0F:2B:19:11:89:79:04:B9:2C:CC:75:0B:1A:E7:0B:67
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DD0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD229396C6DC11F1BE46E3FFCE1D38B0.roa
Signing time:             Tue 13 Oct 2026 08:04:40 +0000
ROA not before:           Tue 13 Oct 2026 08:04:35 +0000
ROA not after:            Fri 23 Oct 2026 08:04:35 +0000
asID:                     135391
IP address blocks:        156.254.4.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122125 (0x1dd0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 13 08:04:35 2026 GMT
            Not After : Oct 23 08:04:35 2026 GMT
        Subject: CN=6acde617-c557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:84:c6:23:9e:92:3b:71:a5:32:9b:b1:56:
                    d8:5e:2c:d4:0c:27:0b:88:27:8a:ab:9b:f1:03:3c:
                    e4:a4:e0:3f:18:3c:9f:48:02:df:94:ec:56:45:70:
                    63:b5:1b:c6:7a:a2:fb:a9:69:3b:e0:2c:ee:54:84:
                    2b:3d:2d:33:c4:f3:7d:dc:3a:2f:6e:e9:c6:84:b7:
                    6f:48:14:3e:26:d3:ee:1b:c3:73:a8:65:02:04:e5:
                    bc:69:f1:15:be:57:23:6c:6b:d6:96:2d:8a:02:6d:
                    ee:f9:c5:78:ff:99:a7:28:2d:c1:c7:5d:21:55:f3:
                    9b:e2:42:c7:7b:dc:61:0e:7e:ec:d2:95:10:17:12:
                    63:e7:11:18:b0:45:57:32:0f:fd:a4:14:e1:b1:bf:
                    10:5c:32:d2:c5:87:17:7c:e8:ca:b0:3f:6b:4a:bd:
                    60:87:14:8a:3c:28:30:88:af:17:fd:3e:b8:cc:d9:
                    f5:e2:dc:36:d6:98:97:cc:c9:dd:ed:85:a0:43:91:
                    75:a2:50:5f:c8:6c:11:27:bc:4f:72:1a:00:80:4c:
                    94:05:0c:b7:c5:85:21:c1:a7:50:72:39:05:49:79:
                    86:fd:8d:2d:4a:6c:1a:66:90:7d:ff:3a:57:40:b9:
                    59:5e:c6:09:1a:a8:cd:c7:f4:e9:71:f6:f5:e8:15:
                    b2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E0:18:E3:0F:2B:19:11:89:79:04:B9:2C:CC:75:0B:1A:E7:0B:67
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD229396C6DC11F1BE46E3FFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:df:1d:4d:23:81:c3:d1:6e:b3:9e:16:26:ca:00:e3:e6:3a:
         b6:cd:18:5e:ca:87:76:16:9b:7c:e7:a4:65:19:c4:2d:d7:16:
         5f:dc:e7:81:88:45:3c:ab:61:8f:a2:aa:4a:07:3d:61:75:a3:
         26:29:db:cd:86:d0:ac:e9:dc:a4:c8:cb:ec:fc:7d:2a:84:ba:
         95:4f:a5:b6:52:54:73:76:31:0b:99:ca:be:e1:84:aa:ea:9b:
         28:62:7a:76:30:7f:dd:64:80:31:ab:3c:c4:97:59:51:59:5f:
         4d:d7:b1:d2:d2:7d:d5:99:d1:76:ca:1e:9e:8d:9a:02:74:60:
         e2:5e:e2:8e:0b:eb:76:64:e0:d0:75:7e:2f:56:20:d5:d3:16:
         00:91:ca:2c:0b:1d:fb:05:01:d5:c8:70:3b:75:ec:85:ea:45:
         27:1f:68:61:a4:9d:02:e7:dd:c5:e3:a0:58:b6:05:b0:57:25:
         dd:5e:27:b7:86:8f:83:58:f1:c0:0a:31:97:ca:0c:44:db:85:
         58:96:eb:77:5f:15:48:2e:b7:6c:0c:ef:53:ab:0b:bc:fc:0e:
         b8:0e:7d:b0:88:bb:a9:03:30:f8:97:5e:03:f7:08:e8:c6:31:
         cf:af:af:6c:62:c5:38:20:9f:70:1f:fc:c3:b7:5d:08:43:ae:
         72:be:cc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----