Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD743F1A36CD11EC9E56944CD8A014CE.roa
File:                     BD743F1A36CD11EC9E56944CD8A014CE.roa (raw, json)
Hash identifier:          VibtfpQRIOnwB3kC67EPShIakMfoU+KQnPDEQKvqrkM=
Subject key identifier:   77:30:F9:20:45:51:7A:B8:75:E5:BF:BD:4F:E8:81:B8:AD:30:71:E6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0A99
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD743F1A36CD11EC9E56944CD8A014CE.roa
Signing time:             Wed 27 Oct 2021 02:29:42 +0000
ROA not before:           Wed 27 Oct 2021 02:29:39 +0000
ROA not after:            Thu 27 Oct 2022 02:29:39 +0000
asID:                     58895
IP address blocks:        45.206.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2713 (0xa99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 02:29:39 2021 GMT
            Not After : Oct 27 02:29:39 2022 GMT
        Subject: CN=6178b996-7c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:03:a3:4e:e1:e3:75:3a:d2:94:de:fb:c3:16:
                    4a:1a:a1:68:4d:92:29:3a:a0:b9:37:1d:83:67:23:
                    70:64:70:23:cc:5e:fc:52:98:74:ee:d0:0b:1f:a3:
                    94:24:44:ac:57:d6:d7:d9:68:98:2f:8f:db:45:1a:
                    6e:c5:ff:98:70:c6:cc:8a:7f:65:a8:ca:08:92:92:
                    05:1f:bd:4b:45:cb:b7:5f:f1:fc:c5:57:51:48:c5:
                    18:84:59:af:d4:b8:f5:48:df:20:4f:10:cc:8c:20:
                    39:0e:1a:ec:ba:5b:01:98:94:38:5a:a1:bb:90:1a:
                    52:1d:0c:81:2d:e6:a3:50:92:45:ea:d4:b3:04:dc:
                    43:d8:5b:44:16:74:be:e8:88:46:c2:0f:25:1c:1d:
                    fd:f2:05:f7:a5:1b:e2:e2:dc:4b:75:b0:b1:76:32:
                    9f:fc:b2:78:84:f8:a1:33:80:87:70:e1:b2:c8:39:
                    07:cd:6e:a7:6c:1c:2d:a3:31:6e:e0:2c:cb:3c:9b:
                    f3:ef:b7:fa:38:47:52:db:e2:87:a1:4e:de:a5:0b:
                    d4:cd:61:16:a2:53:98:c5:19:15:6b:78:4b:66:a4:
                    23:20:d2:7e:b5:93:32:9d:07:5f:bd:8e:16:74:b6:
                    29:80:7c:23:e7:36:21:f7:11:6a:21:44:83:ef:60:
                    b1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:30:F9:20:45:51:7A:B8:75:E5:BF:BD:4F:E8:81:B8:AD:30:71:E6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD743F1A36CD11EC9E56944CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:af:61:34:5d:93:38:0a:1c:9c:02:aa:fe:5c:33:28:a2:a0:
         b3:ea:42:e4:8c:af:a3:c1:09:a0:ff:ef:aa:a9:42:77:43:37:
         5d:69:6e:2b:cb:79:30:d9:f3:9c:43:4f:a0:50:db:63:18:1c:
         a6:55:99:b7:28:7e:33:f4:1a:85:ca:74:6a:75:6a:e0:89:f5:
         21:4c:a2:56:96:4e:81:44:29:76:07:17:03:be:3c:0d:9a:7a:
         37:df:00:a4:04:46:4c:9b:75:f2:d4:e4:bc:4b:13:4b:41:a1:
         65:a7:e1:6c:11:24:3d:66:99:cc:3a:48:f1:39:6f:ab:e7:d0:
         c7:5d:ab:82:43:ba:ce:0b:80:02:e2:68:c8:94:63:be:49:d8:
         0b:52:f4:26:97:d0:1d:93:db:35:70:12:1a:95:85:f4:d5:7a:
         bb:2a:b9:b3:81:71:43:6e:0a:8a:e8:96:72:4d:ac:b0:b1:1a:
         08:02:8a:30:aa:06:e6:71:da:ac:ce:16:f5:cb:60:d1:9b:c2:
         e4:1c:66:02:c6:66:91:72:74:ed:f9:78:1e:50:d4:da:68:85:
         da:17:f9:0c:4e:4d:6c:1e:85:8d:ba:c9:54:12:6d:64:30:f4:
         90:fc:eb:c4:90:5a:a0:09:1c:7a:ab:9d:39:86:e2:73:19:8c:
         d2:c8:9b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:28 2023 by rpki-client on console-fra.rpki-client.org