Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D427DD7AA02211F196018503CF1D38B0.roa
File:                     D427DD7AA02211F196018503CF1D38B0.roa (raw, json)
Hash identifier:          znzL6SpWZTIoLjT4jHj9/xZCsliPwNTYZe88Q89z+jg=
Subject key identifier:   0B:0F:AC:E1:D0:5A:D2:33:F1:D1:67:13:CE:49:75:C0:BD:28:79:E5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D0B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D427DD7AA02211F196018503CF1D38B0.roa
Signing time:             Tue 25 Aug 2026 01:18:08 +0000
ROA not before:           Tue 25 Aug 2026 01:18:02 +0000
ROA not after:            Tue 01 Sep 2026 01:18:02 +0000
asID:                     139613
IP address blocks:        156.225.76.0/22 maxlen: 24
                          156.238.120.0/21 maxlen: 24
                          156.240.0.0/19 maxlen: 24
                          156.240.32.0/20 maxlen: 24
                          156.240.48.0/21 maxlen: 24
                          156.242.10.0/23 maxlen: 24
                          156.242.12.0/22 maxlen: 24
                          156.245.144.0/22 maxlen: 24
                          156.245.204.0/22 maxlen: 24
                          156.245.232.0/21 maxlen: 24
                          156.246.0.0/20 maxlen: 24
                          156.246.16.0/23 maxlen: 24
                          156.249.28.0/22 maxlen: 24
                          156.255.0.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118961 (0x1d0b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 25 01:18:02 2026 GMT
            Not After : Sep  1 01:18:02 2026 GMT
        Subject: CN=6a8ced50-18cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:02:f6:a1:c3:fe:06:70:82:02:5f:67:e3:ef:
                    3a:9f:67:8d:c9:69:d4:e5:0b:25:7b:8f:85:6a:98:
                    48:c6:13:c2:5f:38:e6:1c:76:6b:72:43:c7:76:e2:
                    5d:9a:c9:2c:11:12:c4:27:13:d8:39:63:02:0a:5b:
                    b7:c4:e0:8b:58:b8:43:2f:54:a1:e2:93:6e:95:42:
                    6e:67:80:d0:93:fc:98:59:a1:28:26:cb:93:6f:b9:
                    2f:96:1b:8e:89:f0:6d:54:c7:fd:8f:eb:31:fe:f1:
                    0a:4e:66:db:8b:82:28:4d:fe:66:2b:cd:f4:81:66:
                    11:98:49:51:66:89:27:ce:a8:af:5a:97:50:ca:0d:
                    e4:97:3b:48:53:5d:41:f5:82:66:74:9d:bc:73:39:
                    f9:0a:d5:18:ff:a0:f7:8f:2b:10:cf:ac:14:08:ee:
                    e6:7d:95:b8:69:1c:8a:c3:70:05:58:c2:2b:58:bc:
                    c7:6b:d2:0e:66:32:ed:a4:d2:b3:6e:3d:9d:68:e7:
                    91:83:dc:aa:31:93:f3:96:bd:45:cb:79:97:c8:be:
                    50:2f:b7:05:24:15:4c:07:dd:e3:ed:aa:43:c1:f7:
                    4c:6e:36:07:67:64:08:19:53:bc:09:f8:06:53:b9:
                    24:9e:8d:5b:53:98:af:97:bd:e3:ef:71:8b:6a:4f:
                    07:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0F:AC:E1:D0:5A:D2:33:F1:D1:67:13:CE:49:75:C0:BD:28:79:E5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D427DD7AA02211F196018503CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.76.0/22
                  156.238.120.0/21
                  156.240.0.0-156.240.55.255
                  156.242.10.0-156.242.15.255
                  156.245.144.0/22
                  156.245.204.0/22
                  156.245.232.0/21
                  156.246.0.0-156.246.17.255
                  156.249.28.0/22
                  156.255.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:a8:2d:da:a4:26:35:57:f4:81:a8:f5:92:18:2c:90:19:c8:
         f0:47:f6:fd:61:32:e6:6c:70:ba:79:97:3a:12:ca:d8:54:f7:
         40:b0:07:3b:59:a2:e1:d7:e5:a2:8c:b1:e5:81:44:db:c1:07:
         89:24:eb:b3:22:57:9c:df:9c:de:0a:51:e4:9c:c9:bd:6c:ff:
         e7:3e:be:c7:ae:ca:f8:5a:27:5e:23:1d:b6:c7:ab:0f:9c:df:
         5a:54:ce:af:b8:bf:cf:6d:8a:45:02:da:ef:7a:47:ba:33:5c:
         43:b2:19:12:d1:79:95:d7:00:53:57:b2:74:85:7b:1e:51:dc:
         69:6e:ee:c2:29:da:fb:35:5e:48:6c:3a:48:9c:0b:6f:04:ae:
         4f:d7:9f:3e:fa:3f:d1:88:48:58:51:9d:5d:f0:d3:44:26:9d:
         d1:66:bd:09:2c:41:30:e7:9e:4e:5f:a1:3d:77:5d:c6:93:11:
         7b:c9:ca:be:0f:68:be:75:dc:4d:88:b5:58:46:a2:bf:e8:26:
         b5:65:0a:d5:4b:54:02:f4:6f:26:92:52:e6:bc:a7:b8:d9:78:
         5b:f6:92:52:30:67:3b:5f:28:17:01:f4:6d:45:47:4f:3e:96:
         37:22:26:d6:87:58:db:17:da:95:66:d9:f9:e1:fc:7a:f6:cc:
         31:1f:c5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----