Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6CAEFE0C30411F19742E3ECCE1D38B0.roa
File:                     D6CAEFE0C30411F19742E3ECCE1D38B0.roa (raw, json)
Hash identifier:          5K+Y4tebd2CE/AX4uTa14jr5f06KwEfYIdmAowViO30=
Subject key identifier:   6C:09:F3:12:6D:80:B1:F3:32:52:F7:F4:C2:10:E6:F3:DC:30:C8:79
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DBDE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6CAEFE0C30411F19742E3ECCE1D38B0.roa
Signing time:             Thu 08 Oct 2026 10:41:38 +0000
ROA not before:           Thu 08 Oct 2026 10:41:32 +0000
ROA not after:            Sun 18 Oct 2026 10:41:32 +0000
asID:                     152711
IP address blocks:        45.202.64.0/24 maxlen: 24
                          45.202.65.0/24 maxlen: 24
                          45.202.66.0/24 maxlen: 24
                          45.202.67.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121822 (0x1dbde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  8 10:41:32 2026 GMT
            Not After : Oct 18 10:41:32 2026 GMT
        Subject: CN=6ac77362-ac6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:3b:fe:a4:03:a0:bd:91:a5:96:07:a9:41:
                    04:76:67:4a:a6:72:a1:af:7c:96:3c:3b:b2:b4:e4:
                    06:ae:38:09:f4:94:61:55:e3:05:45:4e:2d:29:72:
                    b0:fe:03:3f:ca:c0:c3:79:17:9a:6b:1a:7a:12:c4:
                    20:c0:2c:c7:ed:06:f8:49:8f:f0:65:d1:b1:c5:ee:
                    f6:38:89:d5:8f:f5:88:ad:da:1f:fb:fa:6b:fd:69:
                    99:ad:24:ac:f3:14:70:24:f7:ec:f8:b6:b2:e2:fd:
                    7e:bc:87:97:36:02:d6:f9:91:10:86:85:16:50:8f:
                    b7:a0:a4:3c:12:82:5d:a6:76:9f:43:96:6c:b6:58:
                    6c:bc:52:1f:52:9c:b8:b6:7a:e2:cb:78:e1:53:69:
                    84:ed:3e:24:d0:68:02:90:cb:b5:13:48:e8:c9:9d:
                    f8:b6:0a:d3:d4:4d:24:5b:bb:4e:14:9e:09:cb:ec:
                    df:68:6b:5d:2e:b3:9a:0e:88:48:88:3f:08:0b:59:
                    7e:96:ae:2b:59:1c:00:3e:be:8b:7f:e3:6e:79:dd:
                    42:e0:83:ea:bd:96:e0:1e:c8:88:ee:5d:11:95:21:
                    b5:3d:62:e5:bf:c5:53:05:1e:c9:ee:0d:47:0e:a5:
                    82:51:38:32:74:b3:a6:a4:1e:8d:8e:bc:35:30:05:
                    c5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:09:F3:12:6D:80:B1:F3:32:52:F7:F4:C2:10:E6:F3:DC:30:C8:79
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6CAEFE0C30411F19742E3ECCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:86:dd:69:82:aa:02:1b:3a:2a:2f:7b:ae:60:01:01:4f:b4:
         5d:f2:ce:a1:bc:7d:b5:d6:6d:2a:ff:14:27:95:29:e5:1d:4f:
         04:9c:3b:33:48:80:89:6b:f1:63:5d:66:f2:da:50:73:26:7f:
         23:d0:f6:92:54:7e:8d:17:1a:cb:d3:0d:be:ea:83:25:17:eb:
         1f:e4:05:ab:b5:ea:e3:7e:dd:e2:00:21:74:db:5a:93:5a:03:
         5c:f8:a8:09:72:bf:67:7d:4c:fa:23:14:c7:5b:5f:a3:b1:1a:
         77:2a:55:13:af:15:b1:9c:df:1c:f4:ba:dd:ae:95:f2:86:d0:
         f6:23:13:0d:27:53:68:7b:a5:4a:64:c3:88:34:9f:e5:5b:b4:
         ed:ba:1d:1a:8d:96:d6:bf:dc:fb:1c:34:df:7b:ac:e8:56:94:
         08:50:02:3d:ae:ae:eb:55:7c:a0:42:94:8c:99:e7:1c:56:09:
         9c:79:78:36:a4:92:01:ab:cd:8c:29:67:34:b1:8b:5f:fe:5f:
         8e:0a:87:73:2d:4b:b7:0f:89:da:5a:4a:60:fa:6e:20:76:de:
         9f:6a:91:0e:de:57:76:f9:f8:91:65:d9:43:8a:90:84:3b:e6:
         62:c6:a0:36:f9:e4:b2:e9:6c:a6:5a:e3:7c:31:e4:0b:7f:d6:
         f0:a7:b1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----