Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F07CF538A02611F196A6A51ECF1D38B0.roa
File:                     F07CF538A02611F196A6A51ECF1D38B0.roa (raw, json)
Hash identifier:          Ot/bvXlJGF6DvwNqfWMTb8CHAtYFMBDhfaQke7+kNFs=
Subject key identifier:   69:CD:D3:EA:9E:17:71:31:CE:78:F8:F4:61:50:14:68:DA:0D:DE:EB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D0B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F07CF538A02611F196A6A51ECF1D38B0.roa
Signing time:             Tue 25 Aug 2026 01:47:33 +0000
ROA not before:           Tue 25 Aug 2026 01:47:29 +0000
ROA not after:            Tue 01 Sep 2026 01:47:29 +0000
asID:                     54801
IP address blocks:        45.200.14.0/23 maxlen: 24
                          45.200.16.0/23 maxlen: 24
                          45.200.18.0/23 maxlen: 24
                          45.200.20.0/22 maxlen: 24
                          45.200.24.0/21 maxlen: 24
                          45.200.32.0/19 maxlen: 24
                          45.201.214.0/23 maxlen: 24
                          45.201.216.0/21 maxlen: 24
                          45.201.224.0/21 maxlen: 24
                          45.201.240.0/20 maxlen: 24
                          45.204.0.0/24 maxlen: 24
                          45.207.224.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118963 (0x1d0b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 25 01:47:29 2026 GMT
            Not After : Sep  1 01:47:29 2026 GMT
        Subject: CN=6a8cf435-55de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:28:c0:79:a1:d8:0d:1f:0e:5c:36:c3:04:43:
                    19:b5:14:f2:ab:03:19:6b:69:d5:0d:02:c9:a6:33:
                    ab:c1:f0:76:13:5d:ca:98:00:fb:72:33:f8:56:d5:
                    2e:4e:ea:56:59:77:7a:1f:ef:74:fc:38:42:69:57:
                    5a:07:ea:99:c9:f3:88:55:80:60:27:10:86:a8:b3:
                    eb:cf:83:75:73:a0:b2:10:22:8a:53:fa:6f:b3:e8:
                    41:da:58:77:84:05:2a:af:9d:44:b5:22:af:1c:9e:
                    dc:e9:a9:d9:a3:43:cf:49:f5:e8:57:f1:52:9f:65:
                    91:51:bd:d1:8f:06:ad:f2:8f:1d:35:06:80:5f:fd:
                    fe:a4:c8:0c:45:54:8f:d5:5c:5d:ad:a6:46:52:7b:
                    c3:5c:ee:d3:fa:e3:32:73:99:82:2c:06:cc:30:81:
                    5c:0c:b9:63:0f:9c:3c:b0:b5:25:81:c1:6e:46:1b:
                    88:8d:ea:57:87:9c:83:2d:bd:71:ab:3d:19:5a:d2:
                    9c:46:63:c6:d6:1e:d1:46:98:bc:72:fc:c5:f6:dd:
                    d7:35:45:92:4a:cf:c4:1a:05:63:54:01:2d:78:88:
                    1d:c2:ba:40:2a:68:17:f2:5d:40:c1:35:94:f7:bd:
                    a1:50:0d:60:08:90:64:12:04:59:9c:5a:50:78:51:
                    0d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CD:D3:EA:9E:17:71:31:CE:78:F8:F4:61:50:14:68:DA:0D:DE:EB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F07CF538A02611F196A6A51ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.14.0-45.200.63.255
                  45.201.214.0-45.201.231.255
                  45.201.240.0/20
                  45.204.0.0/24
                  45.207.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         65:00:f5:9c:a0:da:82:1a:f3:d0:51:f2:28:55:9f:11:fc:59:
         04:7d:12:db:e7:fb:70:76:02:2e:e3:01:27:03:08:32:49:e4:
         df:7f:31:ec:ad:25:78:5e:cf:a9:18:3b:d6:57:ab:7f:f7:14:
         0e:ad:54:48:39:7d:66:d5:10:4b:85:c2:d3:57:c4:a4:65:ab:
         6d:ef:08:81:cd:b5:ad:20:2e:50:2f:08:fb:bc:22:c6:98:c5:
         a8:5c:80:af:9f:12:ba:26:2e:7c:5a:92:39:83:d1:08:1c:0a:
         f8:ea:74:9d:bb:f0:79:d6:8d:86:72:30:25:0b:75:80:c6:1c:
         c1:f8:d5:16:3c:e5:80:bd:d4:85:b7:3b:78:fd:f5:b1:2d:8f:
         b5:82:90:4b:95:a9:76:14:85:3d:e8:4b:c5:74:7d:2d:ab:5c:
         8b:7e:bc:94:27:6f:fe:ca:47:68:d7:05:d2:3d:03:31:2a:de:
         9c:78:b7:e3:e3:a7:e2:cc:49:fb:09:fc:10:d3:78:6d:86:61:
         b8:dd:77:e4:55:08:7f:75:c7:4d:33:6f:8e:cc:f0:f3:9e:e3:
         70:14:1c:fc:53:13:39:e1:b4:52:4e:ea:b5:47:1a:31:49:dd:
         8b:86:4d:58:41:80:e0:bd:12:15:82:b4:73:69:99:71:32:a1:
         f4:62:9d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----