Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/B3156FA2FF3811EB96C3CE74D8A014CE.roa
File:                     B3156FA2FF3811EB96C3CE74D8A014CE.roa (raw, json)
Hash identifier:          bKgEqQshurVy0Z6xot93xk2c5CdPYibJ0Vtk6GPdce8=
Subject key identifier:   D9:36:06:C2:E3:A3:36:49:5B:F3:6D:AF:4A:2D:0D:DE:15:8C:01:25
Certificate issuer:       /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial:       24
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/B3156FA2FF3811EB96C3CE74D8A014CE.roa
Signing time:             Tue 17 Aug 2021 08:55:05 +0000
ROA not before:           Tue 17 Aug 2021 08:55:01 +0000
ROA not after:            Wed 16 Aug 2023 08:55:01 +0000
asID:                     328913
IP address blocks:        2001:43fe:c000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
        Validity
            Not Before: Aug 17 08:55:01 2021 GMT
            Not After : Aug 16 08:55:01 2023 GMT
        Subject: CN=611b7969-8b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:09:c8:a4:84:a0:12:f7:c5:64:82:59:30:8e:
                    18:e0:71:4e:b1:ef:7d:e2:a5:d1:bf:a9:74:7e:3c:
                    6c:4b:88:97:ad:5b:a7:68:1a:e2:29:43:04:43:23:
                    bd:36:02:3c:09:76:2f:c2:5f:40:3e:b3:16:be:7b:
                    a1:ed:33:15:c1:76:65:de:86:7c:f5:19:56:90:69:
                    6e:bc:6b:1c:6c:32:44:f8:a8:1e:b5:0e:70:03:86:
                    39:9a:83:8e:84:66:b3:7b:67:1b:71:a3:cb:9f:87:
                    a6:7c:6c:a0:b3:41:2e:3f:cd:bd:c4:91:31:c3:d7:
                    c3:01:b0:9c:5e:81:40:35:b1:8c:81:4d:33:71:fa:
                    72:67:5f:b8:fa:ea:f1:fc:ce:fd:3f:fa:ac:1e:d6:
                    39:88:33:5a:84:8c:11:15:33:c8:fe:c0:52:8a:a6:
                    dd:6c:c4:ff:4b:b5:55:c6:a7:2c:36:04:32:23:ec:
                    2d:ad:e0:82:a0:38:16:1b:7b:a2:da:41:e9:87:9f:
                    3c:bc:95:2e:b5:6a:47:e8:5d:55:4f:e9:63:ed:23:
                    8c:16:df:4b:dd:6c:9a:a5:9e:ab:a2:39:c3:81:83:
                    da:a1:3d:b1:3b:47:ce:33:d4:d8:8a:cc:77:73:0d:
                    e2:c4:b3:3d:1b:d3:a1:8f:41:74:f5:cc:4a:5f:5d:
                    83:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:36:06:C2:E3:A3:36:49:5B:F3:6D:AF:4A:2D:0D:DE:15:8C:01:25
            X509v3 Authority Key Identifier:
                keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/B3156FA2FF3811EB96C3CE74D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43fe:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:49:fa:7b:18:50:18:38:f2:a9:2a:75:92:70:0b:c0:07:65:
         cb:46:b7:56:54:b3:f3:e7:d5:18:91:f9:16:6e:e0:0f:c7:8f:
         e2:64:f1:3c:7c:12:d5:d9:14:d7:b0:3f:db:21:75:7c:38:25:
         a7:40:5b:b8:5c:31:02:43:ef:d2:65:e4:2f:f9:c5:d3:af:a9:
         9a:0a:44:89:0a:a3:8f:dc:da:a7:08:c2:c0:df:e1:d4:e1:a5:
         dd:87:5a:7f:dc:7d:4c:7e:12:15:8b:47:6e:c4:c5:0d:ba:85:
         a0:1d:5c:33:99:83:59:ae:9b:f6:fc:a4:7e:dd:48:f0:78:a4:
         f8:a4:87:c2:f0:c6:38:27:16:36:d5:a5:db:46:db:b1:68:0c:
         5d:e3:9d:3d:71:d5:54:dc:5f:c7:42:83:c3:e0:f1:05:8b:3e:
         27:f2:07:c6:6c:3e:cc:5e:34:b5:03:3f:ae:25:f3:9a:64:e7:
         38:9e:9d:b7:e2:8d:57:6f:0c:88:45:3c:15:8f:3d:50:43:9c:
         5b:59:ef:b5:85:8b:0f:20:a0:9c:7a:70:0f:74:c9:1d:98:e2:
         46:d1:c7:01:05:4a:17:68:e3:eb:b8:13:2d:69:a4:67:3e:91:
         b5:cc:60:e4:07:62:07:27:50:6f:fd:78:f8:4c:15:76:8e:1e:
         5f:48:97:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----