Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/547732861DE711ED8BDE20B4F1222468.roa
File:                     547732861DE711ED8BDE20B4F1222468.roa (raw, json)
Hash identifier:          cIXMXav/fYIpnnFjYmjWvIEsPELDZ+6PLHZTBlBoOJM=
Subject key identifier:   6C:F5:D8:F1:F3:93:5D:A6:8A:A8:1F:19:0D:8D:7C:9E:2F:20:07:D0
Certificate issuer:       /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial:       0B
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/547732861DE711ED8BDE20B4F1222468.roa
Signing time:             Wed 17 Aug 2022 04:44:51 +0000
ROA not before:           Wed 17 Aug 2022 04:44:45 +0000
ROA not after:            Fri 31 Mar 2023 04:44:45 +0000
asID:                     25818
IP address blocks:        102.177.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
        Validity
            Not Before: Aug 17 04:44:45 2022 GMT
            Not After : Mar 31 04:44:45 2023 GMT
        Subject: CN=62fc7243-c485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:f6:8e:4b:3a:1b:f0:df:ad:25:81:92:97:
                    f1:9e:bb:ce:64:a2:0a:c2:9a:41:30:cb:dc:bb:58:
                    23:94:8d:97:1b:66:19:5f:58:33:fe:e9:eb:18:0e:
                    aa:95:fb:9f:d9:f6:5f:90:9c:ff:a6:1a:8e:51:11:
                    7b:f7:b6:ce:dd:e3:cc:84:c6:e1:7b:2c:ce:31:ef:
                    f8:16:df:1d:55:c3:cc:c5:60:23:5f:3f:04:c4:34:
                    97:82:cc:76:bb:b5:9f:0d:aa:ba:98:9d:18:b6:36:
                    73:af:a3:ab:a2:bf:88:48:08:b5:58:06:5c:fa:c7:
                    3d:7c:ca:f2:2e:ea:50:b0:fe:ae:7d:d3:ed:63:ad:
                    a5:44:7c:e6:16:67:26:81:7e:bf:a9:65:c6:02:3a:
                    ec:a7:3f:eb:40:88:1b:83:76:d0:0d:8e:be:ba:25:
                    a5:da:dc:92:94:a2:34:32:a4:2c:92:00:47:01:88:
                    30:1d:c8:a8:94:72:0e:e3:7c:9f:02:e9:b8:08:b9:
                    d6:68:8e:d0:0c:a0:fd:ca:4b:a0:bd:2d:e4:95:5b:
                    b1:a2:ff:9a:67:11:7e:eb:c8:41:6d:d3:60:b2:ce:
                    62:3a:6f:5d:b7:cc:38:0f:2d:4c:f2:aa:cb:af:86:
                    d1:29:f2:16:2c:7e:81:bc:c2:1c:95:e5:3c:2d:30:
                    89:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F5:D8:F1:F3:93:5D:A6:8A:A8:1F:19:0D:8D:7C:9E:2F:20:07:D0
            X509v3 Authority Key Identifier:
                keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/547732861DE711ED8BDE20B4F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b9:10:6c:af:d6:31:93:94:e9:e5:a9:ed:6d:be:ec:1d:81:09:
         e1:5d:ea:35:5b:92:ba:fa:1f:32:a3:71:c1:9d:88:08:63:94:
         2b:6e:f9:4d:d0:c8:20:87:8f:1f:f3:73:22:03:a2:e6:c4:27:
         9d:ca:c1:88:01:94:6b:83:17:0c:30:41:75:a8:9d:fd:90:55:
         9f:ee:c9:fa:b8:70:00:13:8c:ae:7a:93:50:a1:2b:42:0a:09:
         42:c0:68:b6:d4:31:b8:c3:61:d8:00:df:58:6b:98:88:bf:3e:
         3e:4b:42:22:73:6f:05:7b:c2:b9:02:ee:83:0d:4d:ca:5e:e8:
         c2:78:eb:d0:7e:a2:76:41:cc:90:37:75:e7:b5:2c:dd:5e:6c:
         c7:0d:3d:50:68:ab:fa:c2:09:c0:cc:a4:97:b8:79:91:2c:e8:
         1e:55:68:5b:68:63:38:49:be:93:c8:75:ed:e1:2a:4e:ce:07:
         7e:3e:f7:53:55:5c:49:2a:69:a1:ac:05:2d:64:83:6e:1d:32:
         80:8d:b4:5a:26:dd:83:19:71:ad:b2:c6:3d:75:ef:3e:c4:aa:
         26:e5:77:46:1c:a2:73:31:c5:65:1b:63:c9:e4:53:0f:c6:f7:
         99:1d:02:30:59:dc:3a:27:c9:7a:4c:4e:ea:c0:e4:38:f9:b7:
         30:52:6a:38
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBCzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY5
NkU1RkFGMTEwLwYDVQQFEyg1Mzc1Q0Y0Q0ExNjQzQjA4QzM0MUJEQTc5RDhCRTEw
NUJEQzNDNDhCMB4XDTIyMDgxNzA0NDQ0NVoXDTIzMDMzMTA0NDQ0NVowGDEWMBQG
A1UEAwwNNjJmYzcyNDMtYzQ4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKy29o5LOhvw360lgZKX8Z67zmSiCsKaQTDL3LtYI5SNlxtmGV9YM/7p6xgO
qpX7n9n2X5Cc/6YajlERe/e2zt3jzITG4XsszjHv+BbfHVXDzMVgI18/BMQ0l4LM
dru1nw2qupidGLY2c6+jq6K/iEgItVgGXPrHPXzK8i7qULD+rn3T7WOtpUR85hZn
JoF+v6llxgI67Kc/60CIG4N20A2OvrolpdrckpSiNDKkLJIARwGIMB3IqJRyDuN8
nwLpuAi51miO0Ayg/cpLoL0t5JVbsaL/mmcRfuvIQW3TYLLOYjpvXbfMOA8tTPKq
y6+G0SnyFix+gbzCHJXlPC0wiTsCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRs9djx
85NdpoqoHxkNjXyeLyAH0DAfBgNVHSMEGDAWgBRTdc9MoWQ7CMNBvaedi+EFvcPE
izAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTZFNUYvM0RBM0QzMjAxODk3MTFFRDhDOTM2QkQyRjEyMjI0NjgvVTNYUFRL
RmtPd2pEUWIybm5ZdmhCYjNEeElzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVTNYUFRLRmtPd2pEUWIybm5ZdmhCYjNEeElzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTZFNUYvM0RBM0QzMjAxODk3MTFFRDhDOTM2QkQyRjEy
MjI0NjgvNTQ3NzMyODYxREU3MTFFRDhCREUyMEI0RjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGaxcDANBgkqhkiG9w0BAQsF
AAOCAQEAuRBsr9Yxk5Tp5antbb7sHYEJ4V3qNVuSuvofMqNxwZ2ICGOUK275TdDI
IIePH/NzIgOi5sQnncrBiAGUa4MXDDBBdaid/ZBVn+7J+rhwABOMrnqTUKErQgoJ
QsBottQxuMNh2ADfWGuYiL8+PktCInNvBXvCuQLugw1Nyl7ownjr0H6idkHMkDd1
57Us3V5sxw09UGir+sIJwMykl7h5kSzoHlVoW2hjOEm+k8h17eEqTs4Hfj73U1Vc
SSppoawFLWSDbh0ygI20WibdgxlxrbLGPXXvPsSqJuV3RhyiczHFZRtjyeRTD8b3
mR0CMFncOifJekxO6sDkOPm3MFJqOA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org