Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/D88FF792B11611E982C25032F8AEA228.roa
File:                     D88FF792B11611E982C25032F8AEA228.roa (raw, json)
Hash identifier:          RCAW7YemhM0++rmsZh0Bb1hJ8HLtHc3nG56j4S92hjo=
Subject key identifier:   0A:1E:38:34:50:E7:10:B0:CE:E6:00:54:0A:93:B8:13:DC:89:12:3C
Certificate issuer:       /CN=F369F058AF/serialNumber=C92E885827C67619E13175703017C4442DDFEACF
Certificate serial:       82
Authority key identifier: C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/D88FF792B11611E982C25032F8AEA228.roa
Signing time:             Sun 28 Jul 2019 09:05:29 +0000
ROA not before:           Sun 28 Jul 2019 09:05:24 +0000
ROA not after:            Sun 31 Jul 2022 09:05:24 +0000
asID:                     328114
IP address blocks:        102.134.192.0/18 maxlen: 24
                          2c0f:edd8::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F058AF/serialNumber=C92E885827C67619E13175703017C4442DDFEACF
        Validity
            Not Before: Jul 28 09:05:24 2019 GMT
            Not After : Jul 31 09:05:24 2022 GMT
        Subject: CN=5d3d6559-f983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d4:07:19:40:bd:c4:72:16:3e:de:16:f0:cd:
                    47:15:32:e1:ca:35:1e:82:96:cd:c6:16:32:74:11:
                    2c:71:17:08:37:dc:2d:21:70:a0:21:f8:86:b8:19:
                    3f:ea:c8:0e:13:19:e5:19:46:fb:53:64:73:e9:ce:
                    a0:58:cc:35:39:18:b0:38:f4:06:cf:44:29:55:22:
                    1c:18:88:35:01:62:ea:d1:0f:1c:e5:46:5f:d7:04:
                    6a:12:c5:51:3a:66:f9:ed:f6:d1:84:da:7d:f3:af:
                    4a:23:d7:d1:f1:e2:cc:2f:32:f8:75:74:53:55:82:
                    d8:6a:9c:19:5f:64:fd:d6:86:30:9b:8a:3e:ef:c5:
                    59:14:c4:7d:d8:0c:2f:dc:4f:aa:87:0d:d6:51:25:
                    f0:dd:d0:02:ae:8b:36:29:f1:6f:fe:de:75:3d:09:
                    d1:70:76:04:60:02:a2:6a:a4:fa:10:8e:c5:fc:93:
                    12:b3:84:e6:9a:8b:bd:dc:2d:04:70:75:dc:a0:bc:
                    07:dd:dc:ec:f0:14:76:f2:37:d4:97:f9:fa:5b:bd:
                    c0:d5:78:1d:9f:d4:ca:1c:45:7d:f0:60:0b:d6:c6:
                    1a:f3:b2:3d:01:03:47:a4:6b:44:30:31:b7:a5:9c:
                    d6:4e:34:c1:fd:3d:61:0c:3f:59:a0:44:2a:56:bf:
                    2a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1E:38:34:50:E7:10:B0:CE:E6:00:54:0A:93:B8:13:DC:89:12:3C
            X509v3 Authority Key Identifier:
                keyid:C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/D88FF792B11611E982C25032F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.134.192.0/18
                IPv6:
                  2c0f:edd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:91:8a:7e:23:4c:f1:5d:00:2b:07:4f:43:12:cb:32:94:41:
         57:7a:c0:bd:62:81:52:81:b8:c2:ba:90:69:3a:9d:c8:cb:64:
         4d:18:fa:ce:1b:31:1c:50:66:ba:9a:3a:43:18:e0:bc:89:71:
         74:72:22:0f:f7:f4:97:cb:8a:6b:be:99:c7:25:52:23:57:86:
         19:47:61:dd:60:c4:7d:5f:8c:d3:e4:9d:8b:8e:ec:12:a0:b6:
         48:71:e6:4b:67:06:1f:a3:2a:99:55:ce:ad:76:ba:ab:3b:7d:
         e4:40:b5:3e:d4:ff:55:0b:ac:9d:2c:4e:94:fc:6c:3f:82:bb:
         1e:36:51:95:24:d2:e2:9f:65:25:e1:4d:01:fa:52:a3:72:83:
         0a:5d:66:38:02:16:1d:98:2a:dc:86:49:b9:4a:86:03:78:fe:
         e3:72:3b:d1:ff:5f:e7:a3:97:e4:08:53:b0:2a:80:84:ef:07:
         bb:48:de:1b:9d:8d:6b:19:78:fc:de:ad:55:eb:e3:6b:e8:a8:
         b5:49:88:37:41:b1:81:c9:3f:e6:4c:6f:21:02:97:98:1f:05:
         8a:10:61:3a:34:f3:40:94:e2:8c:20:b5:1f:71:25:01:f8:31:
         2b:38:e0:fc:14:d3:ca:dc:55:88:39:72:62:b2:06:47:30:4d:
         a0:52:00:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----