Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/8BF1CD86BB1111EC9C1925CA5A40D577.roa
File:                     8BF1CD86BB1111EC9C1925CA5A40D577.roa (raw, json)
Hash identifier:          sXcffAkzU9KteBbvuxq1Zzdv/E7h9LkCuROQF+5MKp8=
Subject key identifier:   DA:DA:F1:EC:8B:27:28:D1:C9:F8:3B:1F:9A:93:F3:5E:50:26:2B:88
Certificate issuer:       /CN=F369F2FAAF/serialNumber=9478315A1E5C5615A9228BBECA48A396870B847E
Certificate serial:       0E
Authority key identifier: 94:78:31:5A:1E:5C:56:15:A9:22:8B:BE:CA:48:A3:96:87:0B:84:7E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/8BF1CD86BB1111EC9C1925CA5A40D577.roa
Signing time:             Wed 13 Apr 2022 10:07:38 +0000
ROA not before:           Wed 13 Apr 2022 10:07:34 +0000
ROA not after:            Sat 30 Apr 2022 10:07:34 +0000
asID:                     22750
IP address blocks:        41.66.64.0/18 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F2FAAF/serialNumber=9478315A1E5C5615A9228BBECA48A396870B847E
        Validity
            Not Before: Apr 13 10:07:34 2022 GMT
            Not After : Apr 30 10:07:34 2022 GMT
        Subject: CN=6256a0ea-8099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:7d:f9:06:26:d1:5f:4a:30:4d:84:f2:60:
                    05:73:f6:49:a9:07:00:be:7b:ce:1b:bb:4e:1e:57:
                    94:95:b7:d7:b9:28:8d:66:07:f9:eb:68:8d:2a:1e:
                    37:82:6c:a7:b7:ce:ea:9f:bc:f1:ab:1f:1d:2d:81:
                    de:45:73:aa:66:78:93:a9:05:af:4d:49:ab:ee:60:
                    c2:c3:78:68:1c:42:77:bc:72:d1:71:86:75:e5:ab:
                    b2:8c:66:8b:76:b7:5c:31:25:ce:9e:d9:bb:ab:c4:
                    bd:af:d6:b9:4f:aa:f1:10:dd:c6:49:ae:42:cb:0b:
                    6a:ad:e9:8d:69:05:a9:fb:a1:70:e0:ff:e8:f6:3a:
                    f7:af:18:10:1e:16:66:33:56:4d:80:d2:84:cc:aa:
                    76:dc:78:fc:b3:b7:6c:98:73:b2:ae:25:eb:6e:31:
                    df:92:73:f9:bd:73:14:be:0e:c6:56:88:0f:2d:98:
                    dd:03:16:a4:16:9c:8d:b9:1d:f3:10:55:2d:b7:c3:
                    d5:59:5e:92:3b:d1:8b:bb:f2:74:b4:d6:42:c0:86:
                    8b:de:aa:a4:ad:10:42:5f:b5:e0:32:81:03:f1:92:
                    81:56:1b:ac:98:e7:3e:49:20:a7:fe:a6:39:6f:95:
                    a9:f2:c5:30:31:2a:11:ff:97:5b:2e:0d:4b:fd:b1:
                    60:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DA:F1:EC:8B:27:28:D1:C9:F8:3B:1F:9A:93:F3:5E:50:26:2B:88
            X509v3 Authority Key Identifier:
                keyid:94:78:31:5A:1E:5C:56:15:A9:22:8B:BE:CA:48:A3:96:87:0B:84:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/8BF1CD86BB1111EC9C1925CA5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.66.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         60:63:74:c6:9a:21:6f:21:0d:24:98:2b:3f:ef:41:f7:ff:de:
         2f:29:c9:17:0e:1b:68:0b:1e:14:65:cb:bf:18:83:d5:bf:47:
         c6:49:e2:c4:d8:16:fb:50:a7:c9:8d:a4:5e:34:eb:9c:c3:f6:
         d0:71:5e:11:57:f6:ca:f8:18:1c:d7:99:c2:cb:a9:40:7f:63:
         49:64:5c:66:51:c6:b6:41:24:ba:ce:6d:16:c7:b1:62:8e:22:
         2e:02:d9:2b:67:74:ad:c0:2e:0e:e0:ca:ec:d7:7e:d3:68:50:
         34:1e:27:2e:b0:20:ba:42:1a:04:6d:f6:69:6b:ce:61:b5:fe:
         a3:23:63:84:9f:59:33:7e:21:41:14:55:64:87:92:da:d6:6a:
         53:c5:51:85:d1:e9:b4:4e:54:b0:73:29:70:3a:48:3c:02:4e:
         81:42:82:9e:02:98:00:42:68:ff:58:64:af:55:1f:5b:f5:af:
         27:a5:59:58:77:74:6a:b7:c8:27:46:f8:d8:b5:af:f4:2b:c2:
         94:ac:3c:e7:ad:e1:67:67:2a:08:49:80:b9:9b:3e:c9:d1:45:
         a2:9a:a9:07:97:e8:59:da:31:2c:d4:98:f3:21:c3:fe:8a:86:
         ab:6b:5a:50:87:eb:ee:4b:75:20:fa:6b:67:be:a4:b5:e3:35:
         35:ce:cd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----