Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/D1C7CD7EBB1111ECAEAE00CB5A40D577.roa
File:                     D1C7CD7EBB1111ECAEAE00CB5A40D577.roa (raw, json)
Hash identifier:          rxMpLXHN+UxUplZQN3hOfUnpT69hTMz7dFn02TuXFMM=
Subject key identifier:   F1:55:1C:4F:E9:AC:6C:C9:20:9E:64:8E:5B:BF:1D:EC:E4:04:71:F0
Certificate issuer:       /CN=F369F2FAAF/serialNumber=9478315A1E5C5615A9228BBECA48A396870B847E
Certificate serial:       10
Authority key identifier: 94:78:31:5A:1E:5C:56:15:A9:22:8B:BE:CA:48:A3:96:87:0B:84:7E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/D1C7CD7EBB1111ECAEAE00CB5A40D577.roa
Signing time:             Wed 13 Apr 2022 10:09:35 +0000
ROA not before:           Wed 13 Apr 2022 10:09:31 +0000
ROA not after:            Sat 30 Apr 2022 10:09:31 +0000
asID:                     22750
IP address blocks:        197.211.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F2FAAF/serialNumber=9478315A1E5C5615A9228BBECA48A396870B847E
        Validity
            Not Before: Apr 13 10:09:31 2022 GMT
            Not After : Apr 30 10:09:31 2022 GMT
        Subject: CN=6256a15f-9604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1a:d0:c1:c9:9e:8a:81:46:4a:56:39:4b:c9:
                    f1:47:39:5c:17:a4:8a:29:16:61:86:3d:38:7a:f6:
                    64:eb:11:8b:fc:a7:2b:8d:99:d9:50:5e:85:ad:8b:
                    ca:77:c4:43:d0:e3:03:6e:44:18:fa:79:49:ec:19:
                    d0:7a:fe:98:a6:8d:be:50:dc:ea:20:8a:3d:10:3b:
                    d9:0c:3a:e2:27:f1:d4:94:fe:7f:a5:d0:b2:4e:07:
                    e4:78:9b:7c:27:17:ef:a4:9d:23:e2:bc:b8:83:0c:
                    e2:d1:ff:11:41:cd:1e:53:30:9c:bd:08:ff:3e:03:
                    e8:96:4c:23:de:bc:39:05:73:a5:2b:19:25:38:5f:
                    43:85:3e:b6:36:94:ee:a6:47:f0:4f:a2:0c:66:4b:
                    1e:ae:eb:86:d7:1a:2a:15:47:8a:c1:71:ad:50:16:
                    10:9d:4e:f1:85:42:fe:dd:64:70:ee:14:ec:14:b9:
                    59:e4:49:72:f4:49:e8:8b:86:4a:1b:f8:4c:0f:59:
                    d4:22:19:5e:fb:5a:cf:f6:c9:fe:47:d1:7a:55:7c:
                    5f:80:0e:1e:6d:c0:00:49:77:f2:4f:af:3b:97:2b:
                    a1:8e:7f:8f:41:46:6d:6b:cf:36:75:75:31:5c:84:
                    8e:67:e1:b6:d8:ce:a8:7c:5e:5e:f2:3a:f7:a2:4c:
                    06:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:55:1C:4F:E9:AC:6C:C9:20:9E:64:8E:5B:BF:1D:EC:E4:04:71:F0
            X509v3 Authority Key Identifier:
                keyid:94:78:31:5A:1E:5C:56:15:A9:22:8B:BE:CA:48:A3:96:87:0B:84:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/D1C7CD7EBB1111ECAEAE00CB5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.211.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         43:ff:ef:cd:9f:1a:95:17:e7:0c:74:23:86:8c:14:47:cc:41:
         de:73:7f:63:b2:aa:d9:97:20:b1:f9:7b:74:bc:4a:df:0a:74:
         17:c8:8e:b4:b8:6e:07:8e:9a:77:5d:9b:9a:e8:7a:e9:1b:36:
         0b:a5:ce:f1:86:00:a2:3e:15:13:2a:f2:73:2b:69:41:76:b5:
         f5:59:8d:b1:e8:67:94:5c:c2:56:f1:6a:6b:c7:9c:75:53:a0:
         c7:08:d5:fa:9a:17:a3:8b:b5:10:69:d6:56:3a:48:de:a4:38:
         95:26:1d:97:77:a1:a2:07:8e:9b:65:ba:28:23:1f:50:b9:64:
         18:5f:dd:ff:ca:40:a0:d0:79:bb:6f:d6:85:89:df:30:ca:be:
         11:2a:28:e6:7d:1d:d7:75:88:98:d9:95:d1:1b:94:ce:bd:db:
         50:4a:2e:6e:b1:07:40:d6:d4:76:cf:c6:6b:4f:91:a8:61:7e:
         47:07:26:3c:ac:27:b4:3f:02:68:b1:98:38:09:b0:41:34:f3:
         6d:18:3a:dd:4b:9e:37:42:42:44:8d:53:3b:b7:98:0f:e5:90:
         81:c6:76:01:11:18:e9:85:d5:30:dc:47:89:6c:b9:d1:67:63:
         fb:d9:b4:58:40:89:72:a1:4e:cb:fd:d9:09:00:90:77:39:4a:
         e2:bf:e1:41
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBEDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY5
RjJGQUFGMTEwLwYDVQQFEyg5NDc4MzE1QTFFNUM1NjE1QTkyMjhCQkVDQTQ4QTM5
Njg3MEI4NDdFMB4XDTIyMDQxMzEwMDkzMVoXDTIyMDQzMDEwMDkzMVowGDEWMBQG
A1UEAwwNNjI1NmExNWYtOTYwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOIa0MHJnoqBRkpWOUvJ8Uc5XBekiikWYYY9OHr2ZOsRi/ynK42Z2VBeha2L
ynfEQ9DjA25EGPp5SewZ0Hr+mKaNvlDc6iCKPRA72Qw64ifx1JT+f6XQsk4H5Hib
fCcX76SdI+K8uIMM4tH/EUHNHlMwnL0I/z4D6JZMI968OQVzpSsZJThfQ4U+tjaU
7qZH8E+iDGZLHq7rhtcaKhVHisFxrVAWEJ1O8YVC/t1kcO4U7BS5WeRJcvRJ6IuG
Shv4TA9Z1CIZXvtaz/bJ/kfRelV8X4AOHm3AAEl38k+vO5croY5/j0FGbWvPNnV1
MVyEjmfhttjOqHxeXvI696JMBvECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTxVRxP
6axsySCeZI5bvx3s5ARx8DAfBgNVHSMEGDAWgBSUeDFaHlxWFakii77KSKOWhwuE
fjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OUYyRkEvNjlCMDVDQkFCQjBDMTFFQ0E3REM2NUJCNUE0MEQ1NzcvbEhneFdo
NWNWaFdwSW91LXlraWpsb2NMaEg0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbEhneFdoNWNWaFdwSW91LXlraWpsb2NMaEg0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUYyRkEvNjlCMDVDQkFCQjBDMTFFQ0E3REM2NUJCNUE0
MEQ1NzcvRDFDN0NEN0VCQjExMTFFQ0FFQUUwMENCNUE0MEQ1Nzcucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBsXTgDANBgkqhkiG9w0BAQsF
AAOCAQEAQ//vzZ8alRfnDHQjhowUR8xB3nN/Y7Kq2Zcgsfl7dLxK3wp0F8iOtLhu
B46ad12bmuh66Rs2C6XO8YYAoj4VEyrycytpQXa19VmNsehnlFzCVvFqa8ecdVOg
xwjV+poXo4u1EGnWVjpI3qQ4lSYdl3ehogeOm2W6KCMfULlkGF/d/8pAoNB5u2/W
hYnfMMq+ESoo5n0d13WImNmV0RuUzr3bUEoubrEHQNbUds/Ga0+RqGF+RwcmPKwn
tD8CaLGYOAmwQTTzbRg63UueN0JCRI1TO7eYD+WQgcZ2AREY6YXVMNxHiWy50Wdj
+9m0WECJcqFOy/3ZCQCQdzlK4r/hQQ==
-----END CERTIFICATE-----