Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/18A7F1D0964E11EC8B6BA0C95A40D577.roa
File:                     18A7F1D0964E11EC8B6BA0C95A40D577.roa (raw, json)
Hash identifier:          2Mptep+Qer/V+ORMBN6xChMmaTz962QI5/FQ6qKQozY=
Subject key identifier:   36:5D:51:D5:0E:6C:74:96:CD:EB:2F:F6:7A:E7:08:FC:4F:D0:42:32
Certificate issuer:       /CN=F36BBC36AF/serialNumber=792CBC37D744D884B60EC447EA2AC7E4CDB22D7D
Certificate serial:       05
Authority key identifier: 79:2C:BC:37:D7:44:D8:84:B6:0E:C4:47:EA:2A:C7:E4:CD:B2:2D:7D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/18A7F1D0964E11EC8B6BA0C95A40D577.roa
Signing time:             Fri 25 Feb 2022 15:17:51 +0000
ROA not before:           Fri 25 Feb 2022 15:17:47 +0000
ROA not after:            Thu 30 Mar 2023 15:17:47 +0000
asID:                     37187
IP address blocks:        41.75.112.0/20 maxlen: 24
                          41.190.92.0/22 maxlen: 24
                          41.217.216.0/22 maxlen: 24
                          197.211.96.0/19 maxlen: 24
                          2c0f:fd50::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BBC36AF/serialNumber=792CBC37D744D884B60EC447EA2AC7E4CDB22D7D
        Validity
            Not Before: Feb 25 15:17:47 2022 GMT
            Not After : Mar 30 15:17:47 2023 GMT
        Subject: CN=6218f31f-7548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:6a:05:b6:53:9f:5c:d7:ef:f1:52:76:31:
                    2b:61:9c:bd:ca:94:f7:ea:91:cf:03:8b:6d:7e:f0:
                    40:a3:ad:19:39:04:1b:98:cb:78:f1:e7:fb:5d:99:
                    69:18:40:ad:9a:30:7c:d8:9d:9f:0d:95:b8:33:c6:
                    2d:69:3a:66:99:9b:3e:7b:f0:77:5e:2b:59:ca:b6:
                    90:4c:be:9e:21:4d:b4:fa:7e:3e:ea:68:27:76:22:
                    7b:66:9b:e8:1e:f3:03:60:70:82:0d:17:76:fc:2c:
                    4d:81:25:cd:2e:1d:db:55:61:c0:da:ec:50:8c:da:
                    63:de:36:fc:2f:b7:24:6a:58:86:df:ad:ae:47:13:
                    ba:f7:d9:f9:ef:36:cf:69:20:25:e8:4e:ed:6f:d1:
                    5e:24:21:d5:03:1b:5a:4f:18:9c:b0:d7:83:1a:66:
                    ba:ad:9e:55:ed:31:1f:d7:d4:93:0d:4d:87:13:8c:
                    88:2d:f9:aa:79:a3:2d:eb:3d:1e:18:67:d6:d5:de:
                    8c:b1:df:aa:94:25:7e:d2:7c:df:29:d6:ae:32:94:
                    f0:34:28:dd:80:04:d0:9b:44:bb:59:d7:67:e5:2b:
                    86:e3:9c:48:df:de:f0:34:7f:30:cd:6f:f7:21:29:
                    62:f0:00:10:5d:1d:72:53:c3:03:0c:44:85:e9:91:
                    20:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5D:51:D5:0E:6C:74:96:CD:EB:2F:F6:7A:E7:08:FC:4F:D0:42:32
            X509v3 Authority Key Identifier:
                keyid:79:2C:BC:37:D7:44:D8:84:B6:0E:C4:47:EA:2A:C7:E4:CD:B2:2D:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/18A7F1D0964E11EC8B6BA0C95A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.75.112.0/20
                  41.190.92.0/22
                  41.217.216.0/22
                  197.211.96.0/19
                IPv6:
                  2c0f:fd50::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:11:d7:4a:58:70:cc:c3:2d:3a:42:ce:36:b4:bd:78:b5:2e:
         4f:cf:09:3a:70:e5:bb:4c:3c:a9:dc:f5:9f:78:7f:dd:c2:2c:
         2c:97:f2:08:54:1d:02:ff:ce:73:45:23:4c:af:fe:46:3a:62:
         3a:13:d3:f1:9d:94:b2:93:dc:99:c3:54:b6:c4:74:3b:7d:c6:
         32:13:1d:50:f7:10:97:3e:84:11:7e:b9:4a:88:c0:a2:cb:13:
         38:ea:6d:ce:9f:87:a3:1c:d5:19:ef:5c:d2:0c:1b:62:70:71:
         ca:35:af:1b:11:2e:56:2d:48:b9:df:24:a1:73:32:2b:f5:dc:
         fc:21:6e:25:75:d9:a7:df:e0:64:a2:94:5d:83:74:d8:92:62:
         58:85:b3:02:4a:6b:94:1a:f0:0b:d3:d7:fc:81:2a:38:b5:cb:
         cb:f1:4a:ea:e5:63:d1:cd:61:c2:e2:36:2e:4a:fd:7b:09:13:
         81:56:0e:f6:41:06:45:1e:8f:13:ef:ff:65:76:50:94:4f:c6:
         b9:8e:5d:3c:ad:fa:9b:77:a3:9a:ae:65:5c:be:fa:b0:33:f8:
         96:49:30:ba:ad:59:b8:12:a8:07:c8:ff:15:63:cb:2d:4e:d9:
         5d:1c:6c:6a:15:f6:34:c0:9d:59:7d:77:a7:31:a3:3b:76:9d:
         61:c0:f6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----