Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/77F96D5CC61011ECAB37C582F1222468.roa
File:                     77F96D5CC61011ECAB37C582F1222468.roa (raw, json)
Hash identifier:          3SySsWdzpTazyOgApqUXccePs9ryNMt8xokOKKUcgXg=
Subject key identifier:   FE:F6:BF:B5:77:F4:BB:9B:DB:54:AC:F3:5B:A0:6A:25:72:0E:8A:1D
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0643
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/77F96D5CC61011ECAB37C582F1222468.roa
Signing time:             Wed 27 Apr 2022 09:57:38 +0000
ROA not before:           Wed 27 Apr 2022 09:57:34 +0000
ROA not after:            Thu 27 Apr 2023 09:57:34 +0000
asID:                     174
IP address blocks:        102.165.16.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1603 (0x643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Apr 27 09:57:34 2022 GMT
            Not After : Apr 27 09:57:34 2023 GMT
        Subject: CN=62691392-e3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ca:f3:f8:4e:46:a2:67:96:ca:21:7c:20:99:
                    59:29:07:6e:fb:d3:a4:74:b4:97:78:43:ba:21:5e:
                    f5:59:68:dc:48:a5:32:49:44:e1:25:2d:af:26:cb:
                    11:e2:59:75:56:70:05:7b:24:d3:34:08:59:82:41:
                    b2:e3:b5:54:19:c7:21:f8:bc:68:38:ca:63:f3:60:
                    a4:cc:63:30:89:76:39:c3:83:c1:4d:2b:9f:8f:50:
                    52:cb:d5:4d:70:76:2e:c7:7c:4e:b0:9b:ab:8d:bf:
                    2f:65:bc:c9:99:52:c7:88:2d:d1:42:2b:cf:fb:3f:
                    07:7b:a5:2d:b6:65:58:0c:12:f6:0b:48:5c:51:29:
                    7b:13:5d:2f:ca:b9:de:b8:c6:12:7e:9e:6f:e5:cd:
                    20:22:a8:d5:cd:fd:c4:9d:db:8d:de:36:a6:ff:aa:
                    e6:82:47:73:d0:9e:0f:dd:5c:62:1b:59:86:a3:f0:
                    7b:75:41:2b:e7:5d:f4:de:0b:73:a6:b1:6c:dd:08:
                    ad:d3:15:9d:85:dc:1f:e1:13:f7:f4:6b:35:a5:6a:
                    39:fd:ed:3a:5e:ff:f3:23:98:23:65:e4:23:c3:28:
                    aa:fe:47:0b:0a:04:e6:1c:c7:9e:6f:7e:66:39:78:
                    a3:ff:b8:05:f3:4c:b9:0a:aa:6c:7d:a2:ca:10:74:
                    49:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F6:BF:B5:77:F4:BB:9B:DB:54:AC:F3:5B:A0:6A:25:72:0E:8A:1D
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/77F96D5CC61011ECAB37C582F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:b1:34:02:0a:35:47:80:d5:fe:b6:bc:8e:97:45:d8:9f:53:
         48:d0:6f:9a:20:c0:6f:b9:2a:a9:1f:f9:70:57:ff:34:1e:20:
         5c:6f:43:a2:31:57:9d:da:c8:61:c9:cd:30:99:95:59:30:ee:
         f6:84:c5:07:9c:b1:4c:5a:c7:64:b8:05:db:7e:fb:aa:c3:59:
         10:17:42:08:67:7d:d2:f2:97:49:af:b1:08:0d:bf:7f:1f:cc:
         77:40:f2:4f:24:82:93:b0:14:0c:29:49:ee:d1:c2:57:2d:94:
         86:38:8c:80:9b:7d:1a:6f:f9:e4:96:3d:14:e3:53:c5:27:f0:
         42:ad:7c:44:55:80:4c:f2:6f:02:9d:af:a5:fa:d9:22:8b:ef:
         c6:22:ec:f4:82:9d:16:09:50:5d:e7:6f:31:d9:c7:45:b4:5f:
         e9:23:0d:f0:b7:12:9e:af:67:33:ab:5f:72:ba:92:2a:b0:34:
         52:1b:24:78:01:22:20:55:ea:a5:cb:9e:18:40:14:82:f9:a1:
         c4:fa:34:96:36:52:79:5c:d3:a7:a1:f7:1e:3c:4a:43:83:64:
         61:35:f3:cc:f3:a1:52:f4:68:85:32:d0:af:5e:ef:57:05:71:
         20:a8:ac:3e:ef:3a:c6:bb:8a:a1:3b:b9:6b:14:64:45:ac:ce:
         7f:13:07:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org