Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/1487696E12FB11EB9AF63216F8AEA228.roa
File:                     1487696E12FB11EB9AF63216F8AEA228.roa (raw, json)
Hash identifier:          6DXpv62FsUIZeyeLd/RZj6qdtmEgcEbY5VbKC3D5zb8=
Subject key identifier:   4C:30:F6:7E:92:93:04:52:4C:75:18:67:6B:9B:5B:58:24:0B:63:09
Certificate issuer:       /CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Certificate serial:       04
Authority key identifier: 36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/1487696E12FB11EB9AF63216F8AEA228.roa
Signing time:             Tue 20 Oct 2020 17:38:37 +0000
ROA not before:           Tue 20 Oct 2020 17:38:29 +0000
ROA not after:            Wed 19 Oct 2022 17:38:29 +0000
asID:                     19905
IP address blocks:        196.216.180.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
        Validity
            Not Before: Oct 20 17:38:29 2020 GMT
            Not After : Oct 19 17:38:29 2022 GMT
        Subject: CN=5f8f209c-81c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:32:8b:ee:7d:cb:6f:7b:c9:f3:16:76:7e:b2:
                    21:b3:77:99:34:93:12:cc:4e:fe:77:0e:20:22:3f:
                    6e:6e:f7:a6:1a:d8:4f:de:39:86:02:07:5b:90:bd:
                    a3:49:09:e4:a3:20:26:79:2a:0d:84:9a:e6:19:00:
                    67:46:bd:ae:6e:6e:23:21:d1:a6:4a:13:34:e9:c0:
                    2f:52:99:b1:6b:2b:a8:ba:42:8c:bf:c5:7e:56:e3:
                    57:e8:bc:8a:15:56:33:0d:bb:d5:69:2a:d0:ca:bf:
                    e8:7e:f3:c7:a0:5d:32:01:93:8c:99:6b:75:4d:82:
                    f9:ce:3d:fd:1a:c1:9a:13:8c:f1:2f:5a:b3:96:d1:
                    37:81:00:41:6c:b0:cf:20:91:fa:c3:3d:4d:16:76:
                    a7:df:9a:03:97:eb:5b:28:8e:cf:98:c9:18:83:e2:
                    a7:6b:6d:26:7f:aa:61:00:bd:ff:d6:ec:af:49:a9:
                    84:5c:0d:8b:8a:ca:d6:df:15:2f:81:4e:e0:79:70:
                    88:1f:f4:65:5a:f0:13:f5:37:9a:39:ba:b2:cc:0a:
                    33:d0:e5:03:f5:b4:c9:f1:a4:50:14:69:a6:06:15:
                    2e:d3:23:88:ba:74:d4:c9:ad:c9:9a:18:79:a8:23:
                    64:23:05:73:3f:8b:a4:5f:91:e8:0c:42:a9:96:c1:
                    bc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:30:F6:7E:92:93:04:52:4C:75:18:67:6B:9B:5B:58:24:0B:63:09
            X509v3 Authority Key Identifier:
                keyid:36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/1487696E12FB11EB9AF63216F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.216.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:cd:60:a8:a7:88:51:3c:38:af:88:9d:43:8a:8b:7c:00:7e:
         80:b7:71:0b:ec:7d:54:a3:7f:46:aa:72:e7:9b:8e:19:0b:57:
         4a:66:5d:cf:f7:c3:5e:86:5d:44:4f:9a:a8:dd:45:f1:24:21:
         42:59:af:2b:ce:8b:7a:23:80:3e:28:1d:3e:6d:c3:91:9e:4c:
         f0:8f:eb:ed:fa:d9:29:35:da:78:f7:a8:a7:80:d0:d7:93:5c:
         db:3e:05:ba:af:51:6d:33:b5:6b:b4:df:7f:0a:1c:7f:5f:70:
         9e:2d:46:68:32:0b:51:98:93:c6:18:8c:53:92:8f:7e:d3:63:
         61:03:4e:4b:c4:97:c1:45:d3:68:0d:d4:93:2f:f1:ec:87:19:
         c1:23:24:86:1d:84:3b:40:d9:61:22:d5:9a:b6:b7:1f:f2:71:
         f5:ea:65:6f:0f:b5:fc:dc:c4:b4:2b:cf:25:56:a2:72:dd:8a:
         78:50:69:e6:e9:29:fc:9e:fc:b2:cb:77:6d:68:65:8e:b5:93:
         8d:01:cb:52:07:1b:4d:0e:b7:b4:bc:14:82:4f:0b:84:7d:b1:
         0e:e5:18:94:9b:da:74:c1:94:2a:d8:da:6d:ee:b5:71:02:a6:
         7b:5c:bc:e2:c2:e8:cd:ca:64:ac:3f:9b:c1:dc:9d:fc:13:fe:
         5c:6c:8e:e6
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
NkRENEFGMTEwLwYDVQQFEygzNkY3NTcyQTAyRTgzRjA3QkQ4MUI3QUU0MjY2MTM2
RUQ1NkZBMDUwMB4XDTIwMTAyMDE3MzgyOVoXDTIyMTAxOTE3MzgyOVowGDEWMBQG
A1UEAxMNNWY4ZjIwOWMtODFjNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJkyi+59y297yfMWdn6yIbN3mTSTEsxO/ncOICI/bm73phrYT945hgIHW5C9
o0kJ5KMgJnkqDYSa5hkAZ0a9rm5uIyHRpkoTNOnAL1KZsWsrqLpCjL/FflbjV+i8
ihVWMw271Wkq0Mq/6H7zx6BdMgGTjJlrdU2C+c49/RrBmhOM8S9as5bRN4EAQWyw
zyCR+sM9TRZ2p9+aA5frWyiOz5jJGIPip2ttJn+qYQC9/9bsr0mphFwNi4rK1t8V
L4FO4HlwiB/0ZVrwE/U3mjm6sswKM9DlA/W0yfGkUBRppgYVLtMjiLp01MmtyZoY
eagjZCMFcz+LpF+R6AxCqZbBvPUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRMMPZ+
kpMEUkx1GGdrm1tYJAtjCTAfBgNVHSMEGDAWgBQ291cqAug/B72Bt65CZhNu1W+g
UDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzZERDQvQTJEMUY1MTYxMjU4MTFFQjk4NERDRjc5RjhBRUEyMjgvTnZkWEtn
TG9Qd2U5Z2JldVFtWVRidFZ2b0ZBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvTnZkWEtnTG9Qd2U5Z2JldVFtWVRidFZ2b0ZBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzZERDQvQTJEMUY1MTYxMjU4MTFFQjk4NERDRjc5RjhB
RUEyMjgvMTQ4NzY5NkUxMkZCMTFFQjlBRjYzMjE2RjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcTYtDANBgkqhkiG9w0BAQsF
AAOCAQEAL81gqKeIUTw4r4idQ4qLfAB+gLdxC+x9VKN/Rqpy55uOGQtXSmZdz/fD
XoZdRE+aqN1F8SQhQlmvK86LeiOAPigdPm3DkZ5M8I/r7frZKTXaePeop4DQ15Nc
2z4Fuq9RbTO1a7Tffwocf19wni1GaDILUZiTxhiMU5KPftNjYQNOS8SXwUXTaA3U
ky/x7IcZwSMkhh2EO0DZYSLVmra3H/Jx9eplbw+1/NzEtCvPJVaict2KeFBp5ukp
/J78sst3bWhljrWTjQHLUgcbTQ63tLwUgk8LhH2xDuUYlJvadMGUKtjabe61cQKm
e1y84sLozcpkrD+bwdyd/BP+XGyO5g==
-----END CERTIFICATE-----