Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/63D017C212FC11EBBE3E7817F8AEA228.roa
File:                     63D017C212FC11EBBE3E7817F8AEA228.roa (raw, json)
Hash identifier:          0Q0GPCdM37Y52WRctELDs7WPR4RmhlRVfdxmKZM/r94=
Subject key identifier:   B4:DC:D2:90:37:B3:26:9D:CF:62:E6:21:F4:81:6B:C6:0C:C1:B4:BF
Certificate issuer:       /CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Certificate serial:       06
Authority key identifier: 36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/63D017C212FC11EBBE3E7817F8AEA228.roa
Signing time:             Tue 20 Oct 2020 17:47:59 +0000
ROA not before:           Tue 20 Oct 2020 17:47:54 +0000
ROA not after:            Wed 19 Oct 2022 17:47:54 +0000
asID:                     19905
IP address blocks:        196.216.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
        Validity
            Not Before: Oct 20 17:47:54 2020 GMT
            Not After : Oct 19 17:47:54 2022 GMT
        Subject: CN=5f8f22cf-e782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:82:14:06:d9:3f:83:d5:95:65:6c:7d:ab:10:
                    21:da:22:96:bc:cd:03:0a:5e:c9:e6:27:dc:7b:df:
                    db:ad:ce:25:1c:19:6e:8d:ba:05:4d:20:76:df:4f:
                    ad:34:36:e7:4b:f8:ff:d1:69:ea:a5:6e:9b:20:64:
                    81:d5:63:e2:d3:45:a7:6e:06:9c:74:c1:30:50:47:
                    77:c6:b3:8b:86:46:57:d2:b3:9b:a6:b9:26:38:87:
                    ad:01:49:af:44:7d:53:81:0f:3a:54:93:46:4f:f2:
                    39:2d:e2:77:58:d1:43:cf:7f:80:5d:b7:8a:59:2b:
                    9e:f2:9f:ed:54:8e:fe:9a:ff:f3:6e:e1:47:c6:7f:
                    04:0f:bc:6f:a9:65:e7:cc:23:f6:99:c5:30:ca:05:
                    74:22:0b:04:25:73:16:e2:60:de:d9:5a:43:df:9a:
                    8a:88:b8:d1:52:a1:05:36:58:43:94:35:a2:c6:70:
                    df:4b:5c:1b:f9:f9:15:1f:d1:25:85:11:d1:48:1b:
                    65:77:52:68:57:21:c9:12:d2:30:fd:7a:2d:e9:80:
                    d8:f9:05:05:70:a6:a4:28:90:8a:ca:73:44:b7:9f:
                    14:b3:2e:9d:ed:64:ac:13:0e:4d:80:82:7b:53:99:
                    5a:13:b2:10:16:f7:1a:f5:ea:56:63:3c:50:fb:41:
                    cf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DC:D2:90:37:B3:26:9D:CF:62:E6:21:F4:81:6B:C6:0C:C1:B4:BF
            X509v3 Authority Key Identifier:
                keyid:36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/63D017C212FC11EBBE3E7817F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.216.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:0e:18:0f:61:72:9f:8f:47:33:ad:18:8b:6a:a0:35:4b:bf:
         f0:35:d7:a1:d6:9f:79:be:af:5a:9c:c0:bf:48:60:8d:84:52:
         a7:71:70:27:63:6d:33:de:ea:b2:98:82:65:83:d3:c9:81:b2:
         31:7c:bc:a8:bc:7d:ce:28:41:41:3a:12:01:33:e5:53:76:7b:
         43:76:db:88:69:c0:01:f6:63:8f:e9:50:da:87:68:f8:76:33:
         8c:f6:7f:b0:2c:17:5c:da:4e:46:ef:cd:7b:04:c2:38:09:f5:
         8f:73:48:67:c7:29:4b:85:d2:76:09:b2:f3:82:3e:1a:99:31:
         cf:a5:f1:0f:3a:b6:26:0d:2b:c0:c6:48:91:4d:5d:e6:93:06:
         7a:0f:bb:ea:38:e8:78:69:d1:46:26:f1:a9:45:8b:02:85:75:
         f0:df:18:19:ac:58:4d:9c:95:2b:2b:27:0b:36:83:90:f6:f3:
         8d:75:2d:50:4d:e7:4c:49:86:fe:f2:e5:91:50:51:6a:b3:fd:
         0a:5a:55:0b:48:fc:49:9a:af:03:b1:41:48:b6:ea:f7:dc:80:
         77:23:f6:b4:48:0e:04:f7:08:25:4d:d9:5f:4f:33:cb:6c:b6:
         ff:fa:1c:5d:d7:38:2b:af:33:f2:45:0e:9b:ce:0b:ae:d1:80:
         0a:e0:48:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----