Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/09BFC1CC31BC11EBBF63B73AF8AEA228.roa
File:                     09BFC1CC31BC11EBBF63B73AF8AEA228.roa (raw, json)
Hash identifier:          TBQkS+TdU1S7q44a/Mu4bOK+kFDRd+pKq7a+sQc6Y/U=
Subject key identifier:   CA:69:4F:51:71:73:A2:1E:5C:25:A9:34:38:FB:C1:29:60:20:39:3B
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       1D
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/09BFC1CC31BC11EBBF63B73AF8AEA228.roa
Signing time:             Sat 28 Nov 2020 20:55:25 +0000
ROA not before:           Sat 28 Nov 2020 20:55:21 +0000
ROA not after:            Sun 30 Jul 2023 20:55:21 +0000
asID:                     37119
IP address blocks:        105.168.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 28 20:55:21 2020 GMT
            Not After : Jul 30 20:55:21 2023 GMT
        Subject: CN=5fc2b93d-bd31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:48:f3:16:79:49:27:d1:87:b5:8a:da:cc:80:
                    b6:c9:72:1c:aa:a2:02:4d:06:2b:2c:90:98:00:83:
                    50:ab:d9:62:d7:5b:45:02:65:c7:eb:87:75:e7:cb:
                    25:fe:f1:f4:25:4d:ca:96:d4:b1:54:34:93:70:1b:
                    9d:57:fe:50:b4:4b:84:32:fd:16:a3:bd:e3:98:75:
                    35:b0:4b:3a:d5:17:d9:4f:c0:0a:cd:3c:3d:50:95:
                    99:f3:be:23:89:fd:ea:1f:f5:dd:14:e5:51:cf:93:
                    7d:c6:b7:29:d9:d4:6b:fc:96:98:de:21:61:f2:4a:
                    0a:fa:32:ae:de:21:7a:f7:6a:9f:29:03:03:7a:5c:
                    bd:0b:70:45:b1:46:0a:f9:97:02:d0:0d:94:36:90:
                    00:db:57:87:5b:75:58:9c:02:2b:83:f5:96:29:09:
                    2e:8f:56:3b:2c:34:c2:5a:69:00:e7:52:cf:14:59:
                    64:22:dd:35:57:ba:12:f5:87:db:4b:bb:af:a8:d0:
                    b3:28:de:1d:b4:b8:6d:37:75:39:06:b8:ba:86:e0:
                    56:d6:03:89:fa:bd:06:c1:fc:dd:e1:3b:cb:db:ba:
                    0d:fd:e0:f5:f1:23:30:6d:e0:de:c0:82:46:30:93:
                    0c:d9:55:4c:b8:0f:5b:82:4a:35:f0:b2:a5:83:cf:
                    c6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:69:4F:51:71:73:A2:1E:5C:25:A9:34:38:FB:C1:29:60:20:39:3B
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/09BFC1CC31BC11EBBF63B73AF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.168.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         93:f4:e6:3f:9f:2f:eb:22:36:dc:55:fe:9c:07:c4:86:c8:98:
         24:02:01:e6:c5:6f:e1:0b:40:4b:3b:66:ae:bc:5c:7b:c0:62:
         5d:32:44:5a:58:6b:ec:d1:35:91:8d:e4:86:36:27:44:bf:f3:
         ba:ac:cc:74:a1:a3:99:56:00:ed:1c:ca:8d:20:89:99:cf:67:
         ea:4c:e5:d5:c5:99:a5:92:97:13:68:21:52:c0:b4:e2:db:44:
         4c:f9:6a:c6:39:1f:a5:59:54:1f:9c:97:d4:82:8f:59:9a:33:
         a4:a8:b8:35:fb:9d:e9:39:76:90:96:c4:9e:50:86:65:37:8a:
         d0:5e:cc:1e:f1:8d:e2:e2:e9:ad:55:71:64:b8:47:05:7b:75:
         f9:49:22:52:80:2e:de:46:2c:e7:59:79:65:19:e8:1c:43:2b:
         66:84:57:79:ee:f8:eb:5b:96:1c:9c:6f:26:4b:12:0e:28:69:
         87:06:23:d6:4e:43:61:b3:41:4f:84:fd:e1:9d:3b:4a:7f:3b:
         70:1e:35:c8:15:b6:86:cd:70:f5:1f:ee:a5:65:46:6e:69:b9:
         12:77:11:65:b8:c7:65:be:30:3b:1d:bb:14:df:96:0f:94:63:
         6d:dc:f7:02:fd:c6:38:a8:f2:ff:c9:29:31:a7:75:47:fc:77:
         02:33:1d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----