Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/2031D93831C911EBAACF4F4BF8AEA228.roa
File:                     2031D93831C911EBAACF4F4BF8AEA228.roa (raw, json)
Hash identifier:          7UYGWA+FbGIEhRav1/uh6XNZtiKWzgSLn7WGv1251GQ=
Subject key identifier:   F9:65:4B:34:96:D9:57:36:B7:2A:CB:AA:66:78:62:B4:BD:9C:4F:28
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       53
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/2031D93831C911EBAACF4F4BF8AEA228.roa
Signing time:             Sat 28 Nov 2020 22:29:06 +0000
ROA not before:           Sat 28 Nov 2020 22:29:01 +0000
ROA not after:            Sun 30 Jul 2023 22:29:01 +0000
asID:                     37119
IP address blocks:        105.172.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 28 22:29:01 2020 GMT
            Not After : Jul 30 22:29:01 2023 GMT
        Subject: CN=5fc2cf32-6214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:96:ae:4a:fc:fb:60:95:7b:39:97:31:11:c4:
                    5e:8a:0d:da:1d:09:70:05:8b:0c:bd:de:73:aa:8a:
                    51:38:2a:3a:89:1d:d1:1f:36:a6:f3:1c:27:c5:e1:
                    34:06:f0:78:af:e6:51:67:39:66:74:e8:64:46:c5:
                    de:1f:cf:73:27:d5:71:3e:c9:99:fe:9d:75:4b:64:
                    e6:6f:66:01:31:89:10:ba:fd:a4:df:31:8a:88:37:
                    92:49:04:fd:a2:e3:66:c3:01:99:f0:80:74:68:f0:
                    1b:f1:3f:0c:5b:c1:05:ee:a4:13:7e:a1:7c:97:81:
                    09:76:af:c5:51:49:fb:10:4b:f2:22:e9:6d:be:fd:
                    66:37:a8:95:be:eb:7d:fb:7b:c6:dd:fc:4d:fb:2b:
                    ae:79:66:36:63:78:9c:1f:53:5c:13:32:d9:6d:2e:
                    b0:10:fe:c7:25:a5:18:91:14:93:a9:c1:d0:0c:44:
                    ea:dc:02:55:9a:15:50:e8:82:b9:5f:42:a7:ea:ae:
                    a4:e4:a8:64:0f:3f:20:d8:53:74:1c:4c:73:39:7e:
                    eb:08:d5:4a:68:fb:b4:59:25:63:69:37:c0:79:fb:
                    26:5f:cd:92:fc:a6:d8:38:5d:60:12:81:bc:ac:0f:
                    3f:bd:4c:39:f4:57:a2:b2:35:b2:20:a0:54:df:5e:
                    cc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:65:4B:34:96:D9:57:36:B7:2A:CB:AA:66:78:62:B4:BD:9C:4F:28
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/2031D93831C911EBAACF4F4BF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.172.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         05:aa:d0:51:db:c1:fe:2b:ec:0a:0f:7e:76:2b:5f:a2:1a:67:
         d2:42:58:95:de:8d:e2:ff:05:b3:b8:7b:26:af:6e:ae:4c:d2:
         3b:1f:47:0b:99:a1:de:81:d7:a0:ab:b2:ea:d9:87:97:c7:f3:
         dc:d0:46:af:e7:8f:39:b7:7c:dd:b8:5c:4f:80:1c:9b:db:59:
         0f:5f:47:1e:a9:90:db:1a:da:89:0d:c9:19:57:55:d4:bf:af:
         86:49:c8:19:7a:a9:92:df:bc:d4:e3:a0:71:8a:93:d2:82:99:
         33:89:c7:ab:44:54:50:c5:62:4f:7e:51:cc:ac:5e:c0:43:11:
         aa:68:76:75:3e:d1:19:18:2d:2d:28:e1:c0:e9:1d:1c:41:d4:
         8f:a5:1c:4c:46:fe:7a:35:16:92:cb:65:de:4e:70:22:d0:7a:
         47:9a:2d:c5:42:cf:ee:4a:46:f3:f0:f1:0a:de:34:48:ce:35:
         b8:d6:a4:ee:c5:53:67:bd:5e:db:9e:63:35:ff:db:98:d7:6c:
         22:bf:3d:03:ab:36:79:2f:77:05:fc:e2:cb:56:e0:56:5c:84:
         c3:3d:47:84:d0:64:f3:58:79:8b:02:86:bd:aa:48:03:7a:12:
         bf:86:1a:46:77:85:f9:37:f2:8f:82:88:e0:59:cf:e3:63:bf:
         db:9f:2e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----