Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/30EBC44A31CF11EB91189051F8AEA228.roa
File:                     30EBC44A31CF11EB91189051F8AEA228.roa (raw, json)
Hash identifier:          9y8rM8wA3+yf9vecSayT1aoHjlASsVxwKpYS+yYLVu0=
Subject key identifier:   06:39:21:9B:E9:25:0C:DC:59:DE:AC:FA:6E:BD:7E:E3:FB:7C:02:3B
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       67
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/30EBC44A31CF11EB91189051F8AEA228.roa
Signing time:             Sat 28 Nov 2020 23:12:31 +0000
ROA not before:           Sun 29 Nov 2020 23:12:28 +0000
ROA not after:            Sun 30 Jul 2023 23:12:28 +0000
asID:                     37119
IP address blocks:        105.173.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 29 23:12:28 2020 GMT
            Not After : Jul 30 23:12:28 2023 GMT
        Subject: CN=5fc2d95f-a261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:c0:58:13:64:08:47:0f:37:d4:96:ab:97:
                    f2:d1:4b:73:10:de:99:10:c4:85:86:db:97:61:50:
                    a6:2e:47:0b:a8:9c:a2:17:6e:e2:a6:2c:40:e4:87:
                    bc:d9:c2:d2:66:f5:b7:8d:3b:c6:ea:72:db:ee:b7:
                    8c:97:28:7b:58:ca:7f:b2:e2:87:3a:2f:93:07:7c:
                    bd:27:cb:5e:6f:d3:e1:94:40:fc:95:03:92:0f:d8:
                    cb:20:70:46:a9:4b:9e:73:ac:83:7c:5a:39:dd:f2:
                    27:77:ce:85:d7:0a:44:0a:e7:72:b6:37:54:76:df:
                    fe:46:99:32:26:2b:7b:8e:7e:a9:02:6a:de:e4:8b:
                    35:e4:45:ac:4c:6e:bb:d7:dc:01:49:f3:8f:46:ab:
                    24:52:1f:da:e5:a3:94:5b:0a:79:98:f9:ac:57:f7:
                    b2:7b:98:30:b4:e6:49:1f:c4:ca:9e:9b:68:8f:d7:
                    df:e2:a8:b4:9b:b8:0c:c5:6a:a6:33:aa:21:95:d5:
                    8e:4e:6a:4d:af:6b:1a:4a:c6:5d:e1:6e:75:bb:ba:
                    64:af:85:34:2f:03:08:96:05:cf:73:ac:87:3c:3f:
                    3c:97:d6:3c:92:12:81:58:80:d3:96:ae:5f:28:1e:
                    2e:aa:f3:bb:fe:0f:8a:7e:04:7e:86:48:79:a1:27:
                    4d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:39:21:9B:E9:25:0C:DC:59:DE:AC:FA:6E:BD:7E:E3:FB:7C:02:3B
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/30EBC44A31CF11EB91189051F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.173.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         10:6e:c1:09:8f:34:1c:9e:53:6b:bb:5c:ca:9c:01:a7:13:2d:
         98:fe:d0:12:66:5f:47:07:cd:dd:2b:81:18:d6:c2:96:c0:f3:
         fb:f7:63:bb:fe:2c:3f:61:5d:d7:fd:93:0b:31:ec:12:80:72:
         b5:91:09:b0:0c:52:cc:37:ff:91:5a:b4:df:c2:2f:5e:31:dc:
         71:a3:7c:d6:e5:7c:90:4e:fc:05:71:55:79:7a:19:74:03:c1:
         cf:f5:72:83:32:52:7c:1e:a0:cc:1c:09:7b:2a:3c:f1:1a:cb:
         fa:4e:30:94:58:45:a9:0f:a4:83:b0:5c:ad:8a:a7:d8:2a:35:
         00:be:0c:63:ba:0a:58:fc:f2:3c:1a:83:3a:8a:b5:05:38:8e:
         dc:92:01:01:7f:98:55:e2:08:da:e6:c0:77:99:65:09:fe:42:
         c0:3d:e0:07:2d:70:c6:18:89:76:04:2e:73:a0:89:a4:35:29:
         b8:93:80:4a:9f:1c:26:b3:db:fc:7a:c7:8e:30:10:4b:fc:b3:
         3d:03:fb:d0:06:b9:dd:71:78:1b:94:3c:34:26:2e:2c:93:92:
         fc:ef:5a:26:3c:9f:ee:e9:56:ee:2e:d6:a6:39:f5:81:ad:ad:
         45:a8:b9:7f:04:ed:6d:cf:9c:86:eb:76:29:b0:28:28:98:bb:
         29:a4:25:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----