Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/512C5EBC31C111EB9B12EA42F8AEA228.roa
File:                     512C5EBC31C111EB9B12EA42F8AEA228.roa (raw, json)
Hash identifier:          RbXG/pDcn0FmEYQhp4M+/kSak8SuQxaH9Ll29EIGZi8=
Subject key identifier:   76:F4:41:44:C8:AF:61:10:A3:8A:66:A2:80:6A:EB:D8:F6:F6:5F:A7
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       2E
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/512C5EBC31C111EB9B12EA42F8AEA228.roa
Signing time:             Sat 28 Nov 2020 21:33:13 +0000
ROA not before:           Sat 28 Nov 2020 21:33:07 +0000
ROA not after:            Sun 30 Jul 2023 21:33:07 +0000
asID:                     37119
IP address blocks:        105.169.128.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 28 21:33:07 2020 GMT
            Not After : Jul 30 21:33:07 2023 GMT
        Subject: CN=5fc2c218-b4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b3:01:fa:e1:09:23:f5:18:df:14:0e:c7:f9:
                    29:bc:91:f3:9a:4d:00:25:aa:ff:34:01:3b:74:11:
                    16:dd:26:15:13:1b:59:66:f5:ac:5a:28:e8:d1:fa:
                    1e:d8:3c:44:37:1a:19:73:0c:cc:0d:36:17:ab:94:
                    cc:5b:f7:ca:b7:51:38:bd:de:ee:32:b4:8c:23:6d:
                    1f:59:40:5a:8a:be:2b:ea:6a:bb:16:3d:33:99:e1:
                    e5:f3:7e:b7:0c:c0:ec:71:6e:65:16:2d:0c:82:5d:
                    9e:d0:1b:a7:f6:83:e2:28:b0:ac:9d:d7:22:6b:05:
                    07:f7:a4:0e:a4:74:09:d2:d9:21:3f:17:2f:43:50:
                    a8:db:cf:f0:bf:3c:f3:98:82:39:1d:65:08:7a:06:
                    f9:81:2b:f8:43:e7:20:72:04:58:74:49:a7:1b:59:
                    6b:35:db:54:20:d3:42:fc:f7:2d:d6:57:8d:f4:bf:
                    9d:a4:df:a5:d4:43:7f:98:61:ee:97:8f:2f:e7:ba:
                    4d:e5:12:4d:c4:07:fd:50:e4:45:77:b1:f5:0b:dc:
                    69:f6:7b:82:47:93:ad:ae:86:13:9c:6b:70:b9:14:
                    b0:9c:4f:ea:2b:d6:f9:44:73:88:d6:52:c6:05:91:
                    47:69:4b:94:21:b1:77:a0:39:e0:27:c5:64:80:2c:
                    18:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F4:41:44:C8:AF:61:10:A3:8A:66:A2:80:6A:EB:D8:F6:F6:5F:A7
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/512C5EBC31C111EB9B12EA42F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.169.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4b:76:05:91:f7:c8:fa:c8:e7:6f:85:0a:2b:0c:5b:85:62:64:
         2b:4b:47:78:69:9b:e9:5a:7d:3b:14:76:d6:4d:f4:f3:ba:aa:
         f3:8a:83:8e:82:17:6e:43:9c:bc:e7:18:67:33:32:01:f1:61:
         89:b0:51:e8:3c:01:a3:2e:d1:52:d9:08:2e:e0:e7:6b:57:cf:
         10:11:5b:0d:70:c7:1f:83:21:6d:24:5f:34:de:e3:21:d3:5d:
         1c:4d:90:ed:b1:6c:e7:a6:ee:8f:5a:91:84:60:79:0d:e5:b8:
         6d:d4:a1:36:e4:3e:3c:80:28:a5:d3:c4:a6:9b:6a:f9:d2:90:
         87:1c:ea:89:7d:08:19:87:90:42:47:68:bb:cc:01:b0:63:c6:
         37:aa:d5:ec:a8:eb:85:ea:a9:70:bd:d2:c5:d8:5f:bd:e7:3e:
         16:c1:71:c9:f8:82:2a:ea:d8:26:4d:68:c5:79:76:e1:23:0a:
         78:7a:50:7e:b6:58:c7:9f:00:cd:03:b8:da:f1:20:a4:9d:5a:
         6a:27:e5:0c:60:2c:a1:ab:0e:6c:80:b5:d2:6b:0d:9b:7e:80:
         c1:ed:31:3a:a8:69:49:92:13:38:1d:35:35:15:48:ab:fc:95:
         9c:96:5a:d3:65:81:22:29:2c:cf:68:c9:ca:16:33:05:c9:84:
         74:f9:40:ce
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBLjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZE
MEY1MEFGMTEwLwYDVQQFEyhBRTk4QTVGREFEMkRDOUY0RkMxQkU0N0Y2Njg1N0E4
QzQ3OTg4MTAyMB4XDTIwMTEyODIxMzMwN1oXDTIzMDczMDIxMzMwN1owGDEWMBQG
A1UEAxMNNWZjMmMyMTgtYjRjMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMKzAfrhCSP1GN8UDsf5KbyR85pNACWq/zQBO3QRFt0mFRMbWWb1rFoo6NH6
Htg8RDcaGXMMzA02F6uUzFv3yrdROL3e7jK0jCNtH1lAWoq+K+pquxY9M5nh5fN+
twzA7HFuZRYtDIJdntAbp/aD4iiwrJ3XImsFB/ekDqR0CdLZIT8XL0NQqNvP8L88
85iCOR1lCHoG+YEr+EPnIHIEWHRJpxtZazXbVCDTQvz3LdZXjfS/naTfpdRDf5hh
7pePL+e6TeUSTcQH/VDkRXex9QvcafZ7gkeTra6GE5xrcLkUsJxP6ivW+URziNZS
xgWRR2lLlCGxd6A54CfFZIAsGKkCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBR29EFE
yK9hEKOKZqKAauvY9vZfpzAfBgNVHSMEGDAWgBSumKX9rS3J9Pwb5H9mhXqMR5iB
AjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RDBGNTAvNUVBQUE2QjgyNThGMTFFQkI3MEI3QzE5RjhBRUEyMjgvcnBpbF9h
MHR5ZlQ4Ry1SX1pvVjZqRWVZZ1FJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvcnBpbF9hMHR5ZlQ4Ry1SX1pvVjZqRWVZZ1FJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDBGNTAvNUVBQUE2QjgyNThGMTFFQkI3MEI3QzE5RjhB
RUEyMjgvNTEyQzVFQkMzMUMxMTFFQjlCMTJFQTQyRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBWmpgDANBgkqhkiG9w0BAQsF
AAOCAQEAS3YFkffI+sjnb4UKKwxbhWJkK0tHeGmb6Vp9OxR21k3087qq84qDjoIX
bkOcvOcYZzMyAfFhibBR6DwBoy7RUtkILuDna1fPEBFbDXDHH4MhbSRfNN7jIdNd
HE2Q7bFs56buj1qRhGB5DeW4bdShNuQ+PIAopdPEpptq+dKQhxzqiX0IGYeQQkdo
u8wBsGPGN6rV7KjrheqpcL3Sxdhfvec+FsFxyfiCKurYJk1oxXl24SMKeHpQfrZY
x58AzQO42vEgpJ1aaiflDGAsoasObIC10msNm36Awe0xOqhpSZITOB01NRVIq/yV
nJZa02WBIiksz2jJyhYzBcmEdPlAzg==
-----END CERTIFICATE-----