Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5D2B1F5431C711EB83785349F8AEA228.roa
File:                     5D2B1F5431C711EB83785349F8AEA228.roa (raw, json)
Hash identifier:          oRYiNfecUDB7GA6OdX77I/bhKbvcaQyAGrU59lknGKI=
Subject key identifier:   32:CB:AC:B8:FE:AA:CC:92:0F:50:62:B7:CD:E8:AB:D7:52:85:14:21
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       48
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5D2B1F5431C711EB83785349F8AEA228.roa
Signing time:             Sat 28 Nov 2020 22:16:30 +0000
ROA not before:           Sat 28 Nov 2020 22:16:26 +0000
ROA not after:            Sun 30 Jul 2023 22:16:26 +0000
asID:                     37119
IP address blocks:        105.172.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 28 22:16:26 2020 GMT
            Not After : Jul 30 22:16:26 2023 GMT
        Subject: CN=5fc2cc3e-858a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:26:b6:23:b0:8b:04:cf:b3:8b:45:78:92:71:
                    67:49:6e:09:2a:4e:f2:71:8b:4d:37:b8:1c:99:e1:
                    c4:f2:4f:85:a6:66:96:88:dd:4f:b7:1c:cd:b5:ae:
                    8f:93:06:91:9d:5d:19:99:db:f7:da:69:26:2b:4f:
                    3e:76:9e:5a:80:31:ec:8b:fd:49:3a:d8:1f:1d:32:
                    ca:1d:8e:5f:60:b4:a9:fb:67:4a:a0:9f:c4:d3:5c:
                    c9:6d:4c:01:2a:da:c8:eb:fb:a7:0b:25:96:80:e5:
                    d3:f6:70:33:d6:d3:54:62:b5:64:de:e8:2e:59:71:
                    5e:84:0a:b0:ba:4e:82:2e:4d:7b:e2:92:fd:83:d7:
                    f3:1d:c5:65:6d:02:df:11:ed:e1:55:15:c7:c4:08:
                    57:7f:4c:e2:91:b0:b7:be:ab:48:54:4e:cf:80:81:
                    b4:af:38:e4:5d:88:d4:1e:1d:9a:a8:84:38:5b:1c:
                    3e:1f:fd:fe:f2:52:6d:b8:cf:72:53:d3:8c:e0:c2:
                    42:e1:3e:18:e1:7e:27:36:be:31:73:71:d4:49:ac:
                    9e:8d:a6:49:17:93:05:3a:28:06:f5:70:62:fd:ba:
                    b5:37:6d:d9:60:17:e5:f4:6c:10:83:1e:95:bb:db:
                    ca:98:34:20:a6:ad:82:1f:fa:79:01:ae:6a:67:73:
                    cc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CB:AC:B8:FE:AA:CC:92:0F:50:62:B7:CD:E8:AB:D7:52:85:14:21
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5D2B1F5431C711EB83785349F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.172.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b6:80:a0:db:de:18:ee:e0:18:2a:f2:8b:12:6d:f5:f8:76:b4:
         f8:b8:f9:14:7b:15:0e:41:b2:7d:35:c4:59:88:7e:ce:b4:76:
         c0:d7:21:38:14:f8:10:0a:a4:da:f6:a5:ba:1f:9f:6c:9e:fe:
         c0:f1:51:fc:c4:57:34:df:a6:15:87:f6:5b:02:8f:ad:99:24:
         88:f0:cd:81:02:5b:30:ba:6e:74:fa:59:fe:0e:2e:e1:61:04:
         08:74:f6:4c:03:3d:2b:6e:d2:43:57:cf:9e:85:e1:ad:43:32:
         1e:5e:ef:1f:18:5c:c7:50:c3:23:18:e9:d5:c7:3b:67:d7:29:
         d1:10:aa:5c:db:a5:a6:78:1f:5d:60:32:29:dc:83:98:17:5c:
         01:56:a2:ba:23:95:77:db:30:12:58:7d:b7:9a:80:f6:49:af:
         a0:5d:6b:e5:75:82:73:82:32:6f:f6:b2:47:97:b4:dd:70:42:
         6e:ef:87:7d:f8:70:93:e8:bf:84:cd:e5:06:e5:4a:81:ac:33:
         2d:4c:15:a8:c7:5d:53:f4:45:e9:cf:b4:b4:99:1d:ee:a7:73:
         3d:9a:1a:c2:a4:f8:33:19:ec:cc:22:33:10:19:04:80:22:39:
         9c:dd:93:50:76:9b:91:ad:9b:79:c8:35:b4:0f:d2:db:b4:09:
         e2:e2:f8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----