Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/6CF921EA31C911EB9B79AC4BF8AEA228.roa
File:                     6CF921EA31C911EB9B79AC4BF8AEA228.roa (raw, json)
Hash identifier:          E14Xf9e2Sa97Y7QVFop9ljnhL+FmR0tySY9Iz8WAirQ=
Subject key identifier:   3D:52:86:F4:53:AA:D1:71:45:2D:47:8F:F5:A1:A4:86:DF:3E:B5:2A
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       55
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/6CF921EA31C911EB9B79AC4BF8AEA228.roa
Signing time:             Sat 28 Nov 2020 22:31:15 +0000
ROA not before:           Sat 28 Nov 2020 22:31:11 +0000
ROA not after:            Sun 30 Jul 2023 22:31:11 +0000
asID:                     37119
IP address blocks:        105.172.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 28 22:31:11 2020 GMT
            Not After : Jul 30 22:31:11 2023 GMT
        Subject: CN=5fc2cfb3-996b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:92:67:bc:ab:0b:e3:a2:2c:f2:fd:9f:6a:23:
                    98:9c:39:46:3c:39:17:15:7f:9c:c5:82:b4:58:b0:
                    13:1f:e5:60:fc:1a:13:62:be:9c:b5:68:f8:ad:22:
                    e5:ed:45:a6:c8:6e:fb:58:11:5c:a5:ca:75:e2:38:
                    5a:c3:c8:fc:1e:4f:63:05:e6:15:cc:8e:1c:d5:da:
                    93:2d:bc:86:b0:a6:4f:79:1d:42:fc:56:5b:bc:5b:
                    65:03:84:35:53:dc:80:8a:e5:e4:a6:95:53:a7:d0:
                    84:7b:62:7e:70:c3:be:bf:a9:08:29:da:f3:9c:b1:
                    fb:93:53:bf:10:ea:a0:f3:0d:c4:76:dd:91:b9:f2:
                    a4:e8:9f:cc:4d:08:68:22:d9:ee:e1:dd:03:c3:1e:
                    6c:a6:db:ef:ea:ec:ac:16:bd:a6:db:03:e6:8a:3e:
                    71:35:78:71:26:95:11:86:7f:ca:90:b7:75:66:d9:
                    97:fc:d4:17:05:73:01:90:d7:15:65:10:aa:ca:5b:
                    fa:2e:3f:e1:32:de:14:fc:1a:eb:86:69:d7:a0:d9:
                    a3:5c:bb:5f:9b:b0:71:23:5a:41:29:98:37:65:76:
                    01:fc:38:a0:b5:44:5f:30:bf:44:40:6e:98:8d:6c:
                    a1:0b:71:91:b8:11:12:a1:af:16:c1:96:0b:02:31:
                    c7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:52:86:F4:53:AA:D1:71:45:2D:47:8F:F5:A1:A4:86:DF:3E:B5:2A
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/6CF921EA31C911EB9B79AC4BF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.172.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bb:78:5a:1d:24:59:d1:76:43:07:e5:44:d9:16:94:b5:b6:60:
         a4:4b:01:db:ae:1a:ab:78:99:71:51:ef:f8:07:b4:e8:c4:0c:
         60:49:04:8f:e6:ab:54:12:c8:2d:53:4a:ed:5c:1b:cf:f6:dc:
         54:5f:d5:35:43:9b:78:e9:20:a0:cc:9c:9b:73:f6:a9:32:99:
         5e:3f:2a:8e:29:f9:47:cc:74:d0:e7:cb:8e:4d:88:7e:ad:00:
         b2:86:de:9e:79:ac:24:33:1e:e4:af:b4:43:99:48:ca:0e:01:
         64:f6:f3:db:56:82:ad:ae:c5:08:8b:c2:51:40:70:c1:4d:c8:
         af:20:a6:52:86:d0:54:4e:10:13:ff:4f:87:24:7f:18:b4:0f:
         27:17:1c:cc:b5:ce:00:c7:aa:27:d1:8c:88:a1:38:5f:66:66:
         32:d2:59:39:73:5d:84:f3:b3:21:a1:70:1a:d2:7b:3e:4b:a3:
         b7:ba:89:c3:23:62:d2:bb:f5:29:31:16:7b:7c:71:0f:da:8d:
         3d:86:77:a4:3c:16:0b:3b:62:32:0a:45:08:12:69:eb:e5:83:
         c7:c0:6a:f4:bd:54:39:d8:f6:f5:8e:bc:d8:b5:e9:c4:cb:e0:
         52:9e:1a:cc:5f:f9:30:3c:88:8b:d2:68:db:23:5b:30:36:4a:
         d2:e5:0c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----