Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/7CCD771E31D411EBA19B4157F8AEA228.roa
File:                     7CCD771E31D411EBA19B4157F8AEA228.roa (raw, json)
Hash identifier:          UkA5HF2TXt+sMYxhqgfC8bS8LGnEpNdd/fwqjPYUeBY=
Subject key identifier:   4B:13:0A:88:0E:E9:1C:2A:C2:5C:18:20:23:E3:17:BC:93:BD:62:8B
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       7E
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/7CCD771E31D411EBA19B4157F8AEA228.roa
Signing time:             Sat 28 Nov 2020 23:50:26 +0000
ROA not before:           Sun 29 Nov 2020 23:50:22 +0000
ROA not after:            Sun 30 Jul 2023 23:50:22 +0000
asID:                     37119
IP address blocks:        105.174.0.0/16 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 29 23:50:22 2020 GMT
            Not After : Jul 30 23:50:22 2023 GMT
        Subject: CN=5fc2e242-4ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:91:ed:54:73:2f:ae:6b:06:67:f3:f0:69:cb:
                    18:d9:8c:a6:bd:ee:6c:32:be:e9:b4:59:87:ac:47:
                    14:f7:bc:71:df:0c:e2:17:1d:d7:df:91:ef:fe:4a:
                    1a:27:3d:e6:23:af:00:94:fa:87:99:e7:7e:e5:b2:
                    13:5e:d7:4a:77:03:2a:e6:a4:7a:2b:3b:ae:85:bd:
                    4a:3d:1c:a0:59:7c:31:49:54:53:35:10:7c:f2:07:
                    df:df:42:79:77:bb:72:4e:0a:e4:e6:a5:55:89:a8:
                    2f:62:a3:dc:3c:19:20:68:d8:b8:50:ab:9a:e3:25:
                    e7:b8:8c:1c:4d:20:e3:75:3f:81:e5:e9:ac:74:52:
                    6d:fa:08:2f:46:11:26:92:4c:9e:d1:3f:8f:4f:bf:
                    93:64:19:1d:04:82:bb:f4:c6:22:db:9f:f9:90:f8:
                    74:90:64:75:03:4f:c1:b0:e9:7c:78:32:69:42:02:
                    13:39:39:bf:41:a8:77:e2:49:8c:37:9b:29:0d:ca:
                    60:fb:57:eb:1e:f8:3f:be:52:52:b5:11:a9:dd:4f:
                    c5:42:ee:75:8e:a0:db:d6:f7:ca:8e:97:7b:e3:29:
                    66:74:65:61:50:8c:87:64:d9:07:7a:d8:e7:7e:3d:
                    0b:d7:a0:be:1f:42:8d:82:04:57:82:d7:23:31:3b:
                    3a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:13:0A:88:0E:E9:1C:2A:C2:5C:18:20:23:E3:17:BC:93:BD:62:8B
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/7CCD771E31D411EBA19B4157F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.174.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7d:0e:a9:62:04:e5:d2:c6:92:a0:fe:95:44:f4:82:b2:14:61:
         0b:47:e2:75:87:46:ff:24:25:94:fa:ac:64:25:f5:bf:c0:dd:
         a1:24:05:21:52:2c:3d:ad:cf:dc:93:53:a8:82:66:98:7a:b8:
         54:a2:ae:05:c1:85:55:05:fa:06:ff:ca:04:a4:59:c8:e5:02:
         b3:57:ff:e3:64:6a:d0:2e:12:7f:c2:d7:93:00:c1:cd:e5:1f:
         90:98:3a:b6:a6:92:01:3e:c7:0b:ba:5b:8a:c0:ba:79:fd:6a:
         30:8c:6f:13:f7:6e:ce:f2:66:47:46:b9:85:3e:e8:ec:11:b8:
         0f:c2:25:68:83:23:15:d1:1b:c8:83:b3:eb:df:38:10:f8:99:
         10:f4:9f:6a:99:2b:0e:44:5c:e9:57:90:c9:9b:7c:2b:b7:5c:
         25:50:bd:eb:d7:74:e3:ab:0e:8d:8c:d3:b0:f3:9a:ab:6f:9b:
         9d:05:32:b8:0d:4e:a7:2b:d2:9f:25:55:8f:f5:4e:6c:e0:6d:
         33:06:1f:55:4b:92:b5:e2:38:56:91:fc:29:49:5d:79:0d:77:
         85:38:a0:e5:33:9e:f2:7b:ce:40:0b:14:6b:95:55:45:32:46:
         04:b3:67:aa:e4:d5:f7:7b:07:5e:92:4b:35:30:42:f1:ed:93:
         45:37:7d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----