Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/839F023831BB11EB8C649639F8AEA228.roa
File:                     839F023831BB11EB8C649639F8AEA228.roa (raw, json)
Hash identifier:          K5j+jOw7vlxkpaMGvCwDKt2ZXZRjrAWZd6mW71kiz38=
Subject key identifier:   A0:5E:2B:72:36:10:39:C0:9D:FE:AF:85:C7:DA:5B:0A:63:7D:F1:63
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       1B
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/839F023831BB11EB8C649639F8AEA228.roa
Signing time:             Sat 28 Nov 2020 20:51:40 +0000
ROA not before:           Sat 28 Nov 2020 20:51:35 +0000
ROA not after:            Sun 30 Jul 2023 20:51:35 +0000
asID:                     37119
IP address blocks:        105.168.128.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 28 20:51:35 2020 GMT
            Not After : Jul 30 20:51:35 2023 GMT
        Subject: CN=5fc2b85c-3bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d5:07:b4:a5:67:06:b4:c8:ca:07:33:1b:4b:
                    35:dd:c7:5b:93:47:4b:a7:31:f0:c9:ae:c0:c7:95:
                    43:56:fc:63:ab:c8:7b:6c:f1:28:26:c7:f8:89:40:
                    86:6d:97:a9:0f:38:eb:38:82:fd:6d:aa:e6:a5:6e:
                    a4:52:14:0d:63:32:a7:4a:05:a1:76:d8:65:ae:38:
                    45:a2:8b:d0:ea:06:be:7e:48:eb:9d:89:b0:d1:2c:
                    83:97:e3:8f:1c:99:7e:36:ee:8e:1c:b7:08:be:df:
                    48:bc:79:08:57:1b:a2:34:83:6d:74:8e:2d:bb:59:
                    12:74:ba:68:9c:14:b7:59:f2:9e:f3:be:17:70:bf:
                    98:8d:3c:51:c9:e2:66:c3:07:a5:07:63:60:d5:78:
                    e5:c4:ff:75:ad:ef:20:20:a2:a4:13:47:86:28:59:
                    dc:ea:18:47:10:41:cf:c0:68:79:7d:e6:5a:c6:56:
                    0a:c1:e2:7b:e1:c3:82:4b:de:5d:bb:bf:33:ff:b8:
                    21:ee:d9:2b:80:bf:99:e2:af:a3:ea:91:4a:8f:86:
                    ca:eb:36:3b:aa:54:6b:6c:1f:29:75:a3:09:bb:18:
                    0c:5f:7f:83:37:64:22:38:03:c2:d2:cc:2b:8f:85:
                    38:2e:69:6a:a5:6b:30:e0:c1:2e:6e:91:55:f3:6c:
                    f7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5E:2B:72:36:10:39:C0:9D:FE:AF:85:C7:DA:5B:0A:63:7D:F1:63
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/839F023831BB11EB8C649639F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.168.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b5:e1:9e:bd:ae:32:95:0d:64:b8:0e:4e:a4:1e:99:70:4e:2f:
         42:61:2e:5d:b4:ed:97:61:7b:b0:2b:6d:1a:ce:7a:0a:29:04:
         28:21:e9:af:3c:29:59:45:65:0f:15:ae:2c:12:28:80:dc:72:
         27:5c:b0:e1:db:39:48:93:62:13:17:e4:47:f4:a2:1f:50:ba:
         dc:78:df:d1:0b:0f:ca:46:61:78:a3:d9:ed:d2:b8:31:1b:c7:
         21:bc:20:05:c3:d9:df:01:52:9f:3b:c2:44:b8:c2:0c:c6:06:
         1c:2a:e6:82:83:8b:7b:9f:4d:d5:ff:4f:99:65:96:7f:6b:45:
         7b:e1:4b:74:c5:91:5b:2d:c7:f7:70:3d:03:04:23:fa:47:57:
         89:c1:fe:d8:fb:fa:e4:9e:8c:5f:13:09:bd:d3:fa:05:7c:df:
         1e:53:5b:7d:a2:b5:9e:00:41:f2:7e:f1:e4:3d:d3:1e:85:3f:
         ab:26:6a:b4:fc:13:8e:30:02:36:68:54:b1:18:78:45:e3:f5:
         27:64:ec:a6:24:d6:b4:ab:9d:ee:d7:08:24:db:81:d0:93:07:
         d5:7d:85:3e:92:87:5d:79:3f:e8:05:9c:82:92:ab:77:bf:08:
         e6:01:b7:40:62:ac:7e:6d:5d:50:29:95:32:6c:a2:d6:2e:63:
         7d:aa:da:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----