Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A91EAB3E31D011EB92280D53F8AEA228.roa
File:                     A91EAB3E31D011EB92280D53F8AEA228.roa (raw, json)
Hash identifier:          sp1xUUjehX0n9kgZ6OognitaWe+u7eu3GcbOAepJSfQ=
Subject key identifier:   69:E8:F4:2D:92:F5:39:6E:AA:FA:14:0B:A9:DC:4F:E2:D5:E2:2F:E5
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       6F
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A91EAB3E31D011EB92280D53F8AEA228.roa
Signing time:             Sat 28 Nov 2020 23:23:03 +0000
ROA not before:           Sun 29 Nov 2020 23:22:58 +0000
ROA not after:            Sun 30 Jul 2023 23:22:58 +0000
asID:                     37119
IP address blocks:        105.173.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 29 23:22:58 2020 GMT
            Not After : Jul 30 23:22:58 2023 GMT
        Subject: CN=5fc2dbd6-f88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:41:67:6d:dd:a4:0e:d8:f6:3f:93:5f:13:e6:
                    1c:6e:9c:88:16:f3:18:d6:53:75:0e:4d:85:62:5a:
                    57:e0:fa:65:80:02:aa:f9:e4:e7:2e:34:25:7a:ab:
                    72:06:48:b5:8e:e6:2a:32:f1:ff:c9:6b:83:75:cd:
                    ec:d9:c9:c6:f5:8c:81:7e:e8:3b:35:71:8d:68:1e:
                    a2:06:56:30:1f:9e:48:15:25:0f:40:65:2a:22:c9:
                    fc:aa:df:1e:4b:9a:7e:58:6e:56:c0:da:3f:b0:92:
                    4c:72:2f:90:15:03:d9:14:bb:d7:e9:a7:1c:92:d3:
                    fb:bb:04:f0:e0:f6:9e:17:38:bf:e1:f1:98:f5:92:
                    29:a1:5a:db:27:f9:bc:cf:34:e1:85:5d:8f:a1:60:
                    42:5a:22:85:11:5e:30:61:61:85:1a:c4:a4:56:9e:
                    5d:d6:69:ad:a0:54:cd:2d:24:35:06:48:e6:39:8f:
                    7c:56:5c:50:e0:88:61:85:e7:03:7d:f6:6f:c8:c9:
                    cd:58:82:fa:75:69:88:97:8b:12:15:2a:f4:20:79:
                    d2:7f:f1:6d:49:47:9b:93:6e:63:09:60:92:1b:9d:
                    f5:68:9d:64:75:60:d0:5d:2f:b4:aa:fd:75:1f:98:
                    0f:46:68:2f:70:78:c2:d5:dd:88:a8:60:21:8b:77:
                    ff:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E8:F4:2D:92:F5:39:6E:AA:FA:14:0B:A9:DC:4F:E2:D5:E2:2F:E5
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/A91EAB3E31D011EB92280D53F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.173.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         44:a2:2f:dc:ce:8a:e6:61:8e:76:20:d3:51:e0:6a:3d:87:e7:
         66:e2:37:7a:17:12:eb:51:0f:63:2e:e2:8c:57:4e:eb:b5:c3:
         a5:32:2f:32:d4:cf:eb:a0:25:cc:f3:54:1b:c0:63:cb:11:fc:
         c8:09:d6:b7:41:8b:6b:d6:b3:e4:b9:83:ac:11:b1:39:e1:4b:
         94:0f:c0:77:35:04:77:54:b7:ef:3a:d7:2e:e5:33:91:ba:80:
         b7:83:59:e9:e7:e9:b4:02:1f:ff:7e:5e:ad:21:81:d6:b1:d1:
         fb:ec:97:2b:a2:dc:ae:1b:75:95:69:33:1e:70:9a:b0:ba:c2:
         b8:a2:40:64:85:40:01:2f:6d:ae:1e:57:b5:84:82:b3:b4:04:
         55:22:28:61:84:b1:ac:e1:2d:47:b7:ac:a6:56:50:fe:a5:43:
         42:c8:ac:4f:fa:3e:7d:38:fd:df:5c:05:ca:19:2e:eb:99:f1:
         61:22:90:2c:06:52:f2:ef:b1:ea:2a:35:07:56:4b:e6:82:43:
         ff:1a:7c:72:67:24:a1:2f:da:11:02:01:5c:e6:22:d9:bf:3b:
         a2:ba:3e:39:7e:b0:7d:7c:14:da:06:d3:19:7c:ee:40:bc:2e:
         47:5d:00:fb:6b:1e:a2:62:fb:68:43:09:e5:df:da:46:74:59:
         ca:ae:d1:1e
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBbzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZE
MEY1MEFGMTEwLwYDVQQFEyhBRTk4QTVGREFEMkRDOUY0RkMxQkU0N0Y2Njg1N0E4
QzQ3OTg4MTAyMB4XDTIwMTEyOTIzMjI1OFoXDTIzMDczMDIzMjI1OFowGDEWMBQG
A1UEAxMNNWZjMmRiZDYtZjg4YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOVBZ23dpA7Y9j+TXxPmHG6ciBbzGNZTdQ5NhWJaV+D6ZYACqvnk5y40JXqr
cgZItY7mKjLx/8lrg3XN7NnJxvWMgX7oOzVxjWgeogZWMB+eSBUlD0BlKiLJ/Krf
HkuaflhuVsDaP7CSTHIvkBUD2RS71+mnHJLT+7sE8OD2nhc4v+HxmPWSKaFa2yf5
vM804YVdj6FgQloihRFeMGFhhRrEpFaeXdZpraBUzS0kNQZI5jmPfFZcUOCIYYXn
A332b8jJzViC+nVpiJeLEhUq9CB50n/xbUlHm5NuYwlgkhud9WidZHVg0F0vtKr9
dR+YD0ZoL3B4wtXdiKhgIYt3/4cCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRp6PQt
kvU5bqr6FAup3E/i1eIv5TAfBgNVHSMEGDAWgBSumKX9rS3J9Pwb5H9mhXqMR5iB
AjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RDBGNTAvNUVBQUE2QjgyNThGMTFFQkI3MEI3QzE5RjhBRUEyMjgvcnBpbF9h
MHR5ZlQ4Ry1SX1pvVjZqRWVZZ1FJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvcnBpbF9hMHR5ZlQ4Ry1SX1pvVjZqRWVZZ1FJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDBGNTAvNUVBQUE2QjgyNThGMTFFQkI3MEI3QzE5RjhB
RUEyMjgvQTkxRUFCM0UzMUQwMTFFQjkyMjgwRDUzRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBWmt4DANBgkqhkiG9w0BAQsF
AAOCAQEARKIv3M6K5mGOdiDTUeBqPYfnZuI3ehcS61EPYy7ijFdO67XDpTIvMtTP
66AlzPNUG8BjyxH8yAnWt0GLa9az5LmDrBGxOeFLlA/AdzUEd1S37zrXLuUzkbqA
t4NZ6efptAIf/35erSGB1rHR++yXK6Lcrht1lWkzHnCasLrCuKJAZIVAAS9trh5X
tYSCs7QEVSIoYYSxrOEtR7esplZQ/qVDQsisT/o+fTj931wFyhku65nxYSKQLAZS
8u+x6io1B1ZL5oJD/xp8cmckoS/aEQIBXOYi2b87oro+OX6wfXwU2gbTGXzuQLwu
R10A+2seomL7aEMJ5d/aRnRZyq7RHg==
-----END CERTIFICATE-----