Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/AE0D86FE31C311EBA4F36745F8AEA228.roa
File:                     AE0D86FE31C311EBA4F36745F8AEA228.roa (raw, json)
Hash identifier:          ZinIVcdcBrjZmIbc9gwO17Ah4Hc5kq87dOBognB0QBA=
Subject key identifier:   7F:D0:AB:B5:56:89:0A:33:31:F7:B6:31:7E:00:2A:55:6D:8C:71:B4
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       36
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/AE0D86FE31C311EBA4F36745F8AEA228.roa
Signing time:             Sat 28 Nov 2020 21:50:08 +0000
ROA not before:           Sat 28 Nov 2020 21:50:03 +0000
ROA not after:            Sun 30 Jul 2023 21:50:03 +0000
asID:                     37119
IP address blocks:        41.78.16.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 28 21:50:03 2020 GMT
            Not After : Jul 30 21:50:03 2023 GMT
        Subject: CN=5fc2c60f-34fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b4:2f:46:fe:a6:21:86:d5:ca:0e:e2:89:49:
                    62:89:79:9c:28:d6:ec:71:eb:9a:53:98:62:4e:06:
                    2e:25:d6:31:2b:28:f4:8d:b7:2c:74:29:03:6e:7f:
                    a2:56:3a:21:98:70:71:ce:f7:88:51:f0:78:5f:77:
                    9c:58:8d:5a:11:42:ff:56:06:3c:ed:6a:0d:83:5f:
                    60:5b:9c:f7:6c:41:f6:30:c7:1b:41:d7:4e:e6:06:
                    2c:2b:00:bf:98:32:b5:27:4d:3b:f8:1a:77:70:78:
                    3c:a1:3e:fa:69:6a:bf:ab:de:8a:9f:01:e8:7f:c6:
                    78:a6:e0:ab:38:dd:a3:18:58:92:0e:54:89:26:ea:
                    ab:a5:5d:3e:21:fd:2d:9d:67:22:06:57:50:50:36:
                    e6:a3:59:14:b0:c8:ea:f3:5b:4f:a6:ac:f6:fe:77:
                    e5:f9:33:4a:70:60:ae:88:63:99:3d:31:ad:e0:57:
                    f2:e2:e7:06:01:e4:c0:8c:c6:50:ad:8a:8a:0f:15:
                    51:ad:44:5f:77:47:3f:1a:97:9d:42:4b:5e:e5:48:
                    84:41:d6:fc:91:c6:85:75:04:9a:23:f3:7d:b3:eb:
                    d5:1f:fe:0b:6d:99:31:36:59:2a:23:64:04:a6:4f:
                    58:b2:eb:1b:02:b3:63:2b:a3:7e:97:68:a6:e9:d0:
                    05:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D0:AB:B5:56:89:0A:33:31:F7:B6:31:7E:00:2A:55:6D:8C:71:B4
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/AE0D86FE31C311EBA4F36745F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.78.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:ba:7c:ac:5e:d4:fb:e5:19:73:d5:fb:48:80:26:97:c5:d3:
         5c:51:58:5f:1a:e1:6b:61:16:19:75:f9:49:43:7a:7f:db:a5:
         17:f5:9c:ae:20:e2:cd:79:42:bf:5a:2b:33:c3:d4:ca:96:4f:
         94:d3:4c:03:65:24:e1:e6:8b:da:d3:b4:56:b6:1f:ed:d4:a3:
         26:9a:64:fb:cd:c3:9a:be:39:08:75:1f:de:fa:df:18:3f:c3:
         3f:c7:b6:bd:35:05:f1:0e:18:4f:84:47:04:59:e7:ef:85:32:
         36:a1:c0:d5:87:a0:ab:c5:da:01:42:f0:7f:f8:78:9a:ee:13:
         28:ec:62:64:52:6d:69:68:11:ca:29:b2:81:b9:1b:71:8b:0c:
         92:22:ca:dd:70:f0:c4:c8:21:cc:a6:d4:26:89:73:16:d7:60:
         0f:85:60:1b:ee:25:60:37:98:d5:ba:89:ad:2c:3c:fc:dd:5f:
         4a:3e:40:27:15:63:79:30:1b:54:7b:2d:29:f1:2e:ff:ab:fe:
         00:5b:0e:72:b9:88:f0:90:85:37:08:a8:be:8c:0d:ca:1c:5f:
         d0:4a:bb:cb:51:8b:5d:02:01:88:5f:8a:43:f8:f4:f4:e1:dd:
         d8:54:c1:e3:7e:87:7b:29:87:c0:59:dd:a1:fa:09:02:ba:5a:
         ac:de:6d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----