Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/B068710231D211EB91C74B55F8AEA228.roa
File:                     B068710231D211EB91C74B55F8AEA228.roa (raw, json)
Hash identifier:          38FLYb+Ck/SgPFGnvzynGD7GOQcgc4dNe/s0iRmOXts=
Subject key identifier:   82:EF:F8:39:35:B4:80:7F:9B:F4:C9:AC:29:05:9A:B6:3F:07:10:55
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       77
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/B068710231D211EB91C74B55F8AEA228.roa
Signing time:             Sat 28 Nov 2020 23:37:34 +0000
ROA not before:           Sun 29 Nov 2020 23:37:29 +0000
ROA not after:            Sun 30 Jul 2023 23:37:29 +0000
asID:                     37119
IP address blocks:        105.174.32.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 29 23:37:29 2020 GMT
            Not After : Jul 30 23:37:29 2023 GMT
        Subject: CN=5fc2df3e-01df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:97:04:a3:e7:48:eb:cf:93:ca:0e:b2:e1:99:
                    26:2f:f3:39:c3:17:39:5c:07:6f:0b:c3:9f:21:20:
                    e6:57:7d:6f:d1:0f:e6:35:f9:1d:13:77:c8:71:69:
                    ec:41:93:73:c8:17:b0:19:a8:72:b0:df:e0:83:57:
                    38:29:71:42:72:04:d2:5c:e2:48:c7:a7:34:8e:3b:
                    66:4b:f2:2e:aa:86:fd:f1:f9:75:1a:a9:6b:92:79:
                    ce:0f:bf:06:20:2f:1b:56:d5:f1:a3:46:cf:92:d0:
                    30:01:be:aa:d4:61:fc:f7:40:32:66:6e:77:c2:bb:
                    ae:ba:d5:58:cb:4b:a9:ab:8c:ae:57:c3:22:ca:c0:
                    3d:48:46:98:47:07:a7:4c:ac:f3:03:d0:7a:85:a6:
                    0b:dd:e0:e3:47:56:35:c4:22:a4:fb:ea:53:37:82:
                    ee:09:9a:f8:9e:de:69:f3:84:f2:e4:2d:d2:1f:f4:
                    8a:99:3b:0d:4f:5f:91:7a:71:d5:d7:d4:9f:43:33:
                    f1:4d:83:7b:60:97:0e:16:a7:db:27:75:01:8a:47:
                    b1:89:9e:6f:1f:d1:e8:e7:a7:d4:db:7f:96:9c:65:
                    2e:30:3a:9f:3a:6c:22:cd:df:00:fd:42:be:59:b1:
                    29:ab:1e:39:4c:48:b4:b8:f6:e2:b9:b8:9b:75:18:
                    17:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EF:F8:39:35:B4:80:7F:9B:F4:C9:AC:29:05:9A:B6:3F:07:10:55
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/B068710231D211EB91C74B55F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.174.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:ba:e0:6b:a9:23:6c:b2:92:c5:f3:51:49:42:a1:d1:32:98:
         6d:89:11:18:bd:6b:87:08:b5:50:24:2a:60:43:6f:9d:91:2f:
         3c:df:92:ad:8f:a9:c1:62:da:dc:1d:86:5e:1d:ca:e4:52:15:
         09:ad:19:59:6a:8b:54:90:02:6a:00:b5:92:a4:24:c0:5c:48:
         92:89:de:0e:9b:f6:e8:25:65:47:3b:b1:75:28:5d:72:76:e0:
         36:b8:91:38:da:24:48:16:75:9b:41:29:de:31:d1:ec:b6:1a:
         a3:7f:30:ab:38:7b:fe:38:34:a9:4f:93:32:25:f7:b2:56:85:
         58:a6:ce:b1:f3:b5:e2:3a:5f:5c:93:83:00:19:2b:a9:5f:fc:
         b1:b9:04:9e:8a:9d:ed:5d:44:68:10:48:97:03:77:cc:df:30:
         94:8f:14:e0:f7:19:05:da:ef:ed:d5:ab:06:fb:f6:bc:79:94:
         aa:be:c4:03:77:73:c1:58:a1:b5:e2:18:35:c8:b7:c9:90:ff:
         db:63:e2:bb:4f:1c:33:56:ef:93:68:f7:55:73:4e:f5:43:85:
         dd:f5:cd:30:49:a9:c6:28:49:3a:de:71:df:6d:50:c5:b5:25:
         fe:d4:dc:73:37:66:fe:17:bd:1c:e2:25:f3:2b:0a:35:1b:bb:
         59:a5:9d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----