Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/C1435B2C31BE11EB9F481F40F8AEA228.roa
File:                     C1435B2C31BE11EB9F481F40F8AEA228.roa (raw, json)
Hash identifier:          m6jzkeE7Dq1jLZ3ZbAi1p1E0z4/NsTnLAk3mUUQoTrs=
Subject key identifier:   11:57:B1:16:FB:12:12:DC:ED:65:FC:73:2B:0B:66:93:CB:C1:61:21
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       25
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/C1435B2C31BE11EB9F481F40F8AEA228.roa
Signing time:             Sat 28 Nov 2020 21:14:52 +0000
ROA not before:           Sat 28 Nov 2020 21:14:47 +0000
ROA not after:            Sun 30 Jul 2023 21:14:47 +0000
asID:                     37119
IP address blocks:        105.169.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 28 21:14:47 2020 GMT
            Not After : Jul 30 21:14:47 2023 GMT
        Subject: CN=5fc2bdcc-941c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:eb:3c:dc:6e:e5:fd:66:4b:d0:b9:0e:7a:41:
                    f6:ba:91:e8:cc:ba:55:eb:15:fc:cc:0d:6f:ea:1d:
                    d1:f3:0e:91:d2:b0:4b:e5:78:98:6b:b3:17:19:c0:
                    25:83:b3:a5:96:57:40:7a:01:cc:33:09:8b:b1:50:
                    c1:26:57:91:0e:9e:3f:90:c0:1e:da:2e:a5:80:c7:
                    8a:78:ee:67:5a:cb:c5:b1:62:68:00:a6:24:06:00:
                    a1:af:10:69:8c:1a:da:91:49:23:16:bc:c9:07:f8:
                    b2:7c:23:41:e7:cc:42:41:de:5f:28:6e:ba:b7:58:
                    d9:2b:82:51:4d:81:6a:a8:d5:b9:7b:1f:e3:8c:c1:
                    95:41:3a:ba:bd:ad:78:38:63:69:d5:73:ce:4b:9c:
                    65:a6:2a:d6:c7:f6:72:02:c5:9c:e5:5d:b1:5f:be:
                    d8:36:4f:97:de:87:84:ed:11:4d:eb:4d:41:74:0e:
                    78:91:0a:fa:85:a7:0f:37:14:ff:b0:d5:2f:31:5e:
                    ae:e8:6b:a7:d3:d5:3f:a4:24:cf:a0:4e:ca:b0:7f:
                    20:ab:3c:f1:d8:90:a7:0d:08:3b:c2:7b:f8:b5:9e:
                    43:69:31:0b:d8:47:db:1e:ac:1c:33:86:51:7e:f0:
                    dc:cf:7c:97:03:10:40:af:e9:58:0b:bb:2a:21:90:
                    5c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:57:B1:16:FB:12:12:DC:ED:65:FC:73:2B:0B:66:93:CB:C1:61:21
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/C1435B2C31BE11EB9F481F40F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.169.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         99:7c:b2:ce:cf:bf:09:55:e4:e9:43:a1:4f:a3:56:28:e4:1b:
         af:95:4e:9a:7b:7e:ca:34:73:5d:5a:c1:8f:d7:48:cc:5b:98:
         49:4c:9d:08:09:ee:22:c1:0b:cc:91:f0:c2:93:e1:09:4a:6f:
         9b:52:00:69:dc:89:b9:e1:81:04:c7:f0:64:93:73:65:51:08:
         1d:93:99:7c:5f:f3:a0:1d:0b:2c:ee:00:dd:b0:10:e6:c4:32:
         95:46:2e:a3:44:f3:b3:33:25:63:18:00:de:15:f5:26:bb:5c:
         88:7b:1e:3d:32:ef:06:d9:f4:65:c5:a6:55:ea:09:89:ea:17:
         51:99:3a:e6:1a:7b:fb:f1:9f:d1:03:b0:ab:50:92:9c:e6:25:
         8d:ce:b7:ed:b3:eb:9f:99:9f:29:84:ec:5a:a2:51:c7:50:bb:
         df:af:5c:a9:f1:46:7a:23:36:56:6b:bf:bf:9f:f2:ad:e3:e6:
         3a:e6:48:c2:57:d9:63:c9:7e:d5:17:db:ae:5f:af:ad:d7:a4:
         10:e4:50:fb:88:a4:3a:f4:94:79:55:f7:74:b9:a5:af:f3:86:
         7c:8b:85:fb:83:5c:ea:12:f9:16:61:8f:70:53:e9:c1:fd:e9:
         14:41:f0:42:7c:e8:ba:7f:d6:7d:08:69:c8:20:74:f1:42:a8:
         94:64:c3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----