Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/D08C22AC31C411EB9BE19346F8AEA228.roa
File:                     D08C22AC31C411EB9BE19346F8AEA228.roa (raw, json)
Hash identifier:          hbiTgQNindAtRHJtrGadYQlJj+13VEXhqpC4l8HJULk=
Subject key identifier:   02:72:43:21:DE:BA:41:F1:B7:0D:0B:4E:73:5A:F3:DA:A6:C9:33:18
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       3C
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/D08C22AC31C411EB9BE19346F8AEA228.roa
Signing time:             Sat 28 Nov 2020 21:58:15 +0000
ROA not before:           Sat 28 Nov 2020 21:58:11 +0000
ROA not after:            Sun 30 Jul 2023 21:58:11 +0000
asID:                     37119
IP address blocks:        41.78.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 28 21:58:11 2020 GMT
            Not After : Jul 30 21:58:11 2023 GMT
        Subject: CN=5fc2c7f7-0267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:c8:0b:d6:e0:21:22:8c:28:fa:e1:2c:2b:
                    6c:14:b0:8b:7f:56:96:33:d4:ba:e7:c9:8a:fb:de:
                    dc:1c:3f:65:f7:e4:bc:48:f2:90:7c:31:d9:44:ad:
                    93:b3:17:b9:54:ae:4e:59:4e:f6:12:b5:45:18:0b:
                    a6:e0:04:34:eb:30:dd:d2:22:69:65:2a:3d:2b:43:
                    22:b7:92:f3:15:15:e8:aa:b2:6e:2f:63:74:1f:06:
                    c1:33:da:ce:cb:0f:a2:8a:89:33:78:46:e6:e2:ec:
                    8e:3c:5a:f1:0f:86:46:4a:5e:d9:d2:45:3f:b4:42:
                    4e:a0:39:5a:f3:3b:39:0c:3a:ef:39:eb:8a:90:c8:
                    95:23:4c:bf:32:6d:0f:ae:b5:3a:8c:0e:64:de:27:
                    82:14:ee:c2:b6:77:1c:59:2c:f1:d4:e9:d3:37:98:
                    05:83:95:17:1f:c9:41:d3:e8:79:a5:40:cb:57:da:
                    7d:23:a6:1d:b0:88:92:92:8e:96:d0:9f:ef:84:b5:
                    78:9a:83:e4:ee:06:ed:7f:79:c6:54:d8:df:ff:37:
                    0f:6b:97:3d:e6:4e:00:5a:86:56:76:8d:26:a0:68:
                    f4:83:e3:e4:a8:00:42:ba:ea:84:d5:90:c5:35:8c:
                    18:ab:b7:9f:10:93:01:86:22:e2:1d:30:62:89:68:
                    6a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:72:43:21:DE:BA:41:F1:B7:0D:0B:4E:73:5A:F3:DA:A6:C9:33:18
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/D08C22AC31C411EB9BE19346F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.78.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:e0:0c:23:38:18:69:dc:ee:1d:89:f4:ca:eb:7f:33:a3:17:
         5d:9f:68:3b:2f:58:0e:e4:3f:66:c1:c4:de:fa:40:e3:2d:49:
         da:e1:48:74:c0:b0:d9:11:44:11:11:42:0f:43:f2:d7:d3:76:
         3b:f4:5f:60:1a:f6:0c:d4:e1:f6:1a:46:bc:18:ec:09:92:84:
         9c:ef:f2:60:81:8f:85:b1:e5:4e:32:96:f4:2c:50:64:1f:77:
         a3:ae:f3:af:32:ea:7f:54:50:b5:cd:cb:cf:52:9f:e3:03:66:
         89:62:82:1c:e1:d7:c0:7a:60:fc:52:b5:ba:fb:1e:16:b9:eb:
         f3:20:07:ac:90:f4:8a:df:dd:5e:2f:2a:a1:92:d0:df:83:d6:
         dc:98:c3:ce:95:b5:b9:16:98:0f:e1:38:34:39:c8:a9:8c:fa:
         39:3c:c4:34:57:8c:21:ca:68:28:77:6e:cb:ef:6d:0e:13:aa:
         a3:23:70:4c:9b:0e:fa:bf:ed:22:8f:cd:fb:a9:1f:52:e5:44:
         e2:c4:be:3f:6b:22:24:bf:2b:ab:b8:a2:bf:f4:f0:dd:e9:12:
         85:fd:a5:2a:08:95:cf:f3:4d:f2:77:c9:4a:9d:78:e4:31:28:
         3a:b2:14:3a:f7:14:1b:6c:11:d3:4c:4e:26:13:97:36:31:4e:
         79:31:f2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----