Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E77E469031C211EB89F39244F8AEA228.roa
File:                     E77E469031C211EB89F39244F8AEA228.roa (raw, json)
Hash identifier:          XMza+EUHHFH5gn77AVtPu6zP++JGkWT9ohPGGL/Kum8=
Subject key identifier:   FA:4E:FD:41:78:E8:A5:68:F0:E1:E3:5C:33:1E:CE:F6:9B:AA:05:82
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       34
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E77E469031C211EB89F39244F8AEA228.roa
Signing time:             Sat 28 Nov 2020 21:44:34 +0000
ROA not before:           Sat 28 Nov 2020 21:44:29 +0000
ROA not after:            Sun 30 Jul 2023 21:44:29 +0000
asID:                     37119
IP address blocks:        105.169.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 28 21:44:29 2020 GMT
            Not After : Jul 30 21:44:29 2023 GMT
        Subject: CN=5fc2c4c2-7173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:46:27:0c:25:95:e2:de:cd:d5:a7:e6:24:cf:
                    84:65:1b:5f:0e:63:77:3f:d4:b4:ee:d1:7e:98:26:
                    e5:47:d0:7e:13:cb:b0:24:77:5e:70:99:a5:69:b4:
                    01:39:c0:e1:40:9f:ff:df:1c:12:ab:67:31:37:0a:
                    8b:0b:f8:59:08:d8:8b:03:c2:d9:71:f5:b9:36:e9:
                    5f:5e:b6:7e:c9:36:d1:e4:0b:76:3a:ec:d3:b3:23:
                    aa:a2:43:37:e6:5c:18:09:a7:03:b6:bb:07:c7:11:
                    46:4a:0f:a3:44:0d:e4:3b:2b:9b:fe:1f:79:a9:b1:
                    4c:44:2b:f9:e0:0e:7f:0b:58:a3:12:51:1b:c5:05:
                    fc:f6:03:00:d6:c1:00:78:ec:3a:39:70:d5:55:3a:
                    b6:02:b0:b4:8e:2c:0c:40:9f:64:24:52:71:10:b6:
                    c1:11:b4:48:47:24:b4:72:e4:88:45:99:1d:62:70:
                    fa:34:20:d4:83:1b:99:a8:6b:4f:b5:62:ee:d0:ed:
                    50:f7:1d:44:e9:25:00:d9:94:da:1d:fa:7d:57:9a:
                    50:19:12:e9:ba:33:3f:51:47:d7:10:d1:11:65:b9:
                    63:2c:cf:62:ec:de:8c:70:b6:36:a6:83:da:81:2d:
                    8c:30:0c:8a:11:9f:b7:dc:42:68:e0:8f:e3:21:5a:
                    3a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4E:FD:41:78:E8:A5:68:F0:E1:E3:5C:33:1E:CE:F6:9B:AA:05:82
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E77E469031C211EB89F39244F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.169.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0b:c7:82:69:b0:92:ff:8c:7f:5b:70:d8:cc:99:13:25:d3:fe:
         73:8d:12:8b:fc:54:d7:11:ff:92:80:80:c1:78:ec:a0:19:7b:
         a2:46:e3:df:84:7f:3b:2f:31:f4:bf:a0:2c:4c:62:46:e8:6c:
         5f:f5:92:03:11:cc:10:63:cd:2a:02:c6:86:b5:c4:de:08:59:
         bb:5f:17:90:0a:59:89:23:1f:04:86:bf:ed:0f:53:bd:ba:fe:
         8d:e4:93:ac:c9:75:e9:5e:f3:44:63:1c:72:7a:57:da:a9:23:
         2f:2b:4c:b7:56:4c:59:10:84:71:90:3a:9e:51:e1:1c:a5:55:
         94:92:a5:5f:58:bf:5e:90:93:d8:bb:23:77:96:15:de:e9:21:
         cc:32:64:00:fc:bf:97:4e:6b:3e:8d:61:50:14:27:cf:cb:f3:
         b9:2b:f6:4d:78:6f:4c:95:69:d7:ca:a0:c2:b2:16:38:0a:2d:
         e2:bb:d1:fb:7e:43:a6:42:3d:dd:b9:2a:5a:e1:aa:f3:2e:bf:
         73:9d:37:d7:50:3c:bc:29:c6:e0:ae:ef:8f:83:dc:c5:ca:75:
         23:08:7c:5b:7b:49:b0:12:77:ee:9a:b0:8d:5d:06:0a:92:7c:
         c4:1c:fa:95:01:16:75:9e:b6:de:5b:43:cc:01:f2:e2:f8:af:
         c2:9f:50:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----