Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/ECEFDDB631C011EBA99F9342F8AEA228.roa
File:                     ECEFDDB631C011EBA99F9342F8AEA228.roa (raw, json)
Hash identifier:          XT7FcM24cxPJD1mjYZULZrvb2gO9fafks/kaAy9MZXM=
Subject key identifier:   B6:65:13:11:FA:69:FA:1B:1F:62:F0:C1:8C:0A:D6:28:9D:48:4E:CA
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       2C
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/ECEFDDB631C011EBA99F9342F8AEA228.roa
Signing time:             Sat 28 Nov 2020 21:30:25 +0000
ROA not before:           Sat 28 Nov 2020 21:30:19 +0000
ROA not after:            Sun 30 Jul 2023 21:30:19 +0000
asID:                     37119
IP address blocks:        105.169.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 28 21:30:19 2020 GMT
            Not After : Jul 30 21:30:19 2023 GMT
        Subject: CN=5fc2c170-9842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:cc:ed:32:18:f3:52:7c:88:04:d4:80:af:
                    05:11:68:d7:39:b1:48:9e:d4:75:0b:57:47:52:01:
                    a9:38:75:d0:58:b6:10:07:0a:27:5e:c4:1f:5d:b0:
                    b5:cc:ba:eb:51:a9:c5:44:93:d3:4a:14:13:c8:09:
                    c2:9e:02:91:d6:7a:b6:f9:c3:89:e2:6d:ef:95:1b:
                    72:47:1f:ae:c5:f5:2d:2f:d0:4b:1c:0c:ef:f4:b9:
                    5d:a9:46:62:9e:10:e9:98:27:d5:4f:99:fc:3b:5d:
                    1f:28:20:99:7c:2b:19:8d:90:3d:79:5f:c0:ee:7c:
                    f8:d7:74:73:49:2c:89:0e:0d:bf:91:ee:f5:0a:42:
                    6e:24:d5:78:23:50:a4:8b:34:3e:6a:c2:ab:92:8f:
                    b8:5e:b9:97:27:a2:c5:d6:df:5c:8d:21:ec:05:7a:
                    b4:f3:0e:29:ac:41:8c:4c:df:d1:39:33:0c:fb:31:
                    bb:0d:7a:da:62:fc:2d:b0:42:e4:49:4b:00:22:d3:
                    d5:8f:40:8b:06:e6:56:80:8f:d6:5b:20:dd:55:db:
                    2c:63:eb:51:2c:2e:10:a6:47:1b:ad:09:d0:13:66:
                    21:56:11:b6:77:e4:ab:9e:f1:b9:59:f9:6e:1f:af:
                    70:28:41:59:3e:7e:be:4d:91:82:57:ac:66:f3:5e:
                    50:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:65:13:11:FA:69:FA:1B:1F:62:F0:C1:8C:0A:D6:28:9D:48:4E:CA
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/ECEFDDB631C011EBA99F9342F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.169.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2c:03:12:30:a4:e0:cb:0c:f4:0e:20:e8:05:20:dd:5c:38:26:
         e6:0c:b9:69:91:bc:15:ea:59:49:0b:0a:2f:f7:22:47:d1:03:
         f0:44:13:c9:65:03:8f:b7:81:94:4d:ee:2e:5d:fc:fa:7c:26:
         69:70:ab:3f:d5:37:7e:b2:6a:f4:cc:5c:cf:49:6b:21:5b:5c:
         e0:9d:d6:46:16:cf:e0:e4:07:72:65:ec:fc:02:95:75:c4:8c:
         c2:70:4c:eb:9e:15:44:52:5b:17:21:87:d6:d2:58:31:53:ae:
         7c:b4:c1:83:1f:66:9c:86:85:c0:06:7f:46:71:8d:ee:cd:ea:
         82:bd:85:33:75:48:cb:82:0a:ff:f2:e8:d8:60:93:51:56:32:
         37:47:5c:fb:63:3c:10:52:87:2e:74:b2:02:e4:03:2b:88:65:
         bd:eb:2d:80:55:96:66:a9:f6:9a:b1:be:07:c9:f3:0a:49:91:
         e1:15:6c:03:5f:b6:81:22:66:59:27:4d:86:c2:60:b2:04:87:
         b7:d7:24:59:3a:ba:38:b6:43:c9:8a:95:28:f5:24:e7:f6:13:
         8b:5c:2a:a0:17:ec:b5:72:4b:47:7d:d4:10:cc:9b:59:c1:e3:
         7e:df:71:0a:86:d7:80:12:b1:32:cd:08:5f:06:e4:2c:c3:a5:
         18:50:ea:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----