Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/8D78491051C511EC82EDC76CD8A014CE.roa
File:                     8D78491051C511EC82EDC76CD8A014CE.roa (raw, json)
Hash identifier:          uiQ/GgVfg5Yqf12ksdG6rUsdilEuKtGOxtjGMlCihoo=
Subject key identifier:   C3:D3:2D:41:52:6C:F9:9F:93:6A:9E:07:D2:06:C5:9B:A7:3B:FC:6B
Certificate issuer:       /CN=F36E4353AF/serialNumber=AC34F23CB26B191FA6C2573666A4163DD9868389
Certificate serial:       4F
Authority key identifier: AC:34:F2:3C:B2:6B:19:1F:A6:C2:57:36:66:A4:16:3D:D9:86:83:89
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/8D78491051C511EC82EDC76CD8A014CE.roa
Signing time:             Tue 30 Nov 2021 10:09:07 +0000
ROA not before:           Tue 30 Nov 2021 10:09:03 +0000
ROA not after:            Thu 30 Nov 2023 10:09:03 +0000
asID:                     51110
IP address blocks:        102.135.224.0/24 maxlen: 24
                          102.135.225.0/24 maxlen: 24
                          102.135.226.0/24 maxlen: 24
                          102.135.227.0/24 maxlen: 24
                          102.135.228.0/24 maxlen: 24
                          102.135.229.0/24 maxlen: 24
                          102.135.230.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4353AF/serialNumber=AC34F23CB26B191FA6C2573666A4163DD9868389
        Validity
            Not Before: Nov 30 10:09:03 2021 GMT
            Not After : Nov 30 10:09:03 2023 GMT
        Subject: CN=61a5f843-442d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:a5:36:a7:77:fa:42:28:31:2b:c1:c9:99:
                    5f:61:13:df:70:3c:87:a3:47:b0:71:e4:15:8d:c7:
                    05:ee:23:a5:1b:f8:90:3d:b4:1b:e0:f7:0b:40:5a:
                    79:7e:22:30:3c:01:2a:76:5b:b9:3d:35:9e:18:63:
                    dc:6c:df:b5:6c:d7:4f:3d:87:fe:ea:ee:ee:fd:62:
                    5b:7f:7d:33:13:e6:eb:f1:1c:5c:97:c3:2c:51:58:
                    84:74:1e:c8:1e:f1:6e:eb:91:4a:06:92:fa:81:bf:
                    33:3e:32:8f:5c:53:e1:59:04:5b:97:c9:8a:f2:9d:
                    28:d7:8c:61:9f:c8:12:e2:6c:75:32:27:3f:0f:97:
                    c6:b1:27:c0:56:9b:e5:1b:d4:d2:cd:a7:cf:dd:a9:
                    c0:e2:be:76:a5:1a:13:57:a5:81:dc:94:ac:2e:bf:
                    05:3c:35:aa:25:5f:e9:c6:01:2f:b4:8e:0c:1e:4f:
                    22:db:70:a1:bd:24:43:ae:11:76:5f:ed:2f:82:24:
                    d9:27:96:c8:5e:fa:cc:e5:b3:89:e6:ba:31:1c:f4:
                    85:b0:5c:b4:c3:d2:dd:c5:d5:c1:15:08:7e:b3:82:
                    9d:4d:75:55:a3:72:f6:40:66:8c:ff:51:e8:b0:0d:
                    f8:3d:7d:2b:c5:34:87:08:9d:9e:a3:1f:71:cd:f2:
                    9a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D3:2D:41:52:6C:F9:9F:93:6A:9E:07:D2:06:C5:9B:A7:3B:FC:6B
            X509v3 Authority Key Identifier:
                keyid:AC:34:F2:3C:B2:6B:19:1F:A6:C2:57:36:66:A4:16:3D:D9:86:83:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rDTyPLJrGR-mwlc2ZqQWPdmGg4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4353/8AE09C2C19F611EC96E1D276D8A014CE/8D78491051C511EC82EDC76CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.224.0-102.135.230.255

    Signature Algorithm: sha256WithRSAEncryption
         dd:85:7f:ff:36:8e:32:1d:cd:45:2e:17:fa:b8:4e:b4:c1:22:
         73:b7:fb:68:4c:ae:22:7b:67:47:99:64:ac:95:d6:bd:1b:87:
         10:bc:d1:f8:93:44:07:ce:32:35:57:6e:2c:eb:f3:d5:d9:f6:
         1a:46:ce:b9:2d:65:88:80:7d:ec:2c:3b:4f:a2:50:be:d7:48:
         be:9d:05:a3:5a:cf:af:db:9f:21:2f:16:21:ac:a5:c9:47:3e:
         25:f2:81:ae:9c:4a:2b:1b:a5:de:58:d2:13:91:78:a9:ca:94:
         be:2e:f8:19:16:7d:65:07:8a:90:5d:a1:90:07:75:d5:24:7e:
         6c:6e:82:3b:7d:aa:65:c7:c7:89:47:64:8e:12:0c:27:93:89:
         b3:70:76:80:d7:42:33:d6:68:11:81:44:60:25:f3:48:74:07:
         c9:db:3f:c6:7f:26:eb:da:29:5a:ff:5c:63:6b:17:7a:b5:54:
         da:7b:b4:0b:95:cf:8c:ca:7f:4c:c4:ad:e3:d1:93:5a:88:0c:
         ba:92:14:ba:d1:58:f5:29:db:2b:b4:4b:36:7a:8e:7b:c2:92:
         93:1d:18:80:95:67:44:ad:f0:d0:5a:45:80:46:0c:67:8d:e8:
         65:c8:d9:d7:28:88:51:33:5c:81:dd:22:d4:50:66:3b:94:b2:
         f7:2a:ad:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----