Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/635B0E12366A11ED8459EDCAF1222468.roa
File:                     635B0E12366A11ED8459EDCAF1222468.roa (raw, json)
Hash identifier:          b1G133+MZARTZbRFRpOTpwsZLkVJowBOfpl5eXlKvbA=
Subject key identifier:   52:44:F4:2D:93:A5:69:B3:51:67:0B:72:81:C4:35:C6:7B:29:09:C1
Certificate issuer:       /CN=F36EE1C1AF/serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
Certificate serial:       03
Authority key identifier: 45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/635B0E12366A11ED8459EDCAF1222468.roa
Signing time:             Sat 17 Sep 2022 09:23:28 +0000
ROA not before:           Sat 17 Sep 2022 09:23:24 +0000
ROA not after:            Mon 30 Sep 2024 09:23:24 +0000
asID:                     329121
IP address blocks:        102.214.232.0/22 maxlen: 22
                          102.214.232.0/23 maxlen: 23
                          102.214.232.0/24 maxlen: 24
                          102.214.233.0/24 maxlen: 24
                          102.214.234.0/24 maxlen: 24
                          102.214.235.0/24 maxlen: 24
                          2c0f:7080::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE1C1AF/serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
        Validity
            Not Before: Sep 17 09:23:24 2022 GMT
            Not After : Sep 30 09:23:24 2024 GMT
        Subject: CN=63259210-b006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4f:46:09:64:28:b2:80:1d:e6:13:a5:28:23:
                    7d:84:7c:38:c8:f3:72:c1:1e:7a:7f:be:36:20:96:
                    07:67:46:b8:4f:9a:ee:76:51:de:69:71:ac:1d:ef:
                    7f:fb:cc:01:3c:a0:13:89:e7:b2:e5:55:c7:99:d4:
                    e8:4b:37:dd:38:55:c0:90:f0:6d:8b:5b:fd:41:8a:
                    8a:37:e8:1d:49:9e:a3:dd:5a:ee:65:d1:88:79:70:
                    58:ef:34:95:3b:78:d2:33:3b:84:0c:9b:db:ad:c5:
                    87:2e:0c:41:3a:c7:7a:e3:86:d2:23:d2:ce:4f:5b:
                    29:8c:c2:c7:91:ae:cc:eb:5f:cb:2d:66:6b:e8:25:
                    1d:98:4b:1d:a0:fb:fd:be:3b:49:36:ee:2b:2f:69:
                    be:78:35:e7:05:d3:e3:fa:68:93:7e:b3:b6:30:5f:
                    d9:b3:fc:25:2b:a9:d7:55:5e:f8:b7:50:5c:81:e9:
                    b1:51:f7:9c:53:2f:65:9c:2e:a7:8c:f4:ba:07:95:
                    bf:30:4f:27:f1:26:84:0a:de:8b:60:1c:5d:ec:40:
                    77:29:29:89:22:49:ea:33:55:8f:4d:92:56:90:02:
                    bb:ca:2b:1c:5b:1b:c3:9f:49:85:f2:80:19:96:d0:
                    dd:05:d5:f9:38:8c:41:f6:4b:c2:dd:23:c0:27:b3:
                    8b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:44:F4:2D:93:A5:69:B3:51:67:0B:72:81:C4:35:C6:7B:29:09:C1
            X509v3 Authority Key Identifier:
                keyid:45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/635B0E12366A11ED8459EDCAF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.232.0/22
                IPv6:
                  2c0f:7080::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:cf:99:c8:37:d6:a4:1c:4d:eb:1a:1f:6e:65:cc:46:13:45:
         8d:8b:20:3a:3b:58:15:be:7f:5e:d4:87:1b:6e:97:50:9a:0e:
         dc:ce:22:c0:82:20:6c:42:5c:94:74:aa:ba:49:e7:d6:54:f6:
         32:30:0b:85:b5:33:a6:9b:17:17:2a:3d:e2:0c:f2:4b:e7:3e:
         ed:e6:3f:89:e6:0d:b9:f0:ce:26:04:65:63:4b:27:ce:09:15:
         07:82:78:a7:47:50:a4:ba:fe:fb:73:f6:46:91:bc:e1:33:f9:
         cd:e8:13:69:a0:6b:0b:f9:e7:57:62:6f:8b:3c:12:8a:56:4f:
         78:98:31:5e:8e:79:79:45:6b:84:9e:59:3e:e5:96:8e:5f:23:
         c0:e6:82:b4:18:99:48:36:f7:3e:77:83:85:5a:21:78:7b:c8:
         0c:9d:95:04:30:15:a1:a6:92:05:75:5f:79:42:1d:eb:75:d5:
         46:21:6c:fb:6a:9c:ff:9d:0f:03:0d:d2:92:8e:a0:c1:6d:64:
         ef:62:76:a2:55:8d:23:29:20:ea:21:e7:14:e2:ba:fb:d2:e1:
         c3:2d:f5:6a:7b:84:39:97:30:50:e2:c4:a4:1f:e3:4c:02:eb:
         53:f0:77:3d:c4:e1:01:e9:e2:d0:21:e4:09:a9:b7:4c:b1:d3:
         a6:43:e4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----