Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/8F58F332EE5F11EDAD0F0C5C4AD9E6FC.roa
File:                     8F58F332EE5F11EDAD0F0C5C4AD9E6FC.roa (raw, json)
Hash identifier:          hOSkPpx3A6lNHzVjJ5Igj8rrgy/44be5XgK6h7dj+9s=
Subject key identifier:   B1:7C:0B:07:A8:74:2F:EA:5A:34:74:8B:9E:1C:88:4C:CD:4F:6D:76
Certificate issuer:       /CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
Certificate serial:       02
Authority key identifier: 1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/8F58F332EE5F11EDAD0F0C5C4AD9E6FC.roa
Signing time:             Tue 09 May 2023 11:49:31 +0000
ROA not before:           Tue 09 May 2023 11:49:28 +0000
ROA not after:            Fri 31 May 2024 11:49:28 +0000
asID:                     329243
IP address blocks:        102.212.44.0/22 maxlen: 22
                          2c0f:240::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
        Validity
            Not Before: May  9 11:49:28 2023 GMT
            Not After : May 31 11:49:28 2024 GMT
        Subject: CN=645a334b-b6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:70:49:39:fb:99:bd:d1:03:9e:a0:df:2d:d7:
                    f8:73:59:4b:1b:f0:49:77:b6:4e:d7:14:e4:d4:4e:
                    e4:1c:b7:d5:06:2e:92:73:aa:65:84:58:a4:a9:9e:
                    6b:e8:f6:5d:61:37:24:94:7b:5c:6d:f0:0b:3d:94:
                    38:cf:b9:8c:67:00:3b:77:7a:f8:e4:d4:bb:ac:2a:
                    ea:5e:ee:90:17:22:55:2e:2d:60:50:1e:8c:15:5e:
                    7a:ac:5d:e4:fe:66:78:05:3e:78:68:56:c5:69:a5:
                    7d:13:26:5f:a2:4d:08:c4:e7:3b:76:37:8b:ec:af:
                    77:ba:6e:98:8a:7e:cb:c2:80:3a:97:70:44:de:58:
                    5a:e9:07:ba:aa:7b:3f:8a:0e:ff:47:04:b0:ef:72:
                    cd:e5:02:87:34:6c:7d:ab:2b:5d:82:a0:e4:e3:16:
                    fb:4e:34:76:b9:65:49:44:1c:19:97:0e:fa:e8:32:
                    10:77:e9:2a:d2:2e:28:0f:02:8f:b4:59:7b:db:04:
                    94:37:5c:7e:5b:7b:d1:bd:d5:00:b0:f3:63:37:3b:
                    24:3a:f7:93:2d:93:66:eb:02:85:da:97:57:e1:9e:
                    a3:9a:e1:51:5a:c2:6f:9b:85:1b:37:f4:a8:be:80:
                    3a:8f:fa:7a:f1:60:b6:79:99:0e:87:9e:29:65:c7:
                    23:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7C:0B:07:A8:74:2F:EA:5A:34:74:8B:9E:1C:88:4C:CD:4F:6D:76
            X509v3 Authority Key Identifier:
                keyid:1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/8F58F332EE5F11EDAD0F0C5C4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.44.0/22
                IPv6:
                  2c0f:240::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:9a:50:cc:71:8d:83:33:f5:b8:40:ee:69:98:e4:39:e6:b1:
         9f:39:4b:82:d9:25:9a:2b:71:11:6e:64:b4:3e:e2:22:98:e2:
         b3:cf:e5:7a:f0:63:c1:ad:e1:b4:29:fd:42:f9:5d:63:f1:49:
         b0:98:5f:bf:56:a3:ed:88:54:4a:2d:62:c2:34:fd:ab:db:17:
         08:18:21:02:e9:9e:34:50:88:21:df:15:85:70:9c:65:46:3c:
         93:0e:5e:ec:06:c6:6d:d0:31:e4:f8:89:93:40:31:78:9b:91:
         9c:66:a3:4e:aa:53:d7:d7:7d:ef:c7:ab:f5:5d:96:20:5c:6c:
         52:5c:9e:ee:73:86:50:49:47:f6:58:23:75:04:de:f2:87:4f:
         2e:c8:bc:50:da:e4:6f:4a:bb:8b:49:ba:19:82:3e:4d:04:96:
         9b:38:7c:6d:24:10:9e:3f:da:fe:91:3b:a6:ed:d4:97:88:9f:
         e0:1b:dc:d7:2f:7f:d2:77:12:62:b6:c6:90:9c:7d:31:2c:ba:
         0e:ac:c4:da:c1:60:7b:84:94:64:13:98:c5:28:34:fb:0b:1b:
         81:d0:5c:fd:b8:a8:c7:da:eb:21:44:8b:79:1b:84:b2:e7:8a:
         cb:2d:72:51:86:27:44:93:e0:96:fa:78:05:c2:28:32:45:d3:
         46:58:c8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----