Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ED14142B58F11F190D47305CF1D38B0.roa
File:                     0ED14142B58F11F190D47305CF1D38B0.roa (raw, json)
Hash identifier:          wUD4sic4e9HGWwa5wOe9kLCrLZSgb/9F/mtYUN5BApI=
Subject key identifier:   C7:8E:D1:3F:DF:BC:A6:30:4B:18:B3:52:DC:CA:8F:61:E6:72:40:C5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E976
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ED14142B58F11F190D47305CF1D38B0.roa
Signing time:             Mon 21 Sep 2026 07:35:46 +0000
ROA not before:           Mon 21 Sep 2026 07:35:42 +0000
ROA not after:            Mon 28 Sep 2026 07:35:42 +0000
asID:                     54801
IP address blocks:        154.81.61.0/24 maxlen: 24
                          154.81.161.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125302 (0x1e976)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 07:35:42 2026 GMT
            Not After : Sep 28 07:35:42 2026 GMT
        Subject: CN=6ab0de52-636e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:98:45:c1:5c:43:73:41:da:85:64:9b:7f:f6:
                    41:38:c6:fb:a8:ba:71:d3:34:85:14:e7:a9:16:de:
                    5c:8e:38:2a:3d:82:07:db:92:9d:27:62:6d:42:c4:
                    39:39:ec:16:75:f6:28:e7:cd:cf:36:29:96:6f:59:
                    f6:4c:40:84:a1:c8:12:ed:e9:0c:82:8a:b9:fb:3a:
                    93:fe:8e:e4:81:7f:29:c6:d0:4a:d1:a3:89:f1:6d:
                    f4:fc:11:cb:08:46:20:c1:58:33:0b:6e:7e:f2:4c:
                    dd:68:7f:03:76:18:7d:8f:d0:e7:13:1e:a4:be:0e:
                    d5:47:63:c7:5a:54:1a:bf:c4:9c:ce:2c:a3:39:b7:
                    e9:87:6e:79:5d:eb:8b:b5:30:f8:9a:c5:df:46:39:
                    6b:4b:2f:08:be:88:04:4c:b5:5e:a0:71:42:89:b7:
                    72:f0:6a:7b:aa:79:37:3c:b5:98:7f:fb:64:8c:5d:
                    5f:98:0f:94:7f:27:95:77:fa:90:c1:86:0e:aa:2a:
                    35:fc:00:2a:7b:44:56:7f:b1:b1:b1:7b:9d:b6:c4:
                    32:a0:56:fe:de:68:53:d9:0d:ef:46:85:ef:13:ac:
                    d7:04:08:44:eb:0c:73:dc:40:98:d9:4d:31:5b:7c:
                    c8:a7:14:43:8f:1c:b2:f8:27:aa:f9:10:b3:01:3e:
                    da:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8E:D1:3F:DF:BC:A6:30:4B:18:B3:52:DC:CA:8F:61:E6:72:40:C5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ED14142B58F11F190D47305CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.61.0/24
                  154.81.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c8:aa:da:ae:91:38:31:17:29:e4:de:22:91:60:46:6f:9d:
         bf:3c:fc:5b:5d:ce:4c:c5:e5:6a:b9:7f:7d:38:4b:c6:33:d9:
         12:85:f1:45:98:d3:07:10:3d:3f:fe:ad:a7:88:95:e8:fa:b6:
         95:a8:68:ca:61:e6:df:ac:3d:5d:3a:41:75:7b:33:de:b3:e5:
         e6:59:59:48:6e:41:e8:81:7a:6d:af:e8:79:7a:4b:c6:c3:81:
         23:ef:47:9f:9b:33:ef:eb:b6:1e:ca:17:83:c0:19:54:6b:24:
         c7:9d:63:64:5c:5c:5b:ec:44:de:ce:e7:62:8d:1c:e4:fc:1f:
         83:5d:32:9e:17:8f:9a:27:fa:38:e4:8c:73:35:be:cc:dc:59:
         2a:41:e9:0a:2b:36:ba:d2:60:a1:28:ac:20:2b:94:76:a5:74:
         9a:d1:9c:65:af:66:8e:98:51:07:15:25:12:59:19:da:8f:02:
         9c:e7:50:be:45:19:9f:b1:c0:91:b8:1d:c4:50:39:42:a3:49:
         4f:2c:6c:3f:11:da:5e:3f:a1:07:c8:7d:77:5a:c4:ff:95:5a:
         08:69:f4:d9:2b:5e:8d:71:cb:6b:3b:d4:ed:5b:66:83:9f:91:
         5e:f5:06:f9:94:38:5d:88:b7:96:d3:54:2d:37:e2:3b:1b:e2:
         96:5b:10:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----