Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42E47824B26911F1973F72C3CE1D38B0.roa
File:                     42E47824B26911F1973F72C3CE1D38B0.roa (raw, json)
Hash identifier:          rGjqGW5WF2OU1Aqd2XYap+b8R34EVx45bfuxaHrBKis=
Subject key identifier:   FD:77:33:32:56:28:EA:34:F0:D5:20:E9:F3:84:23:1C:C4:43:F2:A3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E8A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42E47824B26911F1973F72C3CE1D38B0.roa
Signing time:             Thu 17 Sep 2026 07:27:39 +0000
ROA not before:           Thu 17 Sep 2026 07:27:35 +0000
ROA not after:            Sun 27 Sep 2026 07:27:35 +0000
asID:                     55933
IP address blocks:        154.89.144.0/20 maxlen: 24
                          154.89.148.0/23 maxlen: 24
                          154.89.150.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125088 (0x1e8a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 17 07:27:35 2026 GMT
            Not After : Sep 27 07:27:35 2026 GMT
        Subject: CN=6aab966b-ffcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:61:ae:4e:45:1e:d0:7d:ff:10:c8:ff:82:
                    fc:ac:3b:60:3d:7e:83:13:82:51:e4:03:2f:d3:0e:
                    0c:a4:e3:83:4f:34:81:1f:41:fb:1b:85:f4:04:60:
                    df:5c:76:35:11:ba:e5:e1:a3:6a:4f:9c:b8:c0:12:
                    ba:7f:14:61:65:b3:f3:d1:85:70:95:01:d9:fa:82:
                    22:13:71:fe:26:09:8e:dc:6e:dd:61:f8:07:14:0f:
                    26:82:e7:64:6a:9d:47:96:33:e1:3c:15:ef:09:bb:
                    da:22:65:45:55:81:cd:38:68:f6:19:c4:78:fa:cd:
                    d9:17:3f:58:23:1e:fa:23:2d:f2:af:d5:77:17:81:
                    f0:99:91:80:53:5e:69:31:3a:6f:2b:6c:44:a9:90:
                    b3:6f:77:d7:22:5e:44:ab:04:d6:87:0d:22:af:eb:
                    ee:72:05:99:8d:6c:84:c6:06:6e:f8:1f:8c:e7:4a:
                    04:16:1c:6d:c9:ac:bf:c8:e9:99:68:6a:c2:7b:33:
                    40:44:3f:b1:f3:df:2d:1b:ec:6a:1c:39:bf:46:2d:
                    ca:6c:b6:4a:e5:77:31:bf:57:68:61:18:5e:1d:e1:
                    d9:55:40:84:b5:4b:d3:a1:b9:9f:a9:23:5e:6a:9c:
                    14:1c:8a:96:27:7c:ef:af:a7:54:b2:3c:9a:a6:54:
                    4a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:77:33:32:56:28:EA:34:F0:D5:20:E9:F3:84:23:1C:C4:43:F2:A3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42E47824B26911F1973F72C3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:dd:cf:d6:5e:05:c6:76:5f:34:57:56:8b:95:16:b9:df:5d:
         97:b0:d0:4c:12:f2:d2:84:e1:52:f5:8c:b0:d2:5f:97:e6:b3:
         a0:0b:03:01:b7:a7:d1:56:df:be:6a:ee:e8:ee:fd:08:60:37:
         4f:b1:2b:26:71:3c:0d:33:91:f3:6a:da:21:09:2d:ad:3b:3b:
         0b:b9:09:44:39:00:1c:57:6d:5a:d1:85:4d:6e:47:8b:70:a4:
         87:62:d0:f0:1a:e8:d1:c3:e5:67:d0:a7:a8:2a:aa:75:96:2f:
         7b:69:50:6c:9b:c4:60:cc:0b:3c:45:39:76:b8:93:b8:8f:a4:
         81:13:9e:9a:04:bc:12:e8:93:b3:9d:c2:fa:19:26:57:cf:01:
         36:0e:e9:c5:4f:a0:bb:40:49:a1:c5:0d:df:7d:f0:a1:d6:84:
         70:f0:6d:3e:24:d7:2b:4e:21:d5:e0:4f:4d:89:8f:f1:19:71:
         e8:f4:d3:08:62:c2:0c:1c:af:14:3e:82:47:08:96:c1:73:ef:
         7c:66:72:02:87:1b:ad:3a:02:d8:a6:68:50:2b:a6:11:84:98:
         3f:d6:54:2b:44:d7:93:7c:b0:79:24:d0:9a:af:2f:44:3c:d3:
         a8:7b:1f:fd:52:c7:e6:79:ed:0d:9a:0a:3a:d6:f0:55:d1:1a:
         53:f8:7a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----