Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66519D9A9DE311F1BDE075BDCE1D38B0.roa
File:                     66519D9A9DE311F1BDE075BDCE1D38B0.roa (raw, json)
Hash identifier:          eTvdNtfds7F080QtB42iie2Guenc4IUG3VsMSr7LJOo=
Subject key identifier:   B1:AA:97:98:51:37:B2:50:BE:74:F8:FB:AC:4B:4F:3E:5A:E5:79:05
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E1AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66519D9A9DE311F1BDE075BDCE1D38B0.roa
Signing time:             Sat 22 Aug 2026 04:39:03 +0000
ROA not before:           Sat 22 Aug 2026 04:38:59 +0000
ROA not after:            Mon 28 Sep 2026 04:38:59 +0000
asID:                     402857
IP address blocks:        154.84.166.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123307 (0x1e1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 22 04:38:59 2026 GMT
            Not After : Sep 28 04:38:59 2026 GMT
        Subject: CN=6a8927e7-ab3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:25:f6:6a:07:1f:10:36:a4:0b:d8:34:a1:15:
                    2e:66:a7:ca:38:09:e5:c0:55:a6:f0:ba:be:df:b6:
                    28:81:fb:6f:ed:58:af:e5:48:96:6f:2b:62:7c:c6:
                    0a:d6:3c:ba:ba:50:e0:b2:7b:ca:28:7c:e8:14:f1:
                    14:c5:75:7f:fd:46:0e:ca:57:1f:cd:3c:b5:20:c0:
                    13:d5:a2:73:d7:af:7a:a9:e6:37:a1:81:b6:70:36:
                    5e:7f:6c:c8:0d:1d:0b:b4:4c:bf:e9:d5:13:d2:ed:
                    fd:4d:f6:d1:ad:89:43:10:49:06:37:78:17:dc:7f:
                    05:56:5e:bc:88:77:2c:97:09:5d:eb:09:75:df:f3:
                    8d:0d:2f:50:21:fa:3b:c9:27:03:4b:22:c2:a2:63:
                    cb:e6:6a:83:58:92:f1:b4:83:ab:f9:c5:6d:d7:b3:
                    ee:58:a8:78:6e:b2:6e:86:15:6c:54:d6:24:b9:50:
                    89:aa:24:e7:84:13:5c:dc:9e:2c:75:ab:d3:97:d5:
                    ac:ec:7d:3a:07:38:ed:66:2e:1b:d6:47:f3:e2:e1:
                    34:c6:85:b7:41:03:29:14:a2:71:ad:86:18:a2:ec:
                    e2:c3:8e:81:cb:1c:1f:44:f8:e2:1d:3f:58:30:dd:
                    82:f0:ff:27:71:11:25:58:87:18:bc:a5:21:8a:b9:
                    c2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AA:97:98:51:37:B2:50:BE:74:F8:FB:AC:4B:4F:3E:5A:E5:79:05
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66519D9A9DE311F1BDE075BDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:17:cd:d9:41:8e:02:38:fe:d3:b6:bc:75:a4:c2:4a:56:61:
         9d:6d:0b:90:fa:c9:0e:de:e0:cb:7d:f2:25:f7:04:60:c9:16:
         fc:17:ed:29:7a:27:fc:07:3e:13:44:d0:99:a6:97:f0:f1:8d:
         ea:ee:ab:82:92:9d:48:81:c1:f3:14:d2:fc:ae:06:db:c3:8c:
         ed:8e:a5:fe:65:b2:43:1e:bc:91:b8:76:4d:82:16:5c:00:06:
         33:de:5a:78:01:93:44:20:5e:f4:74:a1:40:43:d9:d6:69:f9:
         5d:c1:66:4b:ba:13:b5:a9:2b:53:69:4c:b7:7a:63:7a:47:b9:
         73:3a:fb:21:47:87:41:1d:a9:95:f7:29:b7:27:3d:6d:08:dc:
         69:72:53:6d:81:1d:d1:2d:1f:1f:5f:82:77:ff:b0:ce:f2:a2:
         98:cb:22:77:68:20:ac:5e:fa:63:39:8d:76:7b:95:74:bd:ac:
         83:cb:5b:86:11:cf:34:b8:76:34:bc:7d:b3:51:2c:fc:a1:d8:
         ee:9a:3c:09:17:83:80:37:28:31:ec:86:d8:90:d8:07:bc:dd:
         1e:98:fb:44:bf:69:7f:d9:fd:54:f0:5d:fd:07:e8:18:4a:8d:
         bf:84:97:52:a2:82:5a:dd:35:ad:e7:7c:7f:7d:e6:ce:8d:c6:
         0e:54:55:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeGrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODIyMDQzODU5WhcNMjYwOTI4MDQzODU5WjAYMRYw
FAYDVQQDEw02YTg5MjdlNy1hYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqiX2agcfEDakC9g0oRUuZqfKOAnlwFWm8Lq+37Yogftv7Viv5UiWbyti
fMYK1jy6ulDgsnvKKHzoFPEUxXV//UYOylcfzTy1IMAT1aJz1696qeY3oYG2cDZe
f2zIDR0LtEy/6dUT0u39TfbRrYlDEEkGN3gX3H8FVl68iHcslwld6wl13/ONDS9Q
Ifo7yScDSyLComPL5mqDWJLxtIOr+cVt17PuWKh4brJuhhVsVNYkuVCJqiTnhBNc
3J4sdavTl9Ws7H06BzjtZi4b1kfz4uE0xoW3QQMpFKJxrYYYouziw46ByxwfRPji
HT9YMN2C8P8ncRElWIcYvKUhirnC4QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLGq
l5hRN7JQvnT4+6xLTz5a5XkFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NjUxOUQ5QTlERTMxMUYxQkRFMDc1QkRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlSmMA0GCSqGSIb3DQEB
CwUAA4IBAQBtF83ZQY4COP7Ttrx1pMJKVmGdbQuQ+skO3uDLffIl9wRgyRb8F+0p
eif8Bz4TRNCZppfw8Y3q7quCkp1IgcHzFNL8rgbbw4ztjqX+ZbJDHryRuHZNghZc
AAYz3lp4AZNEIF70dKFAQ9nWafldwWZLuhO1qStTaUy3emN6R7lzOvshR4dBHamV
9ym3Jz1tCNxpclNtgR3RLR8fX4J3/7DO8qKYyyJ3aCCsXvpjOY12e5V0vayDy1uG
Ec80uHY0vH2zUSz8odjumjwJF4OANygx7IbYkNgHvN0emPtEv2l/2f1U8F39B+gY
So2/hJdSooJa3TWt53x/febOjcYOVFVA
-----END CERTIFICATE-----