Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAEC4AEA9AE111F1BB948A00CF1D38B0.roa
File:                     FAEC4AEA9AE111F1BB948A00CF1D38B0.roa (raw, json)
Hash identifier:          J1//w9ESRVsQSHtLJn/yqf0zIEg4D4dqG8SFq4WkKMU=
Subject key identifier:   F2:F0:51:65:EF:54:41:6B:8F:02:41:FA:C8:BC:0D:C8:B3:AA:2B:D8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF85
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAEC4AEA9AE111F1BB948A00CF1D38B0.roa
Signing time:             Tue 18 Aug 2026 08:51:20 +0000
ROA not before:           Tue 18 Aug 2026 08:51:16 +0000
ROA not after:            Sun 27 Sep 2026 08:51:16 +0000
asID:                     151196
IP address blocks:        154.90.66.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122757 (0x1df85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 18 08:51:16 2026 GMT
            Not After : Sep 27 08:51:16 2026 GMT
        Subject: CN=6a841d07-64b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:66:f5:86:a1:f7:4d:a5:f0:68:29:c2:3c:24:
                    a7:97:92:c4:48:16:6c:58:78:95:64:e4:8c:ba:27:
                    5e:b2:fc:20:03:30:ae:21:fb:82:b4:6e:9d:bd:e7:
                    9c:75:f3:9a:ed:eb:3c:25:f8:91:c5:e0:ab:9d:a7:
                    ae:aa:a6:9f:e4:5b:c3:ab:c6:47:5b:4f:0a:5b:c1:
                    92:7e:0d:d8:93:b7:43:15:5e:8a:ff:65:cd:f6:fe:
                    d6:db:b3:a9:e8:71:18:c9:63:41:1f:e1:04:28:7d:
                    dd:aa:73:a1:d3:89:77:f5:87:03:c4:97:d6:9e:f4:
                    ac:65:d3:f8:a8:5a:c4:64:38:b1:ed:7a:01:18:9f:
                    80:cd:89:81:9c:97:a2:f7:01:93:1c:bd:b1:b6:bc:
                    89:29:34:40:aa:0e:78:9c:8e:7b:12:c0:e0:11:f3:
                    5c:f1:59:45:35:ee:04:b2:a0:f1:2d:b2:d1:cf:69:
                    d7:38:06:bc:f5:ee:2b:91:0f:45:ab:57:f9:89:48:
                    4c:27:7b:5a:b8:6b:0f:4b:a2:62:3e:b6:c0:77:35:
                    cf:a7:95:4a:94:cc:29:43:d0:25:ec:35:1f:d2:b2:
                    dd:fb:99:f9:05:e4:60:c3:e4:8e:bd:01:a8:6d:30:
                    8e:a2:7e:43:19:29:62:82:18:3d:60:0c:f1:e1:de:
                    29:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F0:51:65:EF:54:41:6B:8F:02:41:FA:C8:BC:0D:C8:B3:AA:2B:D8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAEC4AEA9AE111F1BB948A00CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:2b:20:0f:40:eb:2e:46:a2:11:b8:07:88:9a:a3:cb:fa:08:
         fd:15:28:1a:6d:af:85:f9:15:72:18:d3:dd:37:f6:ba:3f:a2:
         93:32:b4:c1:1d:b1:72:cb:60:46:5a:85:a2:10:2e:65:6c:d3:
         08:d7:b9:a8:0a:1f:23:1c:38:eb:bd:16:4d:b3:ff:ad:00:56:
         c4:b2:fd:34:89:f6:f9:4c:62:cc:6d:06:57:29:29:75:49:5c:
         a4:d5:6d:1d:ee:9e:67:41:20:2c:1a:9e:7c:01:d4:08:71:82:
         c1:3e:33:8b:24:db:8f:91:dd:f3:04:51:f2:59:57:64:6b:2e:
         e7:17:9a:de:5f:fc:4e:8d:aa:66:23:bd:b4:ab:40:70:65:69:
         54:d8:47:20:f3:7d:ed:2b:b6:f3:b5:4e:87:6f:db:1f:b9:b9:
         04:cf:6f:ad:09:fc:fd:2f:97:27:d7:ee:59:29:24:b6:60:8a:
         a7:69:69:80:e9:3f:e3:dd:49:5c:8b:77:69:25:16:8c:ac:38:
         f2:46:01:ed:c0:99:3d:73:fe:5d:6a:4a:5a:b7:97:3a:a8:8d:
         99:1e:9e:b0:c9:3b:56:e3:5e:05:20:28:73:cb:1d:e1:2d:66:
         1d:a5:ae:af:2b:15:df:ab:a7:6e:77:a5:04:a7:d4:7a:02:85:
         1d:2c:70:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----