Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/200D963CB26411F18B2A31A5CE1D38B0.roa
File:                     200D963CB26411F18B2A31A5CE1D38B0.roa (raw, json)
Hash identifier:          yCmhbYoYfgPYTpKOWYo58pRlf67WVLpqjs1BUxIXDsU=
Subject key identifier:   73:28:81:36:DD:40:2E:F8:92:FB:E4:E6:4F:58:EC:4A:CE:C7:61:06
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D6AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/200D963CB26411F18B2A31A5CE1D38B0.roa
Signing time:             Thu 17 Sep 2026 06:50:53 +0000
ROA not before:           Thu 17 Sep 2026 06:50:49 +0000
ROA not after:            Sun 27 Sep 2026 06:50:49 +0000
asID:                     40065
IP address blocks:        156.239.52.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120494 (0x1d6ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 17 06:50:49 2026 GMT
            Not After : Sep 27 06:50:49 2026 GMT
        Subject: CN=6aab8dcd-b578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:81:94:d2:90:a9:4a:3e:16:76:05:8a:24:
                    84:9f:75:9d:d7:02:77:49:a9:57:0b:7a:19:89:85:
                    ca:99:eb:b1:2a:12:18:fc:4f:f8:02:89:d7:2b:eb:
                    40:d9:ea:c9:dd:e1:ae:6e:fa:b5:6b:15:5d:76:77:
                    88:c5:5b:53:bf:84:80:29:e0:b1:ae:19:8d:ba:45:
                    65:01:26:da:f8:fd:0d:b4:5c:a9:a7:ea:ba:c6:96:
                    63:4e:34:9a:db:a9:cc:37:90:13:c7:ee:87:01:18:
                    97:04:84:06:61:19:0f:5f:be:6b:4e:90:2a:df:d8:
                    98:7f:7b:08:d9:81:43:8e:66:8a:45:b0:54:c0:59:
                    bb:97:66:7a:59:03:ef:4d:6c:35:61:8d:2b:e6:8d:
                    ae:56:a8:bc:e6:f0:a6:00:c4:5a:f1:33:d8:c2:32:
                    c2:d2:fa:64:8f:51:3f:7c:a7:4d:a6:b1:fd:95:4c:
                    b9:64:0a:31:2c:02:ed:90:6d:c5:42:71:36:58:ea:
                    18:43:6f:b9:12:6d:46:aa:a7:7a:5c:b0:fd:8f:a1:
                    5d:81:e6:1b:1c:ca:9d:5d:e6:6b:67:79:ca:37:10:
                    30:eb:5d:83:09:3b:00:3f:43:c6:2a:03:54:ce:34:
                    9a:8d:d1:40:c7:52:52:6e:e4:a5:16:7c:4e:b5:1e:
                    51:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:28:81:36:DD:40:2E:F8:92:FB:E4:E6:4F:58:EC:4A:CE:C7:61:06
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/200D963CB26411F18B2A31A5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:ec:29:8e:b3:17:4d:35:a9:0b:37:94:1a:7a:1c:92:12:15:
         52:cd:7d:97:7b:be:f0:e8:4c:93:bd:f5:da:9d:82:37:b6:d4:
         ca:46:0e:ec:05:5d:c2:73:d9:8d:7c:da:d5:29:d5:e4:7d:99:
         69:1b:26:e5:b1:35:16:c9:cf:f6:7b:ea:c9:62:60:53:bc:20:
         da:75:92:3b:de:2a:0c:04:57:b7:55:aa:c1:76:d8:e7:f8:59:
         c3:e4:da:b9:1c:9e:60:c9:4c:c9:7b:62:e2:1f:2d:1d:e7:51:
         ae:83:48:a4:2b:9d:f3:c0:3c:0b:67:6c:b1:26:bd:78:21:8c:
         99:10:2a:c0:bc:85:ca:bd:31:96:db:a1:3f:49:cf:81:72:f2:
         8c:61:9b:00:e6:9b:b0:58:b6:f3:44:a3:eb:93:48:d2:01:50:
         55:41:92:f1:3a:6f:e4:60:f5:3c:72:f1:41:c2:04:05:95:f6:
         ed:5a:2f:38:4f:95:57:1d:69:9c:5d:fb:b0:f0:95:c0:4a:e9:
         2b:c0:49:3a:10:c5:39:d5:dd:30:9b:7a:98:2f:65:fb:54:bc:
         49:e2:9f:bf:dc:14:5f:a5:98:b0:30:5b:1f:a3:75:e1:cb:3f:
         e8:b7:61:1e:63:06:7d:5c:d7:37:e7:c8:1c:ea:a0:83:7f:40:
         ce:3f:ee:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----