Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C10999EB26611F1BABD83B1CE1D38B0.roa
File:                     4C10999EB26611F1BABD83B1CE1D38B0.roa (raw, json)
Hash identifier:          DMF3/WLn8a2FolCjmhgIibX8BpYvbQewZKN30yZ+Uw0=
Subject key identifier:   5B:22:B3:8F:31:5C:5B:0C:20:5E:CA:CA:A5:F8:F9:BA:CB:D1:73:8F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D6B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C10999EB26611F1BABD83B1CE1D38B0.roa
Signing time:             Thu 17 Sep 2026 07:06:26 +0000
ROA not before:           Thu 17 Sep 2026 07:06:22 +0000
ROA not after:            Sun 27 Sep 2026 07:06:22 +0000
asID:                     402169
IP address blocks:        156.239.24.0/21 maxlen: 24
                          156.239.52.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120496 (0x1d6b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 17 07:06:22 2026 GMT
            Not After : Sep 27 07:06:22 2026 GMT
        Subject: CN=6aab9172-a8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2e:e9:14:08:04:cd:d2:26:33:45:05:47:39:
                    17:4b:42:85:70:00:48:40:c1:84:58:38:4d:09:56:
                    98:b9:cb:f3:16:bb:32:8f:ab:b4:4a:1a:7b:17:e3:
                    15:74:4c:7a:8f:9e:75:65:2b:e1:49:49:72:41:bd:
                    ab:a0:c2:17:45:b9:ad:c1:ca:1b:a2:b8:8e:5d:16:
                    60:7e:24:29:9c:fa:34:92:f9:b8:93:90:81:d2:4c:
                    ab:f9:86:dc:d7:d8:5f:b4:27:8a:4d:13:7f:49:be:
                    67:5b:50:ee:23:ee:57:a4:1b:30:2b:c5:f4:3d:cd:
                    bd:fa:79:01:cb:0f:11:8f:d5:c2:cc:2e:29:87:3a:
                    01:35:8e:e0:86:d2:77:03:48:c9:35:ac:0b:33:ae:
                    9a:41:d5:99:8d:a1:a8:ac:c6:5a:e2:f1:f5:07:f4:
                    79:f1:96:f7:55:09:8e:8d:0b:6f:3f:8f:03:36:05:
                    d9:41:03:8c:1e:8c:99:93:26:94:11:36:1a:3a:5b:
                    e7:9d:5c:f6:5b:37:0b:99:b0:31:1d:63:9d:9c:f1:
                    e5:81:1f:d8:7c:9e:cb:fa:10:b8:ec:1b:38:41:13:
                    01:06:b2:15:8d:25:ac:18:24:ab:31:af:b5:5f:44:
                    99:3a:63:24:28:ec:d0:9c:c9:31:43:a4:3d:5c:63:
                    40:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:22:B3:8F:31:5C:5B:0C:20:5E:CA:CA:A5:F8:F9:BA:CB:D1:73:8F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C10999EB26611F1BABD83B1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.24.0/21
                  156.239.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:f9:cb:d9:1f:b2:4b:3b:9e:10:d4:3d:ca:98:c6:05:ed:e3:
         f8:51:a7:3e:dd:95:17:ff:86:e7:6a:e7:9a:0a:c5:33:43:2e:
         88:cd:2a:86:c2:83:8a:35:b4:2b:b4:27:a6:47:03:01:f0:fa:
         1b:21:88:8c:f1:14:9a:7d:7e:06:ef:95:d0:c2:cf:c4:10:84:
         14:4e:0c:35:15:dc:fa:0d:e8:7b:ef:ab:91:43:6e:e6:e6:ce:
         77:f9:c0:8c:10:10:8e:ca:13:ef:ee:70:d4:40:4a:2b:18:3a:
         5e:36:41:1c:8c:61:97:84:f4:34:28:4f:11:f5:77:72:e4:59:
         f6:2a:15:9e:98:c4:ba:3e:f1:c0:8f:1e:a7:a4:f8:90:74:5d:
         cb:4a:dc:11:a0:78:f6:fb:2b:2d:bb:ec:cd:80:b6:36:d9:1a:
         b8:e7:c2:e3:29:48:6d:10:0e:be:85:ca:77:fd:66:08:3a:52:
         18:0e:b5:0c:d9:57:5c:2f:f3:ee:b8:53:f2:c9:a7:24:55:fd:
         56:1e:94:4b:ce:19:bd:a3:84:4a:6f:c0:83:c8:0f:b3:64:d2:
         c6:8a:52:56:eb:90:85:dd:cd:92:81:fe:25:87:d7:f8:56:e7:
         aa:03:7e:19:c4:47:8c:73:d1:a9:7b:be:97:23:6e:26:86:50:
         79:ca:ae:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----