Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6763F4C8B1A011F1971AA105CF1D38B0.roa
File:                     6763F4C8B1A011F1971AA105CF1D38B0.roa (raw, json)
Hash identifier:          kPxLEp36yVJN9PoEqo1FQwrtdmSMk9Lzk1n+EaOFqJQ=
Subject key identifier:   5A:DC:ED:18:07:98:B9:A2:5F:57:0D:7D:BF:7E:C9:AE:74:0B:78:01
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D694
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6763F4C8B1A011F1971AA105CF1D38B0.roa
Signing time:             Wed 16 Sep 2026 07:29:52 +0000
ROA not before:           Wed 16 Sep 2026 07:29:47 +0000
ROA not after:            Fri 25 Sep 2026 07:29:47 +0000
asID:                     269984
IP address blocks:        156.255.128.0/21 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120468 (0x1d694)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 16 07:29:47 2026 GMT
            Not After : Sep 25 07:29:47 2026 GMT
        Subject: CN=6aaa456f-042d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f7:bc:74:25:df:95:6f:15:e6:dd:e5:80:73:
                    55:cf:d6:07:ba:87:c3:35:e1:5e:a4:1e:f8:ff:c1:
                    05:ca:7d:2c:1a:eb:c3:08:85:fd:27:d5:6a:58:c2:
                    43:0d:ea:34:18:de:75:18:46:55:f2:cb:a6:19:fa:
                    97:54:7b:2c:a8:97:31:3b:7c:7e:66:2b:ae:ef:b9:
                    d5:87:f9:72:0b:a5:15:91:d8:87:85:66:5c:92:45:
                    1d:49:2c:13:42:83:98:48:32:e2:be:c4:61:0e:12:
                    d8:55:ab:92:f6:7f:28:30:fe:95:13:c2:7c:f3:b7:
                    bd:58:c4:d9:d4:10:15:13:33:0e:08:52:84:21:16:
                    06:99:3c:9c:d9:32:e2:d2:32:85:6c:31:ee:b9:57:
                    50:48:75:4b:f2:d9:45:74:e7:fb:7d:dc:43:5f:2f:
                    3e:7a:0f:62:87:8c:4a:64:da:ae:07:3f:40:02:ed:
                    96:c8:4c:b9:95:c8:d3:ca:a6:74:37:67:7c:b6:92:
                    18:0b:f5:17:b8:5a:d6:f6:aa:b0:40:b4:89:f9:0d:
                    f7:6a:12:ed:21:88:bd:b0:13:f2:d1:7d:7a:64:0b:
                    4b:d7:3e:0e:50:a2:3e:1f:f1:6c:a7:36:25:0c:7e:
                    28:ef:94:c2:9a:de:89:75:de:c4:59:f0:0a:78:9a:
                    1c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DC:ED:18:07:98:B9:A2:5F:57:0D:7D:BF:7E:C9:AE:74:0B:78:01
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6763F4C8B1A011F1971AA105CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:09:ce:f7:a1:d4:d2:7f:2d:5a:e1:a2:ae:90:1f:33:68:83:
         bd:6e:7d:77:2e:35:16:49:8a:b0:b1:84:4d:c3:68:b0:9c:7a:
         61:1b:ba:2b:9e:44:41:10:bf:e7:1f:db:a3:c3:e2:0a:e4:ce:
         fa:e2:09:22:f3:08:5b:1a:93:45:91:f4:2d:6f:c2:05:90:64:
         05:fe:4d:8e:73:9d:d3:85:d3:4a:37:3b:85:34:75:56:3b:43:
         04:c6:4d:67:86:44:51:5b:4f:44:90:71:14:36:b0:0b:8c:af:
         b9:1a:d1:db:93:97:b3:dd:c4:d5:ee:8e:63:9a:92:76:60:ff:
         9e:7d:4c:14:76:3c:97:7d:71:25:f6:d6:4b:3d:4c:5f:46:f5:
         8e:8d:e9:10:80:25:d2:88:a4:1e:78:b0:6d:ed:29:50:4b:c0:
         20:a6:1f:c8:65:bb:7d:24:16:4f:a2:c9:0f:67:ab:fe:be:51:
         35:97:ee:80:8c:09:9c:47:c8:64:0d:cb:3f:2b:1c:10:33:d0:
         da:c0:6d:b1:30:6c:f4:8d:ac:e9:55:13:06:38:c5:66:cb:d6:
         bf:43:d0:16:b3:be:39:84:90:df:96:23:fe:e4:a4:de:c0:97:
         5d:77:a8:d2:6a:a9:e4:a4:33:b1:c0:79:61:0b:6f:e4:8a:ad:
         62:86:13:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----