Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A28BB692B23D11F1B826D4ADCE1D38B0.roa
File:                     A28BB692B23D11F1B826D4ADCE1D38B0.roa (raw, json)
Hash identifier:          0GnL3M+8aKsPlmTcxVEu53Y1tFLpH1V+3GVIj2SXu3A=
Subject key identifier:   15:DF:8E:89:4D:79:C6:24:04:87:D3:79:3F:87:5E:79:87:4A:49:3F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D69B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A28BB692B23D11F1B826D4ADCE1D38B0.roa
Signing time:             Thu 17 Sep 2026 02:15:22 +0000
ROA not before:           Thu 17 Sep 2026 02:15:18 +0000
ROA not after:            Thu 24 Sep 2026 02:15:18 +0000
asID:                     134365
IP address blocks:        156.226.176.0/21 maxlen: 24
                          156.226.176.0/24 maxlen: 24
                          156.226.177.0/24 maxlen: 24
                          156.226.178.0/24 maxlen: 24
                          156.226.179.0/24 maxlen: 24
                          156.226.180.0/22 maxlen: 24
                          156.226.180.0/24 maxlen: 24
                          156.226.181.0/24 maxlen: 24
                          156.226.182.0/24 maxlen: 24
                          156.226.183.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120475 (0x1d69b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 17 02:15:18 2026 GMT
            Not After : Sep 24 02:15:18 2026 GMT
        Subject: CN=6aab4d3a-a270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:92:07:26:c9:74:ae:12:0b:76:ab:1a:57:46:
                    7f:15:0a:b6:14:da:00:50:13:0a:20:76:33:0d:b2:
                    2e:2f:ea:d8:b6:73:c9:5a:ec:b1:e7:19:8d:c2:7c:
                    2b:35:0f:52:3d:d1:4d:4b:c5:ad:24:c0:2c:46:0a:
                    c7:0f:51:ea:76:1c:db:d8:8e:c4:d3:c4:6f:6b:01:
                    75:36:1d:cb:f0:7d:95:50:7c:bc:13:c6:96:7b:8f:
                    83:d1:bd:2c:28:e1:a7:52:0f:a2:e4:c7:7c:9b:fb:
                    1c:27:ae:4b:f2:60:c7:f1:e2:44:14:97:be:a6:9c:
                    56:ea:9b:76:46:8f:09:b7:6a:53:2e:b2:a0:27:b3:
                    ff:71:7c:4d:a4:ad:f9:75:cc:ee:44:a6:61:0a:1f:
                    b6:0f:f9:0f:66:35:d6:56:75:9b:dd:02:2c:2e:34:
                    42:16:f6:7c:1e:97:2d:6d:f5:04:ee:fe:a1:26:01:
                    5c:ad:35:ff:1e:d8:10:56:4f:4d:84:f8:7b:99:63:
                    b4:5c:f9:2b:c5:da:72:f3:70:9f:1f:bf:6f:86:d8:
                    5b:2c:44:f6:ca:58:d7:93:a3:a0:a4:1e:ee:fe:23:
                    65:d5:fe:93:27:41:17:f7:e1:91:17:83:38:52:d7:
                    77:75:48:44:b1:b3:28:93:eb:e8:b6:83:fe:2a:d7:
                    6c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DF:8E:89:4D:79:C6:24:04:87:D3:79:3F:87:5E:79:87:4A:49:3F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A28BB692B23D11F1B826D4ADCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:63:8b:f9:3d:57:b2:17:5c:e8:7f:be:83:65:45:b0:19:2d:
         9a:21:51:b4:35:37:52:d9:84:28:ba:8b:f1:f8:53:8e:87:02:
         7d:96:fe:7d:df:f9:ca:c0:86:59:43:81:a9:01:cc:a0:6c:93:
         10:6e:bb:c0:fa:71:28:17:07:50:f0:d2:b3:94:56:02:8b:2e:
         e6:d1:4e:44:41:de:9b:e1:17:fb:a1:98:11:a3:9b:71:cc:8c:
         65:f6:10:2d:c7:cd:29:c9:ff:13:47:9b:95:09:a7:09:d9:45:
         fd:77:c8:88:53:34:8c:d8:a2:df:f4:1e:ee:8e:fb:ce:1a:57:
         9c:b6:ab:50:67:fc:fa:91:9c:01:30:c2:c7:2f:1d:f6:73:e0:
         7b:7a:6e:46:4e:9c:11:0e:6a:a4:1b:c1:27:07:db:d2:7a:c5:
         4f:0e:40:ee:5e:88:d5:d0:20:e5:c8:c4:3b:5c:ed:fb:84:ab:
         bc:16:ae:9d:98:9a:49:ef:2a:85:17:1d:5c:cc:16:8f:be:9b:
         73:39:5b:4e:c6:15:ad:53:72:fa:3c:93:01:c6:a8:89:78:54:
         0a:04:7e:07:87:1c:59:13:eb:15:b4:67:9c:bf:86:f7:4d:19:
         e0:de:e7:cf:ee:d7:eb:29:38:65:eb:c3:a1:3b:86:cc:12:66:
         ed:31:eb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----