Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3F3A242B01811F184F831BFCE1D38B0.roa
File:                     E3F3A242B01811F184F831BFCE1D38B0.roa (raw, json)
Hash identifier:          FAFZvASNrtD8qqYiIYmh0aGJYP9x6IMDCZ0mqrOWaMs=
Subject key identifier:   18:6C:DD:E3:5C:3A:24:2A:AF:1D:A3:7F:A8:79:10:68:B6:95:1F:E2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D5F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3F3A242B01811F184F831BFCE1D38B0.roa
Signing time:             Mon 14 Sep 2026 08:47:18 +0000
ROA not before:           Mon 14 Sep 2026 08:47:14 +0000
ROA not after:            Thu 24 Sep 2026 08:47:14 +0000
asID:                     215925
IP address blocks:        45.205.1.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120306 (0x1d5f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 14 08:47:14 2026 GMT
            Not After : Sep 24 08:47:14 2026 GMT
        Subject: CN=6aa7b496-42b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a3:20:14:95:14:52:eb:63:e8:ed:ac:31:ff:
                    e9:7a:c8:05:41:f2:b5:c8:53:07:de:3b:47:ab:d2:
                    be:8e:88:26:c2:7d:df:9c:6e:1e:62:80:36:ab:ee:
                    30:1b:21:60:5d:47:7e:d5:05:9d:fb:00:14:68:2b:
                    80:f4:4f:41:26:de:d0:33:cc:5d:23:c0:72:c3:c6:
                    a8:85:1d:c3:d4:6e:25:c9:a2:1b:0b:f7:fd:18:94:
                    d2:e4:74:cb:80:22:d0:e4:d0:3d:2b:d1:1f:35:8c:
                    e0:26:cc:3b:80:fa:fb:01:bf:d1:53:6d:b9:c1:d2:
                    87:c4:33:29:2b:96:0b:44:16:5c:df:be:62:6f:a3:
                    c2:da:d4:46:00:ca:24:6d:28:9f:0e:29:74:a0:de:
                    3e:8c:7a:70:40:db:20:d0:97:bc:f1:3a:47:5c:55:
                    75:be:bd:44:a4:b0:24:11:7c:4f:be:58:4c:24:17:
                    cf:ce:15:78:fd:08:31:bc:72:f7:c4:54:2e:c2:b4:
                    64:ae:de:1d:47:16:d8:3b:40:ed:90:28:3b:ce:e9:
                    51:2d:a8:19:3d:78:a3:15:a4:b2:06:b3:52:f5:d4:
                    79:41:8f:ff:07:72:11:19:e1:ad:2b:37:69:b7:11:
                    8d:c1:27:66:e2:de:b8:58:07:bb:25:97:0c:38:e4:
                    a8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6C:DD:E3:5C:3A:24:2A:AF:1D:A3:7F:A8:79:10:68:B6:95:1F:E2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3F3A242B01811F184F831BFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:b8:79:f8:c0:13:1b:c8:b4:3e:b6:57:f3:72:30:aa:18:1c:
         e7:76:5e:e5:27:15:61:cc:7f:6e:25:4f:3b:6a:a5:68:28:fe:
         a5:54:68:31:d9:84:34:22:cb:03:ae:e2:7d:6e:af:81:71:b3:
         b1:aa:34:8d:6f:ad:3f:34:51:f1:25:81:71:46:05:55:2e:4b:
         d1:e7:03:3a:11:5b:ab:46:4e:7a:69:ce:af:03:a9:b2:f0:8c:
         5c:ac:bf:41:0d:14:e7:92:6f:84:d6:06:b8:d2:37:2a:e4:ba:
         f2:f8:e9:e4:dc:7b:36:6b:5a:aa:23:df:2f:f1:ba:8d:50:57:
         4d:bb:0d:b2:78:c3:bd:f7:64:97:d2:60:1c:1b:cf:e9:ab:ed:
         c3:be:de:9f:90:ed:a9:9c:a5:30:01:41:c9:8b:de:47:df:17:
         5d:19:9c:02:db:d3:52:4f:3b:be:80:99:79:f7:ba:e8:06:fc:
         fa:68:78:c7:64:2b:2e:03:20:c5:59:94:e7:6f:95:31:6b:e7:
         fd:d3:e3:27:b4:84:4f:56:50:0e:df:6e:49:7f:43:f5:48:09:
         3c:7d:41:b3:a0:ad:31:12:70:6e:81:1c:5f:1b:a5:13:0f:d3:
         c0:37:d2:e2:ac:bb:51:1f:05:b7:e9:4d:85:57:2a:52:23:f9:
         cc:78:d0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----