Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B10B8/DA26C5EE0F1711EB96C8FA5CF8AEA228/23D4257A20FB11F0900F649ADAE4EC9C.roa
File:                     23D4257A20FB11F0900F649ADAE4EC9C.roa (raw, json)
Hash identifier:          8smFVw72lA8BnnfFGzknWQqrmzQF/6hSOlIgx/+A4vM=
Subject key identifier:   26:7E:E5:AF:FC:89:8B:76:7C:20:F4:E1:A5:A8:54:E7:79:1A:63:8F
Certificate issuer:       /CN=F36B10B8AF/serialNumber=F5ED7159479B4766AA7DDE2D12DDC976F6D186DD
Certificate serial:       06A1
Authority key identifier: F5:ED:71:59:47:9B:47:66:AA:7D:DE:2D:12:DD:C9:76:F6:D1:86:DD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9e1xWUebR2aqfd4tEt3JdvbRht0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B10B8/DA26C5EE0F1711EB96C8FA5CF8AEA228/23D4257A20FB11F0900F649ADAE4EC9C.roa
Signing time:             Thu 24 Apr 2025 10:59:07 +0000
ROA not before:           Mon 15 Sep 2025 10:59:01 +0000
ROA not after:            Mon 15 Oct 2035 10:59:01 +0000
asID:                     15169
IP address blocks:        2c0f:fb50::/32 maxlen: 32
                          2c0f:fb50:4002::/48 maxlen: 48
                          2c0f:fb50:4003::/48 maxlen: 48

Validation:               Failed, certificate is not yet valid

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1697 (0x6a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B10B8AF, serialNumber=F5ED7159479B4766AA7DDE2D12DDC976F6D186DD
        Validity
            Not Before: Sep 15 10:59:01 2025 GMT
            Not After : Oct 15 10:59:01 2035 GMT
        Subject: CN=680a197a-c13b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:84:27:b8:3f:68:a0:8f:f3:57:9b:04:6c:0e:
                    a4:e3:da:ca:26:33:2a:53:46:f1:8c:b0:20:8d:09:
                    a6:24:42:ec:d0:d1:50:5e:28:f3:ea:5c:a8:40:fe:
                    4d:b4:2e:7b:ff:35:18:73:e9:e2:58:b2:0c:b8:a4:
                    65:99:3c:5b:e0:88:df:63:c0:2f:e6:66:48:10:b3:
                    f3:d5:ed:a5:86:57:a3:f6:d6:fa:5e:40:15:57:75:
                    ea:05:0a:59:74:09:de:9b:5f:3f:a8:32:20:b8:c7:
                    37:30:1b:79:70:e6:5f:7f:76:05:ea:a5:71:b7:62:
                    72:04:ce:4a:f8:b7:58:d1:5a:10:a6:a0:35:a6:0b:
                    39:9d:30:8a:1a:a2:c7:30:82:06:fd:0d:b7:6b:c3:
                    9f:db:c1:e3:61:e9:31:ba:e7:73:80:82:84:5f:6a:
                    19:a0:e7:d3:02:d7:d9:84:cf:ec:10:63:63:07:f4:
                    82:14:d9:4f:2b:cc:b6:fe:4a:98:a2:35:7e:5e:6b:
                    87:35:f4:54:b0:13:6d:5d:80:d6:c3:44:f0:d2:99:
                    14:71:61:9e:16:83:1c:f4:5d:1c:f4:be:b2:46:51:
                    2e:49:36:15:4d:bc:37:8a:1f:e8:78:17:a4:d4:df:
                    59:72:75:38:06:3d:76:d8:b3:27:65:f0:40:5b:59:
                    d6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7E:E5:AF:FC:89:8B:76:7C:20:F4:E1:A5:A8:54:E7:79:1A:63:8F
            X509v3 Authority Key Identifier:
                keyid:F5:ED:71:59:47:9B:47:66:AA:7D:DE:2D:12:DD:C9:76:F6:D1:86:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B10B8/DA26C5EE0F1711EB96C8FA5CF8AEA228/9e1xWUebR2aqfd4tEt3JdvbRht0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9e1xWUebR2aqfd4tEt3JdvbRht0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B10B8/DA26C5EE0F1711EB96C8FA5CF8AEA228/23D4257A20FB11F0900F649ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:fb50::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:20:58:45:a1:bd:47:b3:70:e3:eb:22:b2:5c:ed:91:23:ed:
         21:75:39:2f:8b:42:71:9a:84:c7:fa:99:47:ed:ae:6b:40:3e:
         f7:57:b1:16:a0:8d:b6:38:d3:93:a3:cd:f1:93:d8:0b:2e:23:
         25:43:e2:61:b1:d8:e4:3f:84:9c:c6:c9:4f:cd:81:44:81:0f:
         4f:72:90:cf:99:1f:f3:7a:0a:f5:4a:26:05:07:93:cd:01:78:
         05:64:33:b3:ee:8b:b3:3b:7a:aa:94:c0:6a:57:ac:c1:b6:bf:
         de:52:5a:7d:73:e2:75:a9:4c:51:8b:ba:03:11:37:79:4f:2f:
         34:d5:7f:bc:55:56:5c:36:da:e6:9a:cf:b9:9f:fa:f7:0b:2a:
         61:83:9f:dd:8a:e9:a0:54:99:a1:25:1b:c0:1f:8e:0a:30:ad:
         44:9a:df:5c:89:ee:76:8b:d3:25:f6:f5:7c:1f:31:b9:86:d6:
         6c:4c:4d:da:26:54:61:1d:e2:66:de:14:96:2d:8d:fd:bb:6e:
         fb:f9:77:a3:6e:8f:b9:76:2b:96:78:18:0e:d3:07:84:ad:6e:
         72:25:33:5b:07:53:a5:d6:60:54:22:fb:d7:f5:06:e5:91:9d:
         b9:87:5c:30:86:85:e1:34:87:05:13:63:96:55:ba:d4:62:a3:
         b1:e8:22:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----