Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/E90F871CA09811ECA7CC64845A40D577.roa
File:                     E90F871CA09811ECA7CC64845A40D577.roa (raw, json)
Hash identifier:          oxWlZcS9cWEi0+CZBGrhmI9nrUQ78IAE+xwjMFu/v9A=
Subject key identifier:   22:28:40:75:32:9B:48:88:7C:1D:A8:75:E7:F1:92:05:D7:F3:81:F1
Certificate issuer:       /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial:       0985
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/E90F871CA09811ECA7CC64845A40D577.roa
Signing time:             Thu 10 Mar 2022 17:38:35 +0000
ROA not before:           Thu 10 Mar 2022 17:38:30 +0000
ROA not after:            Wed 10 Mar 2027 17:38:30 +0000
asID:                     37199
IP address blocks:        197.155.28.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2437 (0x985)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
        Validity
            Not Before: Mar 10 17:38:30 2022 GMT
            Not After : Mar 10 17:38:30 2027 GMT
        Subject: CN=622a379b-9f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1b:08:1c:74:23:f2:b3:7d:d2:c4:55:e9:7a:
                    c9:a3:69:74:2a:43:5d:db:55:e7:67:a6:41:4e:1a:
                    f5:fc:59:c9:7f:a8:50:52:37:b4:78:f4:b0:12:ec:
                    16:55:24:e2:1c:dc:1b:06:50:a8:a3:97:ea:e7:d0:
                    81:d8:2f:6e:b4:ca:45:04:60:93:51:1b:2a:d8:02:
                    60:7f:b1:db:de:ec:5c:82:eb:4e:1f:74:ca:da:56:
                    5a:1b:62:3b:07:de:6c:d6:7b:e5:38:09:0e:f9:c3:
                    33:53:f6:aa:50:07:29:76:e2:71:f8:ea:32:01:1a:
                    2a:05:48:70:2f:b3:60:e4:d9:c8:c1:46:59:06:e0:
                    41:b1:82:ff:c9:af:31:f4:90:80:b5:04:5e:8d:de:
                    1b:bd:03:d8:e9:f5:f8:8b:92:64:d0:96:6f:08:58:
                    59:1e:d4:db:02:b4:05:f3:dd:85:80:fd:fc:64:16:
                    da:06:60:8a:a2:fa:85:ce:f9:17:29:a6:61:b4:8e:
                    85:56:ea:94:26:98:68:94:69:33:ce:0a:97:38:41:
                    4e:c8:68:aa:fb:f6:9d:58:97:2a:b7:91:7e:d7:0e:
                    fc:49:d8:39:80:50:f1:92:f9:aa:0b:12:0d:39:d7:
                    b8:76:42:7d:ff:9e:d0:5b:df:51:fe:9d:5e:34:49:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:28:40:75:32:9B:48:88:7C:1D:A8:75:E7:F1:92:05:D7:F3:81:F1
            X509v3 Authority Key Identifier:
                keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/E90F871CA09811ECA7CC64845A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.155.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:e8:20:88:2b:0f:82:e0:3c:ae:1d:e6:b6:44:bc:27:58:40:
         8f:31:3e:3e:2f:46:73:c9:26:0d:ea:b4:7e:52:02:76:9a:f9:
         15:16:85:a3:1c:39:14:ab:79:6e:c7:02:45:12:98:b0:35:0d:
         91:af:ab:5d:e9:7f:2c:7e:01:4b:1c:9d:88:bb:39:2a:48:53:
         10:a2:cd:a7:06:b1:1a:61:49:08:50:4e:0c:59:5f:59:e6:1d:
         09:6b:6f:e7:f9:09:05:00:4a:41:1d:e0:53:92:8a:2a:8e:9f:
         76:53:0b:cf:27:97:cd:a1:90:fd:b0:e7:6f:ff:b8:87:f6:08:
         f3:69:76:77:20:4c:44:26:dc:e3:49:ef:5d:06:24:b4:79:bd:
         b7:0c:a3:df:70:1f:5f:e9:a5:8e:ee:5f:7f:23:64:41:ae:34:
         43:21:02:c1:d9:4c:23:35:49:fc:4d:d5:c1:a1:53:fe:2e:31:
         bd:69:76:e4:c6:dc:87:58:04:34:e8:c4:7b:e8:6c:65:8e:80:
         c6:29:d4:c6:35:fe:a6:f9:cd:b3:32:9b:8d:56:e7:e8:40:d4:
         ea:f0:49:3b:bb:0c:8e:4a:30:c8:c9:60:f1:e5:46:6e:16:12:
         6f:b3:b6:89:2f:93:38:d8:26:d2:f9:98:ad:a6:fd:c4:07:8c:
         0c:58:27:40
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCYUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MUQyOTlBRjExMC8GA1UEBRMoMkIyNDQyODQ4MTc0QUE4ODk0NDY5QTc3OUI5RkQ3
REE0OTU4QzY2OTAeFw0yMjAzMTAxNzM4MzBaFw0yNzAzMTAxNzM4MzBaMBgxFjAU
BgNVBAMMDTYyMmEzNzliLTlmMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJGwgcdCPys33SxFXpesmjaXQqQ13bVednpkFOGvX8Wcl/qFBSN7R49LAS
7BZVJOIc3BsGUKijl+rn0IHYL260ykUEYJNRGyrYAmB/sdve7FyC604fdMraVlob
YjsH3mzWe+U4CQ75wzNT9qpQByl24nH46jIBGioFSHAvs2Dk2cjBRlkG4EGxgv/J
rzH0kIC1BF6N3hu9A9jp9fiLkmTQlm8IWFke1NsCtAXz3YWA/fxkFtoGYIqi+oXO
+RcppmG0joVW6pQmmGiUaTPOCpc4QU7IaKr79p1Ylyq3kX7XDvxJ2DmAUPGS+aoL
Eg0517h2Qn3/ntBb31H+nV40STK5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUIihA
dTKbSIh8Hah15/GSBdfzgfEwHwYDVR0jBBgwFoAUKyRChIF0qoiURpp3m5/X2klY
xmkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFEMjk5LzQ4RjAwOEQ4NTZENTExRTU4NDVFRjg1Q0Y4QUVBMjI4L0t5UkNo
SUYwcW9pVVJwcDNtNV9YMmtsWXhtay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0t5UkNoSUYwcW9pVVJwcDNtNV9YMmtsWXhtay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjFEMjk5LzQ4RjAwOEQ4NTZENTExRTU4NDVFRjg1Q0Y4
QUVBMjI4L0U5MEY4NzFDQTA5ODExRUNBN0NDNjQ4NDVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHFmxwwDQYJKoZIhvcNAQEL
BQADggEBAIzoIIgrD4LgPK4d5rZEvCdYQI8xPj4vRnPJJg3qtH5SAnaa+RUWhaMc
ORSreW7HAkUSmLA1DZGvq13pfyx+AUscnYi7OSpIUxCizacGsRphSQhQTgxZX1nm
HQlrb+f5CQUASkEd4FOSiiqOn3ZTC88nl82hkP2w52//uIf2CPNpdncgTEQm3ONJ
710GJLR5vbcMo99wH1/ppY7uX38jZEGuNEMhAsHZTCM1SfxN1cGhU/4uMb1pduTG
3IdYBDToxHvobGWOgMYp1MY1/qb5zbMym41W5+hA1OrwSTu7DI5KMMjJYPHlRm4W
Em+ztokvkzjYJtL5mK2m/cQHjAxYJ0A=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:53 2024 by rpki-client on console-ams.rpki-client.org