Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/74B92890F44711EA91D5794BF8AEA228.roa
File:                     74B92890F44711EA91D5794BF8AEA228.roa (raw, json)
Hash identifier:          DqF38JWCoadkuh+xWDZRTWhU1iO+AKrtd8m3qGvdfNg=
Subject key identifier:   89:3D:E9:92:EC:40:38:AF:CB:76:17:17:06:4C:03:BE:DE:06:4A:4C
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       0269
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/74B92890F44711EA91D5794BF8AEA228.roa
Signing time:             Fri 11 Sep 2020 15:57:14 +0000
ROA not before:           Fri 11 Sep 2020 15:57:07 +0000
ROA not after:            Fri 11 Oct 2030 15:57:07 +0000
asID:                     327687
IP address blocks:        196.43.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Sep 11 15:57:07 2020 GMT
            Not After : Oct 11 15:57:07 2030 GMT
        Subject: CN=5f5b9e59-892a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c4:a7:9b:5d:4b:78:91:c3:fe:91:99:3b:99:
                    14:93:75:99:06:05:06:d5:f7:ef:83:ea:bb:16:a2:
                    1e:c4:25:8f:7e:d2:db:a5:2e:c2:9c:51:9d:ec:67:
                    2a:ae:3a:fe:e4:d9:c0:74:85:71:1c:1c:cb:98:16:
                    c4:54:71:99:13:ae:3f:cc:4a:f2:fd:b8:76:1f:19:
                    da:51:79:f9:48:19:2f:28:39:19:2f:24:36:46:7f:
                    76:25:2e:47:c2:75:54:7e:99:c6:85:5f:d7:87:09:
                    a0:46:95:c3:6f:e3:a8:e8:34:18:c8:91:e5:92:ef:
                    23:df:d5:e3:a1:7e:da:f5:37:77:e2:73:d0:27:52:
                    a6:95:03:2f:b0:2f:d8:27:0b:2d:4a:f1:98:42:11:
                    00:66:4b:7c:a8:04:42:50:c1:67:3b:b1:ed:ad:9c:
                    ad:e0:5f:08:36:87:37:1f:ef:88:49:b2:cb:d5:cb:
                    a7:8e:88:92:ed:d3:7c:1f:69:f5:57:5c:b0:7a:ba:
                    9e:c5:3c:40:fd:55:85:c6:ae:70:b8:99:a5:75:40:
                    f6:6b:57:da:35:a2:59:6f:5a:7f:aa:9b:c2:f0:7d:
                    54:01:f3:0c:82:17:f5:6c:ae:4e:9f:ee:3e:bc:c5:
                    77:84:14:21:f5:06:94:97:8a:30:26:29:34:64:02:
                    b3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3D:E9:92:EC:40:38:AF:CB:76:17:17:06:4C:03:BE:DE:06:4A:4C
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/74B92890F44711EA91D5794BF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:6c:36:36:2d:c7:29:5d:60:78:31:9c:a4:b1:fc:76:37:67:
         ec:3a:0b:50:5b:84:da:f4:08:78:89:bf:6d:ce:cf:a4:68:5f:
         62:38:5d:d3:39:71:fb:4a:fa:99:52:24:fc:e6:92:6b:ea:13:
         b9:60:85:4e:e1:23:73:24:d4:af:59:17:37:0e:e0:d3:5b:59:
         c8:55:fd:f5:a6:a6:b8:02:4f:23:eb:90:1c:56:00:b8:b1:98:
         d2:ff:f1:01:c2:c4:ec:31:2b:4b:cc:f8:c5:00:40:75:4a:af:
         13:c4:d5:76:14:8b:68:74:5b:e6:77:ca:a9:9d:53:1a:a4:ef:
         d9:3c:e2:2f:99:1b:38:1e:44:82:da:da:90:08:f6:32:6b:ce:
         ab:67:95:dd:44:dd:e1:23:54:82:a0:15:95:e0:e9:0c:19:c6:
         f1:cc:ae:7a:b2:ad:35:46:94:1c:78:65:e6:67:25:6d:e6:d4:
         ab:1d:83:f6:73:70:3c:c7:ce:1d:5b:b0:8e:31:31:9c:86:a0:
         c9:e2:bb:ed:27:26:ea:1d:6e:e3:17:f5:a8:0b:49:e0:7c:b1:
         4d:1b:33:a5:6c:8e:5a:73:a2:ea:82:a9:ee:9a:89:9f:c1:f0:
         99:9f:4e:10:4f:7e:78:1a:e8:14:0c:3f:a5:53:e6:b6:67:ba:
         d6:7a:53:bb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkIzOEVBRjExMC8GA1UEBRMoQUQ0MDA0RDg1MThERUI5OUNFRDNGRkZBQjYzNUFB
MTc0RTcwMEZENzAeFw0yMDA5MTExNTU3MDdaFw0zMDEwMTExNTU3MDdaMBgxFjAU
BgNVBAMTDTVmNWI5ZTU5LTg5MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjxKebXUt4kcP+kZk7mRSTdZkGBQbV9++D6rsWoh7EJY9+0tulLsKcUZ3s
ZyquOv7k2cB0hXEcHMuYFsRUcZkTrj/MSvL9uHYfGdpReflIGS8oORkvJDZGf3Yl
LkfCdVR+mcaFX9eHCaBGlcNv46joNBjIkeWS7yPf1eOhftr1N3fic9AnUqaVAy+w
L9gnCy1K8ZhCEQBmS3yoBEJQwWc7se2tnK3gXwg2hzcf74hJssvVy6eOiJLt03wf
afVXXLB6up7FPED9VYXGrnC4maV1QPZrV9o1ollvWn+qm8LwfVQB8wyCF/Vsrk6f
7j68xXeEFCH1BpSXijAmKTRkArN3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUiT3p
kuxAOK/LdhcXBkwDvt4GSkwwHwYDVR0jBBgwFoAUrUAE2FGN65nO0//6tjWqF05w
D9cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJCMzhFLzczQzE5M0UyREY2MTExRTlCRTVBMkMzMEY4QUVBMjI4L3JVQUUy
RkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JVQUUyRkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJCMzhFLzczQzE5M0UyREY2MTExRTlCRTVBMkMzMEY4
QUVBMjI4Lzc0QjkyODkwRjQ0NzExRUE5MUQ1Nzk0QkY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADEK50wDQYJKoZIhvcNAQEL
BQADggEBAE5sNjYtxyldYHgxnKSx/HY3Z+w6C1BbhNr0CHiJv23Oz6RoX2I4XdM5
cftK+plSJPzmkmvqE7lghU7hI3Mk1K9ZFzcO4NNbWchV/fWmprgCTyPrkBxWALix
mNL/8QHCxOwxK0vM+MUAQHVKrxPE1XYUi2h0W+Z3yqmdUxqk79k84i+ZGzgeRILa
2pAI9jJrzqtnld1E3eEjVIKgFZXg6QwZxvHMrnqyrTVGlBx4ZeZnJW3m1Ksdg/Zz
cDzHzh1bsI4xMZyGoMniu+0nJuodbuMX9agLSeB8sU0bM6VsjlpzouqCqe6aiZ/B
8JmfThBPfnga6BQMP6VT5rZnutZ6U7s=
-----END CERTIFICATE-----
Generated at Sun May 19 01:46:45 2024 by rpki-client on console-fra.rpki-client.org