Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/930F30F8F44911EA9099AB4DF8AEA228.roa
File:                     930F30F8F44911EA9099AB4DF8AEA228.roa (raw, json)
Hash identifier:          65qe8De3g2SG616o/hl5J9ZBaC7cQWdyg/KgH1Ylsc8=
Subject key identifier:   4C:AC:D6:A7:A9:BF:5F:29:AB:EA:37:D1:5F:1A:26:E5:67:D8:45:4A
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       026F
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/930F30F8F44911EA9099AB4DF8AEA228.roa
Signing time:             Fri 11 Sep 2020 16:12:23 +0000
ROA not before:           Fri 11 Sep 2020 16:12:18 +0000
ROA not after:            Wed 11 Sep 2030 16:12:18 +0000
asID:                     327687
IP address blocks:        196.43.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Sep 11 16:12:18 2020 GMT
            Not After : Sep 11 16:12:18 2030 GMT
        Subject: CN=5f5ba1e7-1f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9a:74:57:d5:95:03:a5:35:de:2e:6e:f5:3e:
                    72:15:ba:21:75:26:bf:d0:db:85:f3:70:92:65:aa:
                    09:e9:de:e3:6d:c0:ca:0e:09:ba:b4:43:e8:72:93:
                    27:ba:7b:1b:05:e0:8b:25:da:6f:df:bb:d1:b4:b3:
                    0b:97:63:27:b9:7b:34:e3:43:59:84:aa:04:a7:02:
                    9f:d1:e0:67:11:b1:7b:99:54:a7:b2:6d:1f:e7:ea:
                    d7:c9:79:f4:47:32:2d:f1:cb:1c:e8:3a:0e:f9:f8:
                    32:ca:45:6f:89:34:92:9a:7b:44:a4:c6:a7:46:b9:
                    73:e1:65:db:e2:17:14:0c:e7:54:c0:be:03:c5:ec:
                    04:73:83:8c:d6:c2:49:e2:60:a1:1d:68:2a:a9:e0:
                    b0:cb:a4:15:bb:b3:c9:07:4d:6e:e1:b0:e9:4f:2c:
                    4a:e1:59:fb:9a:53:d9:25:e9:13:5a:b7:60:a9:d7:
                    31:55:d3:f7:8d:84:ad:9e:64:30:dd:78:5c:f4:c0:
                    55:bf:2b:85:44:98:72:8d:be:9e:6d:92:27:ec:35:
                    45:19:00:13:b1:f6:7d:d6:12:1a:98:8f:60:66:b4:
                    ef:fa:f7:05:8c:ed:4c:24:84:bd:9d:33:ea:9c:a8:
                    2a:2e:59:8c:0e:60:7e:4d:8f:7f:1a:da:5b:0b:86:
                    d0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AC:D6:A7:A9:BF:5F:29:AB:EA:37:D1:5F:1A:26:E5:67:D8:45:4A
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/930F30F8F44911EA9099AB4DF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:09:84:2a:e5:ad:0c:ee:c1:ae:dc:77:46:bc:b3:39:bb:0a:
         9b:dd:2e:d5:73:dc:8c:3d:7f:68:c8:0b:2e:04:52:46:6d:c9:
         76:df:c2:45:be:a9:3b:a3:11:91:37:5b:17:42:c8:ac:b4:21:
         ce:db:dd:6c:a9:ec:a5:47:00:2f:a5:38:06:80:73:51:3a:3e:
         48:6e:19:1e:54:c2:47:92:18:6f:e0:91:19:df:c0:6d:6a:b7:
         a6:02:75:e6:7f:4e:c7:ef:82:86:3f:3f:33:03:0e:6c:97:46:
         a0:a5:55:8d:31:80:ab:42:a5:af:f2:f2:86:77:90:31:5a:6f:
         36:46:6f:1a:50:56:65:ee:10:22:5f:cf:ad:8e:6c:6a:76:13:
         a1:fd:35:82:42:df:8f:78:d0:52:64:e2:4d:40:24:13:48:19:
         f1:b9:dc:03:f9:d5:ab:e2:45:4d:f2:fa:3e:2f:b1:6d:12:54:
         c3:e8:e2:94:57:dc:3c:b1:f7:e7:16:97:78:c1:09:3d:44:7c:
         38:27:12:b7:27:14:92:ce:1b:df:61:9b:d3:a1:66:07:ca:25:
         39:d8:ae:bc:65:4a:28:34:35:73:6f:d2:87:e6:62:cc:63:e5:
         38:72:bd:6c:6a:68:86:b0:b1:80:1f:af:16:42:ae:43:65:12:
         c4:0f:c4:ee
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkIzOEVBRjExMC8GA1UEBRMoQUQ0MDA0RDg1MThERUI5OUNFRDNGRkZBQjYzNUFB
MTc0RTcwMEZENzAeFw0yMDA5MTExNjEyMThaFw0zMDA5MTExNjEyMThaMBgxFjAU
BgNVBAMTDTVmNWJhMWU3LTFmMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcmnRX1ZUDpTXeLm71PnIVuiF1Jr/Q24XzcJJlqgnp3uNtwMoOCbq0Q+hy
kye6exsF4Isl2m/fu9G0swuXYye5ezTjQ1mEqgSnAp/R4GcRsXuZVKeybR/n6tfJ
efRHMi3xyxzoOg75+DLKRW+JNJKae0SkxqdGuXPhZdviFxQM51TAvgPF7ARzg4zW
wkniYKEdaCqp4LDLpBW7s8kHTW7hsOlPLErhWfuaU9kl6RNat2Cp1zFV0/eNhK2e
ZDDdeFz0wFW/K4VEmHKNvp5tkifsNUUZABOx9n3WEhqYj2BmtO/69wWM7UwkhL2d
M+qcqCouWYwOYH5Nj38a2lsLhtC3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUTKzW
p6m/Xymr6jfRXxom5WfYRUowHwYDVR0jBBgwFoAUrUAE2FGN65nO0//6tjWqF05w
D9cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJCMzhFLzczQzE5M0UyREY2MTExRTlCRTVBMkMzMEY4QUVBMjI4L3JVQUUy
RkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JVQUUyRkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJCMzhFLzczQzE5M0UyREY2MTExRTlCRTVBMkMzMEY4
QUVBMjI4LzkzMEYzMEY4RjQ0OTExRUE5MDk5QUI0REY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADEK6AwDQYJKoZIhvcNAQEL
BQADggEBAGwJhCrlrQzuwa7cd0a8szm7CpvdLtVz3Iw9f2jICy4EUkZtyXbfwkW+
qTujEZE3WxdCyKy0Ic7b3Wyp7KVHAC+lOAaAc1E6PkhuGR5UwkeSGG/gkRnfwG1q
t6YCdeZ/TsfvgoY/PzMDDmyXRqClVY0xgKtCpa/y8oZ3kDFabzZGbxpQVmXuECJf
z62ObGp2E6H9NYJC34940FJk4k1AJBNIGfG53AP51aviRU3y+j4vsW0SVMPo4pRX
3Dyx9+cWl3jBCT1EfDgnErcnFJLOG99hm9OhZgfKJTnYrrxlSig0NXNv0ofmYsxj
5ThyvWxqaIawsYAfrxZCrkNlEsQPxO4=
-----END CERTIFICATE-----
Generated at Sun May 19 01:46:28 2024 by rpki-client on console-ams.rpki-client.org