Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/D301CA5AF37611EABEDD1173F8AEA228.roa
File:                     D301CA5AF37611EABEDD1173F8AEA228.roa (raw, json)
Hash identifier:          StpmcMJUiZZ1+g4wus6Psej5zItKuaFLhKoqaQjX/Vs=
Subject key identifier:   B3:06:1E:07:6F:D4:5D:54:78:E9:72:E0:5B:A0:C4:3A:62:D2:D7:73
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       0248
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/D301CA5AF37611EABEDD1173F8AEA228.roa
Signing time:             Thu 10 Sep 2020 15:03:46 +0000
ROA not before:           Thu 10 Sep 2020 15:03:41 +0000
ROA not after:            Tue 10 Sep 2024 15:03:41 +0000
asID:                     327687
IP address blocks:        196.43.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 May 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Sep 10 15:03:41 2020 GMT
            Not After : Sep 10 15:03:41 2024 GMT
        Subject: CN=5f5a4052-4b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:16:ab:dd:5d:63:2e:e8:09:32:64:d6:b8:5e:
                    bc:f9:03:7d:b2:3b:30:fa:35:14:44:08:ba:df:5a:
                    09:90:20:21:6c:20:8d:f9:2b:18:22:8a:77:98:e3:
                    77:c5:00:ab:7d:5f:fb:45:82:db:23:65:15:69:f8:
                    aa:e0:de:67:b7:b4:fa:af:d1:96:dc:22:27:ce:90:
                    36:d9:c5:de:35:b9:22:05:84:19:35:f0:e0:03:20:
                    12:1b:cf:8e:c7:f1:4b:35:b8:68:74:04:79:26:12:
                    c3:40:3e:de:76:4c:ce:0c:eb:cf:55:d5:d5:b6:b2:
                    54:ba:15:56:da:b4:7f:e8:a4:97:28:a8:74:b8:30:
                    1a:91:4b:c1:21:b3:b7:d7:b5:6a:d9:e8:29:db:71:
                    d3:c4:38:39:a6:a5:7e:60:99:a6:f3:f3:03:5d:97:
                    66:70:ad:2b:57:44:52:0a:54:0f:03:13:b7:ec:71:
                    14:34:63:de:a1:99:26:41:82:2d:33:c5:d0:a7:2d:
                    4d:6a:86:88:5b:63:86:bd:a6:54:c6:97:da:6a:f7:
                    d0:10:f5:1a:ab:20:74:67:ee:58:d3:de:59:0a:da:
                    ca:89:9d:43:13:45:d8:29:cd:9e:01:6e:87:5e:26:
                    d3:8d:ef:1e:5a:1a:bf:a8:aa:48:47:24:f9:80:5a:
                    8b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:06:1E:07:6F:D4:5D:54:78:E9:72:E0:5B:A0:C4:3A:62:D2:D7:73
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/D301CA5AF37611EABEDD1173F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:13:5e:77:82:f5:76:03:db:a4:50:11:3e:07:02:8a:60:4e:
         97:79:53:10:a1:71:03:8f:df:fa:8b:38:ca:6f:6e:d8:ce:48:
         e9:13:21:92:de:8e:57:23:0a:c1:e7:fb:59:28:2f:c0:99:fb:
         55:57:e2:9a:73:63:85:ee:f3:a8:d9:99:6f:bf:ee:96:6d:d9:
         fa:7e:f4:3b:22:6a:5e:82:69:b6:4a:29:94:14:40:43:43:5e:
         da:99:75:8c:74:79:59:47:98:5c:63:ec:1c:81:21:27:2e:f7:
         5e:de:0a:c6:20:56:74:de:11:7f:57:8d:f0:9f:6f:13:c0:99:
         3f:db:cf:89:d6:77:56:86:c6:65:55:9d:21:3a:f7:57:cd:2b:
         d9:ad:80:5f:0a:97:c7:cb:92:d7:37:48:c1:8c:d1:78:ff:33:
         c5:81:da:31:02:09:a1:5d:33:e1:4f:ff:e2:0d:be:84:df:47:
         0d:8f:af:b9:36:39:24:30:d8:fe:3c:3e:b4:40:2c:f4:4b:10:
         d3:b9:b4:81:f3:3a:81:8d:a7:ee:da:87:28:f3:46:03:7e:8f:
         f5:f8:59:fa:f2:4c:ea:2e:9a:14:c8:43:9d:1d:7d:5d:48:69:
         29:d3:96:23:c8:5f:62:e8:c7:0f:a7:c4:ea:0b:0a:39:ba:b6:
         da:14:48:a1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkIzOEVBRjExMC8GA1UEBRMoQUQ0MDA0RDg1MThERUI5OUNFRDNGRkZBQjYzNUFB
MTc0RTcwMEZENzAeFw0yMDA5MTAxNTAzNDFaFw0yNDA5MTAxNTAzNDFaMBgxFjAU
BgNVBAMTDTVmNWE0MDUyLTRiOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHFqvdXWMu6AkyZNa4Xrz5A32yOzD6NRRECLrfWgmQICFsII35KxgiineY
43fFAKt9X/tFgtsjZRVp+Krg3me3tPqv0ZbcIifOkDbZxd41uSIFhBk18OADIBIb
z47H8Us1uGh0BHkmEsNAPt52TM4M689V1dW2slS6FVbatH/opJcoqHS4MBqRS8Eh
s7fXtWrZ6CnbcdPEODmmpX5gmabz8wNdl2ZwrStXRFIKVA8DE7fscRQ0Y96hmSZB
gi0zxdCnLU1qhohbY4a9plTGl9pq99AQ9RqrIHRn7ljT3lkK2sqJnUMTRdgpzZ4B
bodeJtON7x5aGr+oqkhHJPmAWovBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUswYe
B2/UXVR46XLgW6DEOmLS13MwHwYDVR0jBBgwFoAUrUAE2FGN65nO0//6tjWqF05w
D9cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJCMzhFLzczQzE5M0UyREY2MTExRTlCRTVBMkMzMEY4QUVBMjI4L3JVQUUy
RkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JVQUUyRkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJCMzhFLzczQzE5M0UyREY2MTExRTlCRTVBMkMzMEY4
QUVBMjI4L0QzMDFDQTVBRjM3NjExRUFCRUREMTE3M0Y4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADEK4owDQYJKoZIhvcNAQEL
BQADggEBACUTXneC9XYD26RQET4HAopgTpd5UxChcQOP3/qLOMpvbtjOSOkTIZLe
jlcjCsHn+1koL8CZ+1VX4ppzY4Xu86jZmW+/7pZt2fp+9Dsial6CabZKKZQUQEND
XtqZdYx0eVlHmFxj7ByBIScu917eCsYgVnTeEX9XjfCfbxPAmT/bz4nWd1aGxmVV
nSE691fNK9mtgF8Kl8fLktc3SMGM0Xj/M8WB2jECCaFdM+FP/+INvoTfRw2Pr7k2
OSQw2P48PrRALPRLENO5tIHzOoGNp+7ahyjzRgN+j/X4WfryTOoumhTIQ50dfV1I
aSnTliPIX2Loxw+nxOoLCjm6ttoUSKE=
-----END CERTIFICATE-----
Generated at Sat May 18 01:44:26 2024 by rpki-client on console-ams.rpki-client.org