Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/316A8CAAEAD711EBBF227926D8A014CE.roa
File:                     316A8CAAEAD711EBBF227926D8A014CE.roa (raw, json)
Hash identifier:          yxveE6pApv0ntB+dr/mwCV5WzRHfetSEdQFEmXgoicI=
Subject key identifier:   DB:19:1A:94:53:F9:68:94:26:66:1A:73:67:62:0A:53:7C:58:AC:53
Certificate issuer:       /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial:       0764
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/316A8CAAEAD711EBBF227926D8A014CE.roa
Signing time:             Thu 22 Jul 2021 10:26:04 +0000
ROA not before:           Thu 22 Jul 2021 10:25:59 +0000
ROA not after:            Wed 25 Jun 2025 10:25:59 +0000
asID:                     11845
IP address blocks:        102.219.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1892 (0x764)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
        Validity
            Not Before: Jul 22 10:25:59 2021 GMT
            Not After : Jun 25 10:25:59 2025 GMT
        Subject: CN=60f947bc-de9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0a:09:33:3f:28:c2:49:8d:da:f4:8d:e9:4d:
                    87:67:dc:7e:4e:5b:20:a4:5a:2d:71:5c:c1:6b:a1:
                    fe:12:1a:75:3c:6e:af:70:83:ce:fe:e4:be:83:d9:
                    3a:a1:ad:18:7a:2f:97:12:43:97:5c:1a:2e:a3:ee:
                    4a:13:f0:ad:06:df:4f:2d:fa:79:74:c6:06:03:de:
                    9e:74:ca:c0:ca:a7:2a:3c:05:81:5f:76:59:b5:92:
                    84:dd:7a:77:62:d6:ad:b6:c7:5f:df:cf:30:f8:41:
                    61:e9:4f:76:55:a4:0c:ba:18:1a:48:64:18:be:39:
                    4f:80:09:73:2d:7e:4b:f3:ff:21:2e:8b:f6:de:20:
                    8d:0f:87:4e:fb:65:2b:f8:e6:6e:56:ca:0b:bd:64:
                    a0:a1:fa:87:6b:ba:81:7d:58:37:3d:98:b7:37:bd:
                    08:bc:dd:80:72:69:11:5b:51:0a:60:4b:fc:be:46:
                    3d:48:44:8e:ce:24:ec:39:3e:c6:ef:4c:38:7b:18:
                    e7:74:27:81:3e:30:55:cb:0b:0d:0f:ae:56:8b:5e:
                    5f:e7:36:43:d0:d8:25:81:bc:d5:cd:98:82:9e:44:
                    2c:16:06:d4:04:44:da:42:e1:ab:c8:0f:b3:e5:21:
                    70:bb:be:35:4f:82:79:35:86:f8:1c:96:b1:c6:c6:
                    5f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:19:1A:94:53:F9:68:94:26:66:1A:73:67:62:0A:53:7C:58:AC:53
            X509v3 Authority Key Identifier:
                keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/316A8CAAEAD711EBBF227926D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:84:85:da:b0:66:4b:28:3a:0c:88:92:04:83:83:10:d5:61:
         85:8f:2d:36:70:02:dc:26:3c:9e:94:70:ec:b6:ee:60:fa:02:
         7f:b1:25:5d:21:df:6e:14:b0:24:e1:f9:1a:57:bd:da:f9:b9:
         ca:47:af:2e:69:a6:4f:b5:ec:99:fe:7f:cb:e3:f0:22:3c:4a:
         19:98:21:ae:3c:23:36:b1:65:45:c9:cd:b5:6d:ef:fc:67:71:
         b1:5a:a3:9f:30:f7:98:43:62:de:17:10:94:7a:b8:d1:db:6d:
         5f:7c:76:e1:54:99:a5:5e:f4:f4:1c:42:b6:8f:fe:5e:f9:64:
         f1:82:97:24:5d:5a:b9:82:96:d2:fd:91:39:16:bb:d1:48:c3:
         5b:83:04:8e:cb:1f:43:52:a7:0f:e5:0d:79:ff:da:aa:34:e3:
         35:5c:b2:be:39:72:fd:8f:2a:96:3e:40:81:e4:1a:54:bf:53:
         82:55:da:ba:41:48:ac:b5:fd:27:a9:5e:a3:76:02:9d:bc:d8:
         eb:99:59:31:b7:1f:24:ca:c7:57:e5:00:45:12:24:d9:ae:c3:
         e5:ec:62:29:e2:d6:0f:f2:cc:02:d1:5a:9a:88:06:c0:f0:0e:
         90:61:e8:5d:ec:41:b0:fc:96:1e:ea:34:0a:27:4d:5d:f4:d3:
         65:f3:64:c0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB2QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkUzOUVBRjExMC8GA1UEBRMoQTEzNjhFOEJGQzgwRjRFQTVBQjA5NzE2RDI1NzIx
MTkzNjE4Mjg1MTAeFw0yMTA3MjIxMDI1NTlaFw0yNTA2MjUxMDI1NTlaMBgxFjAU
BgNVBAMMDTYwZjk0N2JjLWRlOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCeCgkzPyjCSY3a9I3pTYdn3H5OWyCkWi1xXMFrof4SGnU8bq9wg87+5L6D
2TqhrRh6L5cSQ5dcGi6j7koT8K0G308t+nl0xgYD3p50ysDKpyo8BYFfdlm1koTd
endi1q22x1/fzzD4QWHpT3ZVpAy6GBpIZBi+OU+ACXMtfkvz/yEui/beII0Ph077
ZSv45m5Wygu9ZKCh+odruoF9WDc9mLc3vQi83YByaRFbUQpgS/y+Rj1IRI7OJOw5
PsbvTDh7GOd0J4E+MFXLCw0PrlaLXl/nNkPQ2CWBvNXNmIKeRCwWBtQERNpC4avI
D7PlIXC7vjVPgnk1hvgclrHGxl+FAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU2xka
lFP5aJQmZhpzZ2IKU3xYrFMwHwYDVR0jBBgwFoAUoTaOi/yA9OpasJcW0lchGTYY
KFEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4QUVBMjI4L29UYU9p
X3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29UYU9pX3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4
QUVBMjI4LzMxNkE4Q0FBRUFENzExRUJCRjIyNzkyNkQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm2xgwDQYJKoZIhvcNAQEL
BQADggEBAImEhdqwZksoOgyIkgSDgxDVYYWPLTZwAtwmPJ6UcOy27mD6An+xJV0h
324UsCTh+RpXvdr5ucpHry5ppk+17Jn+f8vj8CI8ShmYIa48IzaxZUXJzbVt7/xn
cbFao58w95hDYt4XEJR6uNHbbV98duFUmaVe9PQcQraP/l75ZPGClyRdWrmCltL9
kTkWu9FIw1uDBI7LH0NSpw/lDXn/2qo04zVcsr45cv2PKpY+QIHkGlS/U4JV2rpB
SKy1/SepXqN2Ap282OuZWTG3HyTKx1flAEUSJNmuw+XsYini1g/yzALRWpqIBsDw
DpBh6F3sQbD8lh7qNAonTV3002XzZMA=
-----END CERTIFICATE-----
Generated at Sun May 5 01:22:16 2024 by rpki-client on console-fra.rpki-client.org