Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/89672DF86D9011EEB83415874AD9E6FC.roa
File:                     89672DF86D9011EEB83415874AD9E6FC.roa (raw, json)
Hash identifier:          GCv1qnJWw7EowPAn9i0uz0mqCeC5AHRLSdr3MuuzS/U=
Subject key identifier:   7A:0C:9C:E6:55:1F:7B:C9:B0:38:6C:F8:24:4E:FF:F2:D7:79:DC:56
Certificate issuer:       /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial:       0AB7
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/89672DF86D9011EEB83415874AD9E6FC.roa
Signing time:             Wed 18 Oct 2023 08:30:04 +0000
ROA not before:           Wed 18 Oct 2023 08:30:01 +0000
ROA not after:            Fri 18 Oct 2030 08:30:01 +0000
asID:                     11845
IP address blocks:        2c0f:fd58::/29 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2743 (0xab7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
        Validity
            Not Before: Oct 18 08:30:01 2023 GMT
            Not After : Oct 18 08:30:01 2030 GMT
        Subject: CN=652f978c-5bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:be:0f:5c:27:36:02:21:28:cd:46:46:aa:6c:
                    e1:07:5e:17:10:4f:04:25:6d:ab:8b:b6:62:15:33:
                    7f:82:8b:bb:10:f5:c6:bf:fe:e2:22:3d:d8:ef:1e:
                    3b:5c:d7:a1:6f:b7:6d:de:80:25:fb:91:91:58:42:
                    78:f1:38:bb:df:83:8e:ac:44:fa:53:29:2f:83:d7:
                    d6:a9:19:93:ca:0d:28:2f:5a:d1:72:40:bf:5d:e6:
                    23:cd:35:f8:a0:51:13:7e:a0:39:78:e0:97:9e:51:
                    c7:01:3c:0a:59:99:c7:92:74:fc:61:b8:03:09:c2:
                    88:60:63:5f:c7:57:ad:d6:c6:2c:94:d3:ef:db:f0:
                    8f:02:a7:6d:7a:36:06:da:29:8a:8c:00:d9:20:24:
                    50:76:4e:52:f9:f8:5f:6e:a3:e2:1f:72:a6:f2:94:
                    da:4f:ce:77:8f:1a:e1:07:4d:10:4c:0a:a3:ab:5c:
                    a7:e2:4a:0b:e5:d5:e1:ff:88:ff:6c:43:15:18:c3:
                    b0:68:21:bf:9a:64:da:d5:3a:45:20:de:41:b1:5e:
                    86:e5:64:f5:01:b8:e0:09:7f:81:18:12:df:39:71:
                    b6:7c:d0:73:b0:71:e9:c9:a3:50:e9:55:73:b5:3c:
                    8f:f7:3e:cd:cc:ba:91:1e:a7:bf:15:69:cf:ce:f9:
                    ac:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0C:9C:E6:55:1F:7B:C9:B0:38:6C:F8:24:4E:FF:F2:D7:79:DC:56
            X509v3 Authority Key Identifier:
                keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/89672DF86D9011EEB83415874AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:fd58::/29

    Signature Algorithm: sha256WithRSAEncryption
         26:27:89:20:93:4b:29:cc:09:a1:c0:9b:4f:c9:53:1b:13:4c:
         27:cc:7d:fa:1d:a1:d7:c4:4e:56:12:5f:07:6d:e4:0c:9f:5c:
         02:70:47:21:19:a5:28:09:45:1b:b4:19:9f:be:50:ba:99:0a:
         7d:18:2c:c1:65:0b:aa:3e:90:15:b3:fa:4b:62:c3:ad:fc:fc:
         80:34:66:00:15:8f:6c:67:3e:f5:ad:46:2b:85:df:3f:32:a7:
         a7:59:29:e7:4d:e5:66:50:c2:ea:ba:d4:1c:96:46:40:82:1d:
         52:54:f6:5d:39:2d:84:e3:28:39:f4:cb:3d:84:cf:65:39:d8:
         77:8a:63:33:a1:e6:30:0e:4f:04:70:45:49:1f:4f:dc:6c:7f:
         2e:6a:03:06:7a:b2:50:49:c9:72:32:2f:d5:d1:5b:7b:65:c4:
         b6:3d:93:27:d3:1d:7e:5e:78:b3:65:d4:54:f0:3c:06:29:1e:
         fc:32:e8:b0:69:52:c4:b1:ac:ff:63:b9:68:65:9a:20:ce:a9:
         16:5e:da:35:ec:c9:74:3b:2f:e5:ef:41:92:52:a9:de:32:44:
         b5:93:66:b7:a4:c6:69:a8:aa:5f:56:00:b7:3d:41:55:e4:18:
         d5:c6:22:3c:ea:2c:c5:5c:bf:cb:74:b6:ff:85:c4:6d:03:bf:
         c1:03:79:c2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCrcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkUzOUVBRjExMC8GA1UEBRMoQTEzNjhFOEJGQzgwRjRFQTVBQjA5NzE2RDI1NzIx
MTkzNjE4Mjg1MTAeFw0yMzEwMTgwODMwMDFaFw0zMDEwMTgwODMwMDFaMBgxFjAU
BgNVBAMTDTY1MmY5NzhjLTViY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvvg9cJzYCISjNRkaqbOEHXhcQTwQlbauLtmIVM3+Ci7sQ9ca//uIiPdjv
Hjtc16Fvt23egCX7kZFYQnjxOLvfg46sRPpTKS+D19apGZPKDSgvWtFyQL9d5iPN
NfigURN+oDl44JeeUccBPApZmceSdPxhuAMJwohgY1/HV63WxiyU0+/b8I8Cp216
NgbaKYqMANkgJFB2TlL5+F9uo+IfcqbylNpPznePGuEHTRBMCqOrXKfiSgvl1eH/
iP9sQxUYw7BoIb+aZNrVOkUg3kGxXoblZPUBuOAJf4EYEt85cbZ80HOwcenJo1Dp
VXO1PI/3Ps3MupEep78Vac/O+axZAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUegyc
5lUfe8mwOGz4JE7/8td53FYwHwYDVR0jBBgwFoAUoTaOi/yA9OpasJcW0lchGTYY
KFEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4QUVBMjI4L29UYU9p
X3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29UYU9pX3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4
QUVBMjI4Lzg5NjcyREY4NkQ5MDExRUVCODM0MTU4NzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQMsD/1YMA0GCSqGSIb3DQEB
CwUAA4IBAQAmJ4kgk0spzAmhwJtPyVMbE0wnzH36HaHXxE5WEl8HbeQMn1wCcEch
GaUoCUUbtBmfvlC6mQp9GCzBZQuqPpAVs/pLYsOt/PyANGYAFY9sZz71rUYrhd8/
MqenWSnnTeVmUMLqutQclkZAgh1SVPZdOS2E4yg59Ms9hM9lOdh3imMzoeYwDk8E
cEVJH0/cbH8uagMGerJQSclyMi/V0Vt7ZcS2PZMn0x1+XnizZdRU8DwGKR78Muiw
aVLEsaz/Y7loZZogzqkWXto17Ml0Oy/l70GSUqneMkS1k2a3pMZpqKpfVgC3PUFV
5BjVxiI86izFXL/LdLb/hcRtA7/BA3nC
-----END CERTIFICATE-----
Generated at Mon May 6 01:46:57 2024 by rpki-client on console-ams.rpki-client.org