Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/0959C7722BC511EE857A5F8A4AD9E6FC.roa
File:                     0959C7722BC511EE857A5F8A4AD9E6FC.roa (raw, json)
Hash identifier:          AwnvH8SNejtCZUcsalp8yZ33rtKYi45qRBn0MK/9O5s=
Subject key identifier:   8B:E8:91:E7:20:1B:36:9C:2B:CE:1C:57:FF:4A:81:FB:29:3C:72:04
Certificate issuer:       /CN=F363ADF7AF/serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
Certificate serial:       03DB
Authority key identifier: E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/0959C7722BC511EE857A5F8A4AD9E6FC.roa
Signing time:             Wed 26 Jul 2023 14:59:36 +0000
ROA not before:           Wed 26 Jul 2023 14:59:32 +0000
ROA not after:            Wed 26 Jul 2028 14:59:32 +0000
asID:                     327899
IP address blocks:        197.243.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987 (0x3db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363ADF7AF/serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
        Validity
            Not Before: Jul 26 14:59:32 2023 GMT
            Not After : Jul 26 14:59:32 2028 GMT
        Subject: CN=64c134d8-2c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:02:6d:21:79:f1:ce:41:2f:28:c3:fd:81:ed:
                    44:87:b0:64:17:0c:84:a6:90:9b:c1:97:f3:a8:9c:
                    97:fd:3f:3d:38:7c:b0:3b:85:d9:17:4d:b7:4c:fa:
                    6c:75:46:60:4b:8c:59:35:26:44:6e:d7:1c:2c:44:
                    9e:0e:2a:6a:fb:0a:2d:d7:f0:71:ba:72:6d:26:16:
                    e9:d3:e6:e8:e7:c7:a4:c1:fb:ee:3a:85:7a:4a:3d:
                    30:e5:73:84:28:39:60:05:f2:f4:8c:c7:8d:70:d7:
                    3c:55:46:9f:86:dd:cc:d9:41:ef:b8:a4:01:a7:7f:
                    e0:32:31:f6:a8:a5:13:0d:6f:37:00:c5:c2:27:d6:
                    47:8d:c8:ff:b2:1f:bd:9a:08:48:19:ab:fd:00:1a:
                    02:21:f9:66:6a:32:0e:46:8a:52:c2:4d:de:2b:ac:
                    68:8e:d8:6c:b4:30:1b:13:55:73:90:3c:03:df:a4:
                    24:19:de:43:78:ec:4a:56:ba:99:70:80:a0:b7:79:
                    8f:81:a5:b8:78:e3:a4:86:b2:e8:0c:60:c0:3d:9c:
                    a8:1d:71:a8:a7:d8:49:d9:d0:d5:41:29:e8:bf:89:
                    1d:be:76:14:50:ca:65:a8:69:38:ee:4b:34:fd:36:
                    0a:84:94:61:e1:9c:ba:e9:ff:59:cd:3b:fc:2f:a9:
                    f4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E8:91:E7:20:1B:36:9C:2B:CE:1C:57:FF:4A:81:FB:29:3C:72:04
            X509v3 Authority Key Identifier:
                keyid:E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/0959C7722BC511EE857A5F8A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.243.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:fa:3d:8b:ae:8e:6a:8b:07:86:c8:08:35:0b:81:71:05:28:
         db:d7:9f:d5:de:86:c8:c8:b7:ef:dd:a4:0f:48:ba:09:45:44:
         2f:89:19:20:ee:3c:9f:9c:f7:38:e0:d3:3a:dd:a1:49:02:09:
         07:c7:5b:51:2e:ef:b1:d9:fa:44:96:96:00:bd:8b:0e:6d:3c:
         08:88:1f:88:e3:8c:30:47:d5:ef:b5:6a:60:fc:75:c9:0a:a6:
         ec:d7:87:75:0e:da:9e:59:9d:fa:26:1e:5e:dd:73:32:f1:36:
         3c:1d:4d:45:50:52:27:f3:29:90:fa:ef:7e:26:26:fc:92:88:
         42:67:bd:2b:0a:6d:35:c2:1e:b4:b8:aa:05:20:8f:e7:29:6b:
         1c:97:3f:18:20:df:f4:3c:bb:23:74:d1:6d:4b:d8:6f:9b:06:
         5e:04:e5:32:35:88:a8:b6:52:94:b5:fd:2c:57:c8:b1:e3:ed:
         ec:6c:85:8c:bc:17:d6:96:a4:9e:0d:e2:4b:fd:64:47:6c:30:
         8c:60:29:e8:8e:a1:47:99:58:06:6a:e3:72:0e:e8:cc:16:ac:
         87:e7:93:fc:c4:87:b1:96:46:32:c9:39:9d:d9:24:a9:cb:4a:
         61:a2:40:0a:a7:de:2d:a1:f9:60:83:38:bf:ba:3c:58:ae:8e:
         ef:18:51:c8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA9swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
M0FERjdBRjExMC8GA1UEBRMoRTczRDMwMUY5MTBENTZFQkFCN0ExMTEwM0JFOEJF
Mjc1Mzg4QjcyQjAeFw0yMzA3MjYxNDU5MzJaFw0yODA3MjYxNDU5MzJaMBgxFjAU
BgNVBAMTDTY0YzEzNGQ4LTJjMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDiAm0hefHOQS8ow/2B7USHsGQXDISmkJvBl/OonJf9Pz04fLA7hdkXTbdM
+mx1RmBLjFk1JkRu1xwsRJ4OKmr7Ci3X8HG6cm0mFunT5ujnx6TB++46hXpKPTDl
c4QoOWAF8vSMx41w1zxVRp+G3czZQe+4pAGnf+AyMfaopRMNbzcAxcIn1keNyP+y
H72aCEgZq/0AGgIh+WZqMg5GilLCTd4rrGiO2Gy0MBsTVXOQPAPfpCQZ3kN47EpW
uplwgKC3eY+Bpbh446SGsugMYMA9nKgdcain2EnZ0NVBKei/iR2+dhRQymWoaTju
SzT9NgqElGHhnLrp/1nNO/wvqfTfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUi+iR
5yAbNpwrzhxX/0qB+yk8cgQwHwYDVR0jBBgwFoAU5z0wH5ENVuurehEQO+i+J1OI
tyswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNBREY3L0IzMTIzRjkwM0JCQTExRUJBOTRFOUIxRkY4QUVBMjI4LzV6MHdI
NUVOVnV1cmVoRVFPLWktSjFPSXR5cy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzV6MHdINUVOVnV1cmVoRVFPLWktSjFPSXR5cy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNBREY3L0IzMTIzRjkwM0JCQTExRUJBOTRFOUIxRkY4
QUVBMjI4LzA5NTlDNzcyMkJDNTExRUU4NTdBNUY4QTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADF830wDQYJKoZIhvcNAQEL
BQADggEBADb6PYuujmqLB4bICDULgXEFKNvXn9XehsjIt+/dpA9IuglFRC+JGSDu
PJ+c9zjg0zrdoUkCCQfHW1Eu77HZ+kSWlgC9iw5tPAiIH4jjjDBH1e+1amD8dckK
puzXh3UO2p5ZnfomHl7dczLxNjwdTUVQUifzKZD6734mJvySiEJnvSsKbTXCHrS4
qgUgj+cpaxyXPxgg3/Q8uyN00W1L2G+bBl4E5TI1iKi2UpS1/SxXyLHj7exshYy8
F9aWpJ4N4kv9ZEdsMIxgKeiOoUeZWAZq43IO6MwWrIfnk/zEh7GWRjLJOZ3ZJKnL
SmGiQAqn3i2h+WCDOL+6PFiuju8YUcg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:33 2024 by rpki-client on console-ams.rpki-client.org