Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/784F4370684D11EB8D87FC73F8AEA228.roa
File:                     784F4370684D11EB8D87FC73F8AEA228.roa (raw, json)
Hash identifier:          rzwUo7lFrqBD5qe5XRR7NA2ACx7BQyZHFJN6623sEQI=
Subject key identifier:   08:47:14:16:B4:12:09:D9:50:AF:26:E8:37:39:99:49:F1:F5:B4:61
Certificate issuer:       /CN=F363F4B9AF/serialNumber=03D8E2A74A4D8068BFBDEE007216C1007AC7FDD9
Certificate serial:       04
Authority key identifier: 03:D8:E2:A7:4A:4D:80:68:BF:BD:EE:00:72:16:C1:00:7A:C7:FD:D9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A9jip0pNgGi_ve4AchbBAHrH_dk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/784F4370684D11EB8D87FC73F8AEA228.roa
Signing time:             Sat 06 Feb 2021 07:32:31 +0000
ROA not before:           Sat 06 Feb 2021 07:32:26 +0000
ROA not after:            Fri 01 Feb 2030 07:32:26 +0000
asID:                     328767
IP address blocks:        2c0f:1000::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/A9jip0pNgGi_ve4AchbBAHrH_dk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/A9jip0pNgGi_ve4AchbBAHrH_dk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A9jip0pNgGi_ve4AchbBAHrH_dk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363F4B9AF/serialNumber=03D8E2A74A4D8068BFBDEE007216C1007AC7FDD9
        Validity
            Not Before: Feb  6 07:32:26 2021 GMT
            Not After : Feb  1 07:32:26 2030 GMT
        Subject: CN=601e460f-fe88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f7:93:be:d5:1c:a3:f4:6d:9a:e9:29:5d:a9:
                    37:37:d7:64:29:af:d7:12:a8:86:e8:3b:07:91:ca:
                    31:5b:90:19:80:45:b1:9e:90:0b:95:94:9b:c3:c1:
                    1b:b0:80:2f:5e:bc:c9:f8:f3:fd:c4:80:a5:b9:e3:
                    0d:ea:11:77:80:da:ec:63:68:5f:a8:ca:d8:76:61:
                    ee:92:31:f2:6e:84:f0:b7:98:33:20:02:8b:82:b8:
                    71:9c:49:84:7c:a9:e9:83:e8:ee:6c:a1:18:8c:59:
                    33:ef:38:31:b5:68:67:94:5c:76:02:28:d5:fb:3d:
                    0a:1e:92:de:1e:cd:02:9d:87:f9:50:e0:6d:85:0e:
                    10:3d:c0:a1:02:ca:e5:fa:26:0e:a1:77:60:76:5a:
                    c0:31:dc:52:75:79:f5:d2:79:81:87:d3:0a:ac:b6:
                    64:1c:3b:ab:e5:8a:91:39:0b:a0:c9:22:a2:c5:56:
                    ba:71:e6:d5:4f:e9:36:e1:8b:59:32:b6:b0:36:e4:
                    8d:ec:2e:a4:14:6d:41:d5:56:7f:e1:88:f7:17:f1:
                    bb:ff:a7:56:3f:2d:35:8b:e3:1c:2f:97:2b:9d:c5:
                    f0:15:8c:cb:04:37:bd:99:6f:da:55:dd:61:d8:db:
                    a8:ec:c6:35:9a:73:05:33:3e:66:0a:d4:52:e6:3d:
                    15:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:47:14:16:B4:12:09:D9:50:AF:26:E8:37:39:99:49:F1:F5:B4:61
            X509v3 Authority Key Identifier:
                keyid:03:D8:E2:A7:4A:4D:80:68:BF:BD:EE:00:72:16:C1:00:7A:C7:FD:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/A9jip0pNgGi_ve4AchbBAHrH_dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A9jip0pNgGi_ve4AchbBAHrH_dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/784F4370684D11EB8D87FC73F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:1000::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:33:40:41:32:76:67:cd:98:6a:7e:1c:7c:b2:94:6a:c7:21:
         9a:06:ad:af:35:8a:a1:08:01:23:eb:c6:4c:4b:a2:02:72:b1:
         2c:3b:32:59:40:74:a8:23:42:0f:e4:c2:fc:ac:a7:c2:37:56:
         a7:d1:b4:6f:0c:a2:29:43:d0:32:af:0d:39:64:a1:75:65:82:
         b3:65:f4:88:bd:80:38:df:66:ac:fc:df:eb:bf:36:32:3b:dd:
         45:9a:80:b4:cb:f4:e3:15:76:a3:3d:3b:05:24:c6:2d:77:ae:
         be:1a:9d:20:e7:51:6f:11:4f:db:da:10:9c:43:bc:28:8c:36:
         fd:41:ff:e6:02:c1:3c:8b:09:be:88:c8:0a:b3:00:6b:50:5f:
         e2:54:88:3e:6e:68:40:a9:ba:06:fa:3d:21:de:5a:2c:e6:dc:
         4b:af:a7:1f:d2:fb:b7:11:a9:b7:65:b2:6d:c2:13:9b:bd:bd:
         ef:1d:2b:ab:35:85:e6:c6:b0:c5:58:b8:9a:70:fa:6b:b5:71:
         89:93:f6:45:d9:27:af:e7:91:90:e7:34:8c:f9:0c:a5:be:4e:
         1c:d1:23:f8:99:14:cf:65:a4:2c:02:7b:7b:44:27:8d:6a:8e:
         cf:d1:ee:5c:26:b4:8d:ee:27:89:74:c2:0d:4f:1e:b4:b7:67:
         fb:c0:c6:e5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
RjRCOUFGMTEwLwYDVQQFEygwM0Q4RTJBNzRBNEQ4MDY4QkZCREVFMDA3MjE2QzEw
MDdBQzdGREQ5MB4XDTIxMDIwNjA3MzIyNloXDTMwMDIwMTA3MzIyNlowGDEWMBQG
A1UEAxMNNjAxZTQ2MGYtZmU4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJf3k77VHKP0bZrpKV2pNzfXZCmv1xKohug7B5HKMVuQGYBFsZ6QC5WUm8PB
G7CAL168yfjz/cSApbnjDeoRd4Da7GNoX6jK2HZh7pIx8m6E8LeYMyACi4K4cZxJ
hHyp6YPo7myhGIxZM+84MbVoZ5RcdgIo1fs9Ch6S3h7NAp2H+VDgbYUOED3AoQLK
5fomDqF3YHZawDHcUnV59dJ5gYfTCqy2ZBw7q+WKkTkLoMkiosVWunHm1U/pNuGL
WTK2sDbkjewupBRtQdVWf+GI9xfxu/+nVj8tNYvjHC+XK53F8BWMywQ3vZlv2lXd
YdjbqOzGNZpzBTM+ZgrUUuY9FYUCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBQIRxQW
tBIJ2VCvJug3OZlJ8fW0YTAfBgNVHSMEGDAWgBQD2OKnSk2AaL+97gByFsEAesf9
2TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2M0Y0QjkvMkYyRjY3MjQ2ODREMTFFQjg2MzI5QzczRjhBRUEyMjgvQTlqaXAw
cE5nR2lfdmU0QWNoYkJBSHJIX2RrLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvQTlqaXAwcE5nR2lfdmU0QWNoYkJBSHJIX2RrLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0Y0QjkvMkYyRjY3MjQ2ODREMTFFQjg2MzI5QzczRjhB
RUEyMjgvNzg0RjQzNzA2ODREMTFFQjhEODdGQzczRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwPEAAwDQYJKoZIhvcNAQEL
BQADggEBAIEzQEEydmfNmGp+HHyylGrHIZoGra81iqEIASPrxkxLogJysSw7MllA
dKgjQg/kwvysp8I3VqfRtG8MoilD0DKvDTlkoXVlgrNl9Ii9gDjfZqz83+u/NjI7
3UWagLTL9OMVdqM9OwUkxi13rr4anSDnUW8RT9vaEJxDvCiMNv1B/+YCwTyLCb6I
yAqzAGtQX+JUiD5uaECpugb6PSHeWizm3Euvpx/S+7cRqbdlsm3CE5u9ve8dK6s1
hebGsMVYuJpw+mu1cYmT9kXZJ6/nkZDnNIz5DKW+ThzRI/iZFM9lpCwCe3tEJ41q
js/R7lwmtI3uJ4l0wg1PHrS3Z/vAxuU=
-----END CERTIFICATE-----
Generated at Sat May 4 02:37:13 2024 by rpki-client on console-fra.rpki-client.org