Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/44276DB4463911EC8EA8D613D8A014CE.roa
File:                     44276DB4463911EC8EA8D613D8A014CE.roa (raw, json)
Hash identifier:          4eP0uQUhgh8UojN9cwAJrEyBjLKtzCe+6TB80lYgykw=
Subject key identifier:   D4:B3:E9:C6:14:4C:19:03:1E:36:2B:81:25:1E:2F:3E:0B:FA:A9:BF
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       F6
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/44276DB4463911EC8EA8D613D8A014CE.roa
Signing time:             Mon 15 Nov 2021 17:27:11 +0000
ROA not before:           Mon 15 Nov 2021 17:27:07 +0000
ROA not after:            Sat 15 Nov 2031 17:27:07 +0000
asID:                     36994
IP address blocks:        41.21.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 May 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Nov 15 17:27:07 2021 GMT
            Not After : Nov 15 17:27:07 2031 GMT
        Subject: CN=6192986f-1082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1a:94:0a:3a:f4:95:b9:71:f1:e0:10:3e:22:
                    36:9f:72:aa:fa:d8:92:b3:52:13:53:41:af:eb:47:
                    ee:35:37:13:45:ad:8f:ed:80:82:27:ef:ab:cd:3c:
                    12:99:08:aa:b4:d3:90:c1:5c:7d:1e:7c:e1:2c:bf:
                    66:7d:78:37:5d:1e:cc:72:f3:56:43:4c:c8:68:76:
                    f6:7b:3f:2e:45:1b:19:2f:3f:c6:6d:5a:06:0b:e6:
                    1d:ef:f8:5d:22:78:be:c8:f5:34:61:ab:44:81:cf:
                    07:37:b0:0c:fc:a9:8d:48:eb:ee:15:c6:2b:e4:e0:
                    24:87:16:21:b1:c4:8c:f1:80:58:1d:bb:98:cd:b9:
                    f8:4b:60:0b:f5:db:84:ad:03:24:6f:ad:6b:3a:af:
                    c5:42:38:28:67:d4:41:17:8c:a2:dc:1a:06:c7:ac:
                    8a:ac:53:49:d0:47:75:d7:b3:2b:cd:75:94:5a:ab:
                    95:5b:d1:3d:be:ab:c8:4d:25:21:50:27:50:0f:de:
                    6a:aa:c5:09:44:19:99:97:75:2b:b0:6e:23:da:07:
                    7e:ba:32:09:d9:8f:3d:24:0a:72:b7:5f:db:8f:d1:
                    2d:b0:e2:4a:e1:c7:26:6a:2a:fb:70:db:22:ee:e2:
                    fa:d5:fa:7a:04:3f:05:da:da:f7:0f:f1:3b:7f:52:
                    bc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B3:E9:C6:14:4C:19:03:1E:36:2B:81:25:1E:2F:3E:0B:FA:A9:BF
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/44276DB4463911EC8EA8D613D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.21.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1e:0c:d8:5e:d8:a8:7b:d9:28:d1:37:be:0d:f2:19:10:92:65:
         29:97:cb:7a:04:c6:e0:6c:ca:88:16:27:86:8c:55:5d:9f:f0:
         a2:29:f4:d6:d9:a8:c8:12:38:bc:c0:fc:71:ad:8b:56:c5:c7:
         8e:29:1f:4a:39:90:0a:d8:3e:cb:b9:07:71:54:01:09:2a:df:
         48:d1:af:8c:df:87:3e:ea:bb:ad:5b:f9:16:35:de:de:2e:b6:
         e7:67:c6:07:b5:57:e6:77:d7:7d:e8:ad:9d:65:3c:4a:3b:72:
         89:05:4b:de:b6:af:30:41:3e:8f:bf:94:d8:fb:1a:aa:d8:15:
         1c:ed:86:6d:20:e5:df:69:a9:64:95:32:28:07:03:e7:22:e3:
         05:89:f9:d9:f8:40:a0:a9:f0:c1:31:b6:fd:c9:68:3d:9c:91:
         75:97:e1:a5:45:5e:63:2b:17:a9:fb:b8:aa:cf:f9:ab:b0:13:
         5c:35:10:a2:03:28:10:f4:1e:26:ac:a2:7f:19:e0:bd:b7:96:
         2c:41:84:b3:67:5a:90:25:22:98:7f:3a:73:5c:93:fe:80:05:
         f4:53:3c:24:4c:ba:c1:fa:f5:e4:d2:84:6b:a1:ca:37:bc:86:
         83:dc:8f:42:b6:12:ca:b2:25:18:2f:95:9e:00:a1:d0:df:8e:
         37:ad:13:d4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDcxMkZBRjExMC8GA1UEBRMoM0Q1NUM3ODRFQTE3OTEyRjBFOTYwQTI1QzZDQTky
MEUxMDAyMzAwQTAeFw0yMTExMTUxNzI3MDdaFw0zMTExMTUxNzI3MDdaMBgxFjAU
BgNVBAMMDTYxOTI5ODZmLTEwODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVGpQKOvSVuXHx4BA+Ijafcqr62JKzUhNTQa/rR+41NxNFrY/tgIIn76vN
PBKZCKq005DBXH0efOEsv2Z9eDddHsxy81ZDTMhodvZ7Py5FGxkvP8ZtWgYL5h3v
+F0ieL7I9TRhq0SBzwc3sAz8qY1I6+4Vxivk4CSHFiGxxIzxgFgdu5jNufhLYAv1
24StAyRvrWs6r8VCOChn1EEXjKLcGgbHrIqsU0nQR3XXsyvNdZRaq5Vb0T2+q8hN
JSFQJ1AP3mqqxQlEGZmXdSuwbiPaB366MgnZjz0kCnK3X9uP0S2w4krhxyZqKvtw
2yLu4vrV+noEPwXa2vcP8Tt/Urz3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU1LPp
xhRMGQMeNiuBJR4vPgv6qb8wHwYDVR0jBBgwFoAUPVXHhOoXkS8OlgolxsqSDhAC
MAowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4QUVBMjI4L1BWWEho
T29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BWWEhoT29Ya1M4T2xnb2x4c3FTRGhBQ01Bby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ3MTJGL0U5QzRCQUEyQTBFODExRUI4ODk1OEQxMEY4
QUVBMjI4LzQ0Mjc2REI0NDYzOTExRUM4RUE4RDYxM0Q4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAcpFYAwDQYJKoZIhvcNAQEL
BQADggEBAB4M2F7YqHvZKNE3vg3yGRCSZSmXy3oExuBsyogWJ4aMVV2f8KIp9NbZ
qMgSOLzA/HGti1bFx44pH0o5kArYPsu5B3FUAQkq30jRr4zfhz7qu61b+RY13t4u
tudnxge1V+Z3133orZ1lPEo7cokFS962rzBBPo+/lNj7GqrYFRzthm0g5d9pqWSV
MigHA+ci4wWJ+dn4QKCp8MExtv3JaD2ckXWX4aVFXmMrF6n7uKrP+auwE1w1EKID
KBD0Hiason8Z4L23lixBhLNnWpAlIph/OnNck/6ABfRTPCRMusH69eTShGuhyje8
hoPcj0K2EsqyJRgvlZ4AodDfjjetE9Q=
-----END CERTIFICATE-----
Generated at Sat May 18 04:03:36 2024 by rpki-client on console-ams.rpki-client.org