Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/9AC4EB921C9811EE85C3A0404AD9E6FC.roa
File:                     9AC4EB921C9811EE85C3A0404AD9E6FC.roa (raw, json)
Hash identifier:          ViR2kCgJWzH8mXDagfWs8nOEe78d45RL0HxeM65qDeU=
Subject key identifier:   96:CC:27:13:EE:92:44:30:09:CF:CB:D4:BF:43:0E:DC:07:F7:61:8D
Certificate issuer:       /CN=F364814FAF/serialNumber=ABF9960C85BCF8938D58337F8CB7C5EB4DC4B3AE
Certificate serial:       046D
Authority key identifier: AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/q_mWDIW8-JONWDN_jLfF603Es64.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/9AC4EB921C9811EE85C3A0404AD9E6FC.roa
Signing time:             Fri 07 Jul 2023 07:33:45 +0000
ROA not before:           Fri 07 Jul 2023 07:33:41 +0000
ROA not after:            Mon 06 Jul 2026 07:33:41 +0000
asID:                     36940
IP address blocks:        196.216.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.mft
                          rsync://rpki.afrinic.net/repository/afrinic/q_mWDIW8-JONWDN_jLfF603Es64.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 May 2024 00:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1133 (0x46d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364814FAF/serialNumber=ABF9960C85BCF8938D58337F8CB7C5EB4DC4B3AE
        Validity
            Not Before: Jul  7 07:33:41 2023 GMT
            Not After : Jul  6 07:33:41 2026 GMT
        Subject: CN=64a7bfd9-1455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:6a:4a:64:c2:c4:a0:98:ea:ab:62:f4:0b:d5:
                    17:9a:8f:30:7e:bd:51:d1:25:18:b0:2e:3e:46:05:
                    48:f4:ed:76:a3:d6:d2:42:ad:15:4b:db:e4:f2:2a:
                    3a:1f:75:f2:86:c5:31:d7:47:66:60:50:0a:f9:07:
                    70:b6:4c:41:16:89:67:0d:d8:05:92:a9:28:c6:bd:
                    78:cc:f0:49:ee:f8:86:4e:ff:db:23:b3:10:93:db:
                    41:6f:23:9b:a3:91:e5:11:d6:e4:36:3d:ca:29:03:
                    4d:28:14:e0:da:72:cd:cd:6d:fe:52:d0:c1:d0:95:
                    9e:6a:22:9b:84:c7:5a:fe:20:a6:5d:c5:c2:5c:cb:
                    55:4f:57:9c:39:6f:e2:1d:fa:81:ac:fa:51:be:2c:
                    ac:93:fd:94:43:8b:36:89:68:6e:12:0e:07:63:83:
                    49:4c:6c:10:fa:33:82:ca:fa:e5:5e:68:0d:09:2a:
                    72:ba:2e:57:a9:63:d9:b7:ab:0f:a1:97:0d:eb:4b:
                    50:7f:95:e3:75:f6:56:a2:b5:0a:ad:e7:92:63:6f:
                    b3:98:f3:3c:95:67:54:c6:e5:9c:5d:97:82:3b:16:
                    bd:54:e5:ac:47:d2:ba:75:59:59:5a:6e:a2:b2:42:
                    0f:32:bb:9b:5b:51:67:4a:a1:96:ea:8d:81:09:32:
                    72:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CC:27:13:EE:92:44:30:09:CF:CB:D4:BF:43:0E:DC:07:F7:61:8D
            X509v3 Authority Key Identifier:
                keyid:AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/q_mWDIW8-JONWDN_jLfF603Es64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/9AC4EB921C9811EE85C3A0404AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.216.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:ce:19:1e:1b:5a:32:3f:cf:f5:9c:33:c9:5c:82:f8:3e:f1:
         d3:4b:14:2e:c7:27:d4:35:6a:19:61:3f:bf:4b:74:72:2e:40:
         d4:a0:66:28:e1:f6:c9:eb:2a:bb:1a:4c:76:02:ee:de:de:0b:
         ea:f2:b1:ab:76:2c:73:6b:50:43:49:5d:c3:4b:cb:4c:9f:23:
         7b:f6:79:64:4e:cf:93:00:49:f4:b4:43:f3:2b:c9:4a:95:c4:
         29:fe:86:fc:5c:98:d9:4e:14:58:cd:c0:6f:87:18:ef:d7:5e:
         41:3c:6a:75:91:6e:94:dc:af:25:6a:ba:d7:52:fd:bc:ed:19:
         03:1a:30:b7:ce:cb:4a:98:c7:d7:6c:46:9b:f8:5b:89:a9:f1:
         a9:c9:a4:de:9b:31:65:44:10:bc:eb:2a:65:77:ca:d1:3e:91:
         c1:c5:5a:2c:45:9c:be:b4:82:f9:80:c5:b2:e8:33:2b:67:4c:
         f6:f9:8c:b9:62:f0:31:a6:a8:df:f7:fc:70:97:2e:94:f4:4f:
         cd:f2:9d:e9:59:33:c3:9c:1a:bd:2f:ad:e7:29:59:5f:f4:f7:
         7a:2e:17:ae:c1:77:b1:f0:45:c3:45:68:8b:21:c9:c2:65:c1:
         ae:96:07:b6:58:13:cf:8d:12:de:2c:71:fe:b7:6f:be:b5:7d:
         ad:07:12:b3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBG0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NDgxNEZBRjExMC8GA1UEBRMoQUJGOTk2MEM4NUJDRjg5MzhENTgzMzdGOENCN0M1
RUI0REM0QjNBRTAeFw0yMzA3MDcwNzMzNDFaFw0yNjA3MDYwNzMzNDFaMBgxFjAU
BgNVBAMTDTY0YTdiZmQ5LTE0NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD6akpkwsSgmOqrYvQL1ReajzB+vVHRJRiwLj5GBUj07Xaj1tJCrRVL2+Ty
KjofdfKGxTHXR2ZgUAr5B3C2TEEWiWcN2AWSqSjGvXjM8Enu+IZO/9sjsxCT20Fv
I5ujkeUR1uQ2PcopA00oFODacs3Nbf5S0MHQlZ5qIpuEx1r+IKZdxcJcy1VPV5w5
b+Id+oGs+lG+LKyT/ZRDizaJaG4SDgdjg0lMbBD6M4LK+uVeaA0JKnK6LlepY9m3
qw+hlw3rS1B/leN19laitQqt55Jjb7OY8zyVZ1TG5Zxdl4I7Fr1U5axH0rp1WVla
bqKyQg8yu5tbUWdKoZbqjYEJMnJ/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUlswn
E+6SRDAJz8vUv0MO3Af3YY0wHwYDVR0jBBgwFoAUq/mWDIW8+JONWDN/jLfF603E
s64wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ4MTRGLzlFNUU4REE0QzJCRDExRUE4NTkwOUUzMUY4QUVBMjI4L3FfbVdE
SVc4LUpPTldETl9qTGZGNjAzRXM2NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3FfbVdESVc4LUpPTldETl9qTGZGNjAzRXM2NC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ4MTRGLzlFNUU4REE0QzJCRDExRUE4NTkwOUUzMUY4
QUVBMjI4LzlBQzRFQjkyMUM5ODExRUU4NUMzQTA0MDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE2JYwDQYJKoZIhvcNAQEL
BQADggEBAJvOGR4bWjI/z/WcM8lcgvg+8dNLFC7HJ9Q1ahlhP79LdHIuQNSgZijh
9snrKrsaTHYC7t7eC+rysat2LHNrUENJXcNLy0yfI3v2eWROz5MASfS0Q/MryUqV
xCn+hvxcmNlOFFjNwG+HGO/XXkE8anWRbpTcryVqutdS/bztGQMaMLfOy0qYx9ds
Rpv4W4mp8anJpN6bMWVEELzrKmV3ytE+kcHFWixFnL60gvmAxbLoMytnTPb5jLli
8DGmqN/3/HCXLpT0T83ynelZM8OcGr0vrecpWV/093ouF67Bd7HwRcNFaIshycJl
wa6WB7ZYE8+NEt4scf63b761fa0HErM=
-----END CERTIFICATE-----
Generated at Fri May 17 02:00:52 2024 by rpki-client on console-ams.rpki-client.org