Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/51193AEC23D711E5AFB1712AF8AEA228.roa
File:                     51193AEC23D711E5AFB1712AF8AEA228.roa (raw, json)
Hash identifier:          hld06b1p8PI84w7oNAYzjcyvZnMmRykKV11T0saNQDo=
Subject key identifier:   7F:25:E3:28:2D:B3:1C:61:34:2B:FF:5E:47:32:12:F1:6A:97:CF:14
Certificate issuer:       /CN=F365C741AF/serialNumber=DFED1DB31869BDCCC967B540E22DB05642542F1D
Certificate serial:       28
Authority key identifier: DF:ED:1D:B3:18:69:BD:CC:C9:67:B5:40:E2:2D:B0:56:42:54:2F:1D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3-0dsxhpvczJZ7VA4i2wVkJULx0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/51193AEC23D711E5AFB1712AF8AEA228.roa
Signing time:             Mon 06 Jul 2015 12:04:42 +0000
ROA not before:           Mon 06 Jul 2015 12:05:24 +0000
ROA not after:            Wed 31 Dec 2025 12:05:24 +0000
asID:                     37100
IP address blocks:        41.206.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3-0dsxhpvczJZ7VA4i2wVkJULx0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C741AF/serialNumber=DFED1DB31869BDCCC967B540E22DB05642542F1D
        Validity
            Not Before: Jul  6 12:05:24 2015 GMT
            Not After : Dec 31 12:05:24 2025 GMT
        Subject: CN=559a6eda-d8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:4b:88:8d:22:3d:4b:bf:fb:f9:f3:e7:0c:
                    ab:87:87:06:95:27:11:2c:03:3a:c4:7b:d3:2d:86:
                    a7:2e:a1:2c:b6:2e:02:8d:ff:7d:b0:5b:0e:62:68:
                    7b:48:d1:3b:c5:a2:d0:02:5d:e4:2e:12:36:37:f9:
                    6c:b0:21:d1:aa:6f:70:b9:11:2c:e3:b3:7b:d2:81:
                    16:50:3f:d2:a0:7a:8a:4b:82:51:e1:e6:c3:7d:ca:
                    f5:80:54:5d:b2:b7:0a:1d:ba:cb:ed:f1:db:cd:c0:
                    cd:8a:a2:df:b0:c9:4f:af:e3:c9:5e:17:55:d4:46:
                    ad:d2:5d:eb:89:ab:9e:9d:4a:75:21:18:28:0e:66:
                    23:25:e7:a9:80:36:c5:34:4f:50:31:1d:14:43:6c:
                    24:8a:fb:b2:9b:e7:01:13:3d:81:be:e5:e3:8d:32:
                    77:27:3d:df:2f:7b:7c:c9:6b:c3:f2:5a:a2:fd:ad:
                    69:94:cd:be:0d:9c:f8:59:65:a6:38:2f:1a:24:08:
                    d0:52:c7:47:c3:3c:ed:19:31:4c:7f:92:2a:4c:2b:
                    15:ad:a3:05:7b:77:fa:bb:91:75:9c:f3:0d:d2:1f:
                    5a:e2:57:53:0d:f3:80:e4:58:0e:b0:bb:3e:ac:78:
                    d0:01:67:9b:35:77:56:86:35:2a:12:37:c9:77:d3:
                    18:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:25:E3:28:2D:B3:1C:61:34:2B:FF:5E:47:32:12:F1:6A:97:CF:14
            X509v3 Authority Key Identifier:
                keyid:DF:ED:1D:B3:18:69:BD:CC:C9:67:B5:40:E2:2D:B0:56:42:54:2F:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3-0dsxhpvczJZ7VA4i2wVkJULx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/51193AEC23D711E5AFB1712AF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.206.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c8:a8:65:85:6e:e3:0a:e1:48:6d:88:a8:71:76:3b:e1:c6:42:
         6c:b2:d0:1a:a8:17:a4:6a:db:81:7c:32:34:8c:08:0a:91:80:
         f4:c5:52:6b:c1:e5:df:d8:2f:21:78:10:41:e5:a0:6d:2d:f3:
         55:be:a3:b2:0f:4e:d2:60:92:bf:ff:37:77:36:27:2b:2b:3b:
         6b:79:85:5f:19:36:a2:b4:cb:42:ad:1b:54:5f:4d:95:58:fe:
         26:f5:38:cd:b9:69:39:3d:59:75:aa:87:5e:af:d6:63:67:69:
         f6:6d:c5:4f:ef:c7:08:81:c6:a7:58:11:2f:04:4a:8f:5d:25:
         36:23:fc:5b:e0:1c:ca:4c:5a:89:19:e0:03:78:b3:1c:e4:a3:
         ad:ca:37:4a:92:d4:47:60:cc:9e:30:09:dc:58:57:47:bd:aa:
         48:41:c8:ec:9c:00:23:0d:20:ca:0b:0a:90:fa:32:70:13:99:
         0e:d4:95:ab:98:c4:e6:6b:d9:b7:fe:e5:46:18:1d:93:11:db:
         e5:de:18:89:6e:de:0d:d9:b1:ab:77:10:15:83:c1:4b:a5:ef:
         8f:de:a4:7d:7d:3f:5d:6e:47:06:cc:5e:80:89:f5:28:d0:5c:
         43:3d:6f:28:a3:87:b7:8e:2c:05:10:55:89:f5:58:98:48:ed:
         3b:4f:d5:81
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBKDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
Qzc0MUFGMTEwLwYDVQQFEyhERkVEMURCMzE4NjlCRENDQzk2N0I1NDBFMjJEQjA1
NjQyNTQyRjFEMB4XDTE1MDcwNjEyMDUyNFoXDTI1MTIzMTEyMDUyNFowGDEWMBQG
A1UEAxMNNTU5YTZlZGEtZDhkYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKpfS4iNIj1Lv/v58+cMq4eHBpUnESwDOsR70y2Gpy6hLLYuAo3/fbBbDmJo
e0jRO8Wi0AJd5C4SNjf5bLAh0apvcLkRLOOze9KBFlA/0qB6ikuCUeHmw33K9YBU
XbK3Ch26y+3x283AzYqi37DJT6/jyV4XVdRGrdJd64mrnp1KdSEYKA5mIyXnqYA2
xTRPUDEdFENsJIr7spvnARM9gb7l440ydyc93y97fMlrw/Jaov2taZTNvg2c+Fll
pjgvGiQI0FLHR8M87RkxTH+SKkwrFa2jBXt3+ruRdZzzDdIfWuJXUw3zgORYDrC7
Pqx40AFnmzV3VoY1KhI3yXfTGGECAwEAAaOCAm4wggJqMB0GA1UdDgQWBBR/JeMo
LbMcYTQr/15HMhLxapfPFDAfBgNVHSMEGDAWgBTf7R2zGGm9zMlntUDiLbBWQlQv
HTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NUM3NDEvQkUxNzNFQjQwNkJEMTFFNTg4ODI0RDA4RjhBRUEyMjgvMy0wZHN4
aHB2Y3pKWjdWQTRpMndWa0pVTHgwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvMy0wZHN4aHB2Y3pKWjdWQTRpMndWa0pVTHgwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUM3NDEvQkUxNzNFQjQwNkJEMTFFNTg4ODI0RDA4RjhB
RUEyMjgvNTExOTNBRUMyM0Q3MTFFNUFGQjE3MTJBRjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFKc5gMA0GCSqGSIb3DQEBCwUAA4IBAQDI
qGWFbuMK4UhtiKhxdjvhxkJsstAaqBekatuBfDI0jAgKkYD0xVJrweXf2C8heBBB
5aBtLfNVvqOyD07SYJK//zd3NicrKztreYVfGTaitMtCrRtUX02VWP4m9TjNuWk5
PVl1qoder9ZjZ2n2bcVP78cIgcanWBEvBEqPXSU2I/xb4BzKTFqJGeADeLMc5KOt
yjdKktRHYMyeMAncWFdHvapIQcjsnAAjDSDKCwqQ+jJwE5kO1JWrmMTma9m3/uVG
GB2TEdvl3hiJbt4N2bGrdxAVg8FLpe+P3qR9fT9dbkcGzF6AifUo0FxDPW8oo4e3
jiwFEFWJ9ViYSO07T9WB
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org