Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/7D40D6160BF111ED84303F9EF1222468.roa
File:                     7D40D6160BF111ED84303F9EF1222468.roa (raw, json)
Hash identifier:          ckCvxYcq/12gku3d6fc1o1XV0PJMwgV59VMw/SayYcI=
Subject key identifier:   81:89:74:D9:2E:20:E2:66:42:00:21:FD:D0:BC:97:77:01:E7:B9:2D
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0560
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/7D40D6160BF111ED84303F9EF1222468.roa
Signing time:             Mon 25 Jul 2022 08:12:13 +0000
ROA not before:           Mon 25 Jul 2022 08:12:10 +0000
ROA not after:            Wed 07 Jul 2032 08:12:10 +0000
asID:                     36916
IP address blocks:        41.180.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1376 (0x560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 25 08:12:10 2022 GMT
            Not After : Jul  7 08:12:10 2032 GMT
        Subject: CN=62de505d-b1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:71:59:55:20:67:de:b7:f2:b7:9c:4f:c5:5a:
                    7a:94:0f:6c:db:7b:ea:c1:4e:eb:a8:62:2e:3f:ee:
                    e6:e1:be:fc:ba:6c:7b:63:61:9c:ce:5d:88:c6:31:
                    d1:48:20:e4:8e:ce:ea:63:c1:ef:b7:a9:b2:d4:d1:
                    f7:cd:16:c0:84:b2:42:9e:7d:96:be:47:cf:a9:33:
                    b9:aa:30:8a:42:d2:df:bb:b7:2b:db:0f:c7:04:8d:
                    b0:22:dd:4b:be:ed:2a:cf:f8:a9:02:5a:8d:70:06:
                    1c:f1:a2:21:d0:3e:77:9b:a8:54:2f:39:a5:5c:ac:
                    76:b4:4a:67:45:65:6c:4b:ec:ee:14:c1:95:44:eb:
                    b0:79:8a:b6:02:5b:f5:b3:69:fd:c0:41:5e:b4:c5:
                    37:40:35:e3:e0:18:41:3d:dd:13:cf:07:b3:dd:9e:
                    4d:be:f1:fa:13:93:0f:7c:37:e8:39:f3:cc:43:85:
                    c2:f9:70:73:81:29:b2:6a:ee:66:b3:9f:ad:71:25:
                    10:84:f4:f8:8a:01:a3:18:4a:5e:26:8b:56:16:30:
                    56:77:16:e3:be:ea:b2:ac:57:6d:59:e1:1c:46:3e:
                    ef:22:17:f2:ed:b7:76:0e:85:3d:75:5e:f4:57:67:
                    c8:7f:33:85:ea:4d:e1:f5:24:2e:62:a5:08:d7:19:
                    a3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:89:74:D9:2E:20:E2:66:42:00:21:FD:D0:BC:97:77:01:E7:B9:2D
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/7D40D6160BF111ED84303F9EF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:6c:78:3c:21:1d:2a:82:8a:0b:56:a1:5c:06:61:47:d3:3d:
         4f:af:28:90:aa:91:00:dc:1b:98:f6:04:d2:86:44:80:33:aa:
         1c:f3:37:c9:ff:6d:35:73:88:5e:f5:9b:0e:5d:93:40:1c:cc:
         4b:37:7f:c6:de:42:eb:a5:74:04:18:f9:b3:3f:55:e9:58:b9:
         8d:5c:0f:05:77:c2:d4:5f:d1:dc:aa:42:70:d1:6b:9b:32:d0:
         d9:46:c0:f8:34:40:c4:c4:36:c3:07:b9:1b:c4:12:a7:e4:b6:
         7c:1c:c2:27:de:de:8f:36:42:65:90:6b:9b:6b:7f:1a:d1:4e:
         4c:11:bd:a0:2c:ec:62:65:e1:a0:da:c8:b5:2a:39:c9:8e:8b:
         f0:5d:47:97:83:00:61:63:50:22:ae:3e:ab:39:e9:9a:1e:66:
         c1:fd:63:2c:19:38:e8:1b:2f:2b:7b:95:3e:95:81:a1:37:40:
         77:f9:be:79:52:6e:df:bd:6b:72:8f:bb:06:90:8f:ef:9a:d9:
         1f:6b:9a:e2:05:ca:8d:a6:46:37:14:b0:63:98:3b:0e:ca:7c:
         5d:d6:f3:63:fb:b1:62:bc:c7:53:8f:6c:e3:e8:db:ba:a7:98:
         fd:40:ef:50:15:50:40:e8:5b:bf:c5:e7:c2:a8:6a:ab:a8:be:
         16:d1:da:59
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBWAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yMjA3MjUwODEyMTBaFw0zMjA3MDcwODEyMTBaMBgxFjAU
BgNVBAMMDTYyZGU1MDVkLWIxZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDScVlVIGfet/K3nE/FWnqUD2zbe+rBTuuoYi4/7ubhvvy6bHtjYZzOXYjG
MdFIIOSOzupjwe+3qbLU0ffNFsCEskKefZa+R8+pM7mqMIpC0t+7tyvbD8cEjbAi
3Uu+7SrP+KkCWo1wBhzxoiHQPnebqFQvOaVcrHa0SmdFZWxL7O4UwZVE67B5irYC
W/Wzaf3AQV60xTdANePgGEE93RPPB7Pdnk2+8foTkw98N+g588xDhcL5cHOBKbJq
7mazn61xJRCE9PiKAaMYSl4mi1YWMFZ3FuO+6rKsV21Z4RxGPu8iF/Ltt3YOhT11
XvRXZ8h/M4XqTeH1JC5ipQjXGaOFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUgYl0
2S4g4mZCACH90LyXdwHnuS0wHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4LzdENDBENjE2MEJGMTExRUQ4NDMwM0Y5RUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIptDAwDQYJKoZIhvcNAQEL
BQADggEBAJJseDwhHSqCigtWoVwGYUfTPU+vKJCqkQDcG5j2BNKGRIAzqhzzN8n/
bTVziF71mw5dk0AczEs3f8beQuuldAQY+bM/VelYuY1cDwV3wtRf0dyqQnDRa5sy
0NlGwPg0QMTENsMHuRvEEqfktnwcwife3o82QmWQa5trfxrRTkwRvaAs7GJl4aDa
yLUqOcmOi/BdR5eDAGFjUCKuPqs56ZoeZsH9YywZOOgbLyt7lT6VgaE3QHf5vnlS
bt+9a3KPuwaQj++a2R9rmuIFyo2mRjcUsGOYOw7KfF3W82P7sWK8x1OPbOPo27qn
mP1A71AVUEDoW7/F58KoaquovhbR2lk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org