Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/C7D92E1869B911EE953F70484AD9E6FC.roa
File:                     C7D92E1869B911EE953F70484AD9E6FC.roa (raw, json)
Hash identifier:          SdAbuipwR7EHxw/Hbwbw2PDVH2wv4MuQ83A/IxBI9GQ=
Subject key identifier:   7E:AA:14:2A:DB:B0:BB:58:CE:0C:C3:58:1C:6E:30:06:9D:17:32:18
Certificate issuer:       /CN=F366CE6FAF/serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
Certificate serial:       06
Authority key identifier: 2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/C7D92E1869B911EE953F70484AD9E6FC.roa
Signing time:             Fri 13 Oct 2023 11:15:14 +0000
ROA not before:           Fri 13 Oct 2023 11:15:10 +0000
ROA not after:            Wed 13 Oct 2027 11:15:10 +0000
asID:                     37513
IP address blocks:        196.12.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366CE6FAF/serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
        Validity
            Not Before: Oct 13 11:15:10 2023 GMT
            Not After : Oct 13 11:15:10 2027 GMT
        Subject: CN=652926c2-385c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:14:86:4b:a9:b7:c6:b2:b6:6b:c2:17:5b:
                    6e:62:52:25:91:0f:fd:9c:fe:d6:00:bf:a8:0c:ac:
                    a6:51:c5:85:79:d6:b6:7c:ec:17:e1:ec:fe:aa:c5:
                    68:1c:e0:31:22:db:3f:88:c0:a2:ee:51:9f:27:a1:
                    dc:20:96:dd:6e:1c:9e:65:13:76:dc:53:96:f5:87:
                    dd:e0:8b:f9:69:27:ea:a8:62:9a:7c:84:80:d2:ac:
                    f6:84:30:5a:00:a6:8f:d9:1b:5d:44:48:3a:eb:26:
                    ca:79:d0:ee:68:cc:7e:1c:b2:62:9a:b1:8e:3a:b7:
                    a3:07:98:84:30:b9:9e:4b:6d:0f:6b:73:cf:75:76:
                    4c:41:4d:24:b6:03:6c:06:f0:ca:ac:86:fa:a6:bf:
                    bf:d6:e4:86:f6:44:81:36:51:0c:a4:ac:1d:39:ca:
                    c9:ca:49:95:61:2b:ea:10:4c:3a:ed:98:16:32:5f:
                    6f:27:df:ef:69:15:35:ff:d9:90:64:d2:30:ef:b5:
                    96:e6:08:31:58:7a:12:3d:9a:b3:ca:63:70:e2:9e:
                    f1:06:0e:f3:4b:43:cd:13:6c:7e:10:cf:7f:47:c5:
                    8a:a9:99:24:7f:36:f0:57:8a:87:83:cb:f0:36:e2:
                    31:5c:15:c3:44:72:71:92:6b:f6:dc:8b:86:5b:27:
                    72:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AA:14:2A:DB:B0:BB:58:CE:0C:C3:58:1C:6E:30:06:9D:17:32:18
            X509v3 Authority Key Identifier:
                keyid:2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/C7D92E1869B911EE953F70484AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.12.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:67:4c:55:30:88:70:4c:c5:24:8b:c3:7e:56:14:98:6b:c8:
         76:fb:a1:eb:7a:d8:1f:20:8d:66:51:ab:05:0d:fb:82:6e:c1:
         a3:74:7e:ac:f5:56:f8:fb:c6:c6:b1:d3:27:dc:ee:8d:32:19:
         d9:ad:9e:ec:ac:c4:4a:49:cf:bb:35:96:54:02:47:9c:be:06:
         c5:e1:7e:00:3b:c3:71:57:15:10:98:ee:fc:b3:1a:e1:0e:bb:
         75:b6:82:4b:f3:45:f4:bc:48:34:79:d3:16:14:56:5b:3d:3d:
         d3:d3:1c:af:dd:a3:d0:29:5c:af:7f:dc:d8:40:9d:ee:83:4a:
         8c:16:6a:ee:65:e1:fc:75:e7:d6:af:f9:75:ef:2b:a5:9e:29:
         a9:e6:81:cc:18:44:a0:61:59:b0:c3:9f:86:72:30:15:39:53:
         d1:50:87:8e:45:76:2a:59:a7:bc:d7:de:ab:fb:e7:4b:42:e7:
         93:a6:bc:14:cb:ea:cb:de:bf:ae:ae:f8:82:c0:42:83:00:24:
         d3:c3:1d:d7:f0:9d:f2:71:87:7c:7b:42:bb:77:85:d5:70:e8:
         4a:07:4b:65:e6:2a:bb:49:fc:24:77:7d:be:f6:db:e1:39:51:
         09:2f:8e:91:fe:35:d7:4a:43:7e:d5:c2:4d:74:1d:44:96:31:
         1f:7a:fe:6f
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY2
Q0U2RkFGMTEwLwYDVQQFEygyQTdDRUU3OTE4MkJCODU5MUJCMTM1RERCRkJCRUU5
NEMxREY0MDg3MB4XDTIzMTAxMzExMTUxMFoXDTI3MTAxMzExMTUxMFowGDEWMBQG
A1UEAxMNNjUyOTI2YzItMzg1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALkRFIZLqbfGsrZrwhdbbmJSJZEP/Zz+1gC/qAysplHFhXnWtnzsF+Hs/qrF
aBzgMSLbP4jAou5Rnyeh3CCW3W4cnmUTdtxTlvWH3eCL+Wkn6qhimnyEgNKs9oQw
WgCmj9kbXURIOusmynnQ7mjMfhyyYpqxjjq3oweYhDC5nkttD2tzz3V2TEFNJLYD
bAbwyqyG+qa/v9bkhvZEgTZRDKSsHTnKycpJlWEr6hBMOu2YFjJfbyff72kVNf/Z
kGTSMO+1luYIMVh6Ej2as8pjcOKe8QYO80tDzRNsfhDPf0fFiqmZJH828FeKh4PL
8DbiMVwVw0RycZJr9tyLhlsncvMCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBR+qhQq
27C7WM4Mw1gcbjAGnRcyGDAfBgNVHSMEGDAWgBQqfO55GCu4WRuxNd2/u+6Uwd9A
hzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NkNFNkYvRDlBNDY3NkM2OTlBMTFFRUJDQzVGQjY3NEFEOUU2RkMvS256dWVS
Z3J1Rmtic1RYZHY3dnVsTUhmUUljLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvS256dWVSZ3J1Rmtic1RYZHY3dnVsTUhmUUljLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkNFNkYvRDlBNDY3NkM2OTlBMTFFRUJDQzVGQjY3NEFE
OUU2RkMvQzdEOTJFMTg2OUI5MTFFRTk1M0Y3MDQ4NEFEOUU2RkMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMQMCjANBgkqhkiG9w0BAQsF
AAOCAQEAEGdMVTCIcEzFJIvDflYUmGvIdvuh63rYHyCNZlGrBQ37gm7Bo3R+rPVW
+PvGxrHTJ9zujTIZ2a2e7KzESknPuzWWVAJHnL4GxeF+ADvDcVcVEJju/LMa4Q67
dbaCS/NF9LxINHnTFhRWWz0909Mcr92j0Clcr3/c2ECd7oNKjBZq7mXh/HXn1q/5
de8rpZ4pqeaBzBhEoGFZsMOfhnIwFTlT0VCHjkV2KlmnvNfeq/vnS0Lnk6a8FMvq
y96/rq74gsBCgwAk08Md1/Cd8nGHfHtCu3eF1XDoSgdLZeYqu0n8JHd9vvbb4TlR
CS+Okf4110pDftXCTXQdRJYxH3r+bw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:42 2024 by rpki-client on console-ams.rpki-client.org