Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/B9FE13AABCD011EB8A4A557FF8AEA228.roa
File:                     B9FE13AABCD011EB8A4A557FF8AEA228.roa (raw, json)
Hash identifier:          jvAioJEG34r2QtsysnSGi68thE/e+GDKwFfGTy1Dk/E=
Subject key identifier:   0B:72:6F:6A:71:95:13:C7:2A:0E:CC:60:6A:93:A1:E8:3E:9D:DC:7E
Certificate issuer:       /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial:       015A
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/B9FE13AABCD011EB8A4A557FF8AEA228.roa
Signing time:             Mon 24 May 2021 20:43:42 +0000
ROA not before:           Mon 24 May 2021 20:43:35 +0000
ROA not after:            Fri 24 May 2041 20:43:35 +0000
asID:                     3741
IP address blocks:        197.81.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
        Validity
            Not Before: May 24 20:43:35 2021 GMT
            Not After : May 24 20:43:35 2041 GMT
        Subject: CN=60ac0ffe-8422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0a:53:06:cf:40:5d:1b:17:26:d2:f2:b0:97:
                    db:b1:87:5b:e5:85:5c:61:6b:6f:b4:98:fd:91:a5:
                    f6:37:f7:74:a0:c6:d6:d5:ba:69:68:be:08:aa:86:
                    49:26:9f:b6:65:86:17:e5:8a:01:de:7b:2e:a1:a5:
                    67:9d:92:5d:dd:40:ab:8c:f4:70:1f:ba:a6:f7:15:
                    02:ec:b0:a2:82:84:c7:16:08:cc:37:a3:58:c0:a7:
                    ed:e3:df:de:a6:9d:11:8d:f9:c2:e9:56:1e:6f:28:
                    da:03:ff:94:86:17:4d:87:93:84:f6:54:39:8e:57:
                    ca:d8:a8:de:6a:5d:cb:ca:32:2c:6d:fc:0c:f8:80:
                    90:3f:72:35:79:c4:7a:28:b3:cd:6f:f2:c2:9b:9e:
                    ae:ec:b2:5b:14:9a:a9:95:ce:b1:19:bb:eb:bd:24:
                    c9:69:46:d6:df:d8:de:01:58:fe:a8:bc:5c:45:96:
                    18:86:dd:b7:23:09:1f:65:ed:c4:93:04:c4:71:a3:
                    a3:48:e9:00:ff:40:e5:cd:5d:5d:9a:78:fa:a8:0d:
                    9b:9b:bb:93:45:c1:e7:49:26:7f:19:5f:9c:65:61:
                    4e:f2:6a:5f:f4:2f:46:c8:99:d3:57:cf:81:96:78:
                    ba:00:4c:e9:be:d5:87:51:68:17:b1:71:e4:f5:68:
                    c9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:72:6F:6A:71:95:13:C7:2A:0E:CC:60:6A:93:A1:E8:3E:9D:DC:7E
            X509v3 Authority Key Identifier:
                keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/B9FE13AABCD011EB8A4A557FF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.81.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:b8:97:b8:5f:75:95:1e:e4:7e:ee:22:ea:87:76:c3:8a:6c:
         33:de:eb:9e:d8:fc:2b:36:00:58:b4:31:8f:f6:fa:93:7f:14:
         5a:1f:fd:1d:c0:31:f9:4e:d1:c1:42:9e:f7:f8:51:44:98:6c:
         88:83:45:28:83:fe:5e:fb:ac:e4:d6:62:ef:b7:da:d4:6d:46:
         e2:cc:c4:1c:25:40:5a:64:bd:9b:9f:ac:e1:94:4a:92:18:a2:
         98:61:ae:c4:c9:c3:7e:87:82:60:b9:7c:10:9e:ae:a2:c1:9c:
         b3:df:0a:4d:c2:fc:8c:37:02:c7:8c:c2:48:73:d9:99:e9:55:
         2f:83:6e:6a:c3:1a:63:cb:f2:eb:1e:d2:f8:77:a6:ce:ec:f6:
         65:f6:5f:14:bd:e7:e2:f3:b0:5c:aa:d0:9d:6b:0f:a5:81:62:
         7f:7e:ca:d4:14:ff:5f:36:8a:38:d0:cf:fd:d5:dc:50:41:57:
         80:85:1b:08:01:fc:e7:41:7f:84:78:8d:fa:c2:cc:e7:7e:79:
         18:d2:bb:c7:a0:c6:6d:6d:af:c4:3f:8d:fb:12:d5:3a:3b:7f:
         1e:d3:2c:3d:aa:23:42:0f:18:95:12:ca:94:4f:70:b3:99:68:
         a1:d7:f4:55:05:52:a2:b7:56:cf:1f:6d:1d:56:d9:92:81:35:
         cf:37:6f:4f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAVowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBRjExMC8GA1UEBRMoMkY0MDdGRUNEOEI3REREQ0E1RDVCOTBBNUUxOTU4
OUQwNkMxMDFEQzAeFw0yMTA1MjQyMDQzMzVaFw00MTA1MjQyMDQzMzVaMBgxFjAU
BgNVBAMTDTYwYWMwZmZlLTg0MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKClMGz0BdGxcm0vKwl9uxh1vlhVxha2+0mP2RpfY393SgxtbVumlovgiq
hkkmn7ZlhhfligHeey6hpWedkl3dQKuM9HAfuqb3FQLssKKChMcWCMw3o1jAp+3j
396mnRGN+cLpVh5vKNoD/5SGF02Hk4T2VDmOV8rYqN5qXcvKMixt/Az4gJA/cjV5
xHoos81v8sKbnq7sslsUmqmVzrEZu+u9JMlpRtbf2N4BWP6ovFxFlhiG3bcjCR9l
7cSTBMRxo6NI6QD/QOXNXV2aePqoDZubu5NFwedJJn8ZX5xlYU7yal/0L0bImdNX
z4GWeLoATOm+1YdRaBexceT1aMkJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUC3Jv
anGVE8cqDsxgapOh6D6d3H4wHwYDVR0jBBgwFoAUL0B/7Ni33dyl1bkKXhlYnQbB
AdwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4QUVBMjI4L0wwQl83
TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0wwQl83TmkzM2R5bDFia0tYaGxZblFiQkFkdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdCMjE2LzM2QUMwRjk2ODdENTExRUJBQUZGMzQ0N0Y4
QUVBMjI4L0I5RkUxM0FBQkNEMDExRUI4QTRBNTU3RkY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADFUZ8wDQYJKoZIhvcNAQEL
BQADggEBAHi4l7hfdZUe5H7uIuqHdsOKbDPe657Y/Cs2AFi0MY/2+pN/FFof/R3A
MflO0cFCnvf4UUSYbIiDRSiD/l77rOTWYu+32tRtRuLMxBwlQFpkvZufrOGUSpIY
ophhrsTJw36HgmC5fBCerqLBnLPfCk3C/Iw3AseMwkhz2ZnpVS+DbmrDGmPL8use
0vh3ps7s9mX2XxS95+LzsFyq0J1rD6WBYn9+ytQU/182ijjQz/3V3FBBV4CFGwgB
/OdBf4R4jfrCzOd+eRjSu8egxm1tr8Q/jfsS1To7fx7TLD2qI0IPGJUSypRPcLOZ
aKHX9FUFUqK3Vs8fbR1W2ZKBNc83b08=
-----END CERTIFICATE-----
Generated at Sun May 19 02:39:31 2024 by rpki-client on console-fra.rpki-client.org