Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/64D923942F8B11EE967524854AD9E6FC.roa
File:                     64D923942F8B11EE967524854AD9E6FC.roa (raw, json)
Hash identifier:          rJxhYXywCv0ZDS8d3j7hdFuVRn2yxIQwLUJ+9brMF2c=
Subject key identifier:   4D:F9:86:D5:57:FC:F9:4E:6B:FA:2B:2C:16:6F:E1:F5:C0:4E:4B:60
Certificate issuer:       /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial:       04E7
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/64D923942F8B11EE967524854AD9E6FC.roa
Signing time:             Mon 31 Jul 2023 10:17:03 +0000
ROA not before:           Mon 31 Jul 2023 10:17:00 +0000
ROA not after:            Fri 31 Jul 2043 10:17:00 +0000
asID:                     198949
IP address blocks:        196.96.0.0/12 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1255 (0x4e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
        Validity
            Not Before: Jul 31 10:17:00 2023 GMT
            Not After : Jul 31 10:17:00 2043 GMT
        Subject: CN=64c78a1f-b8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:f9:37:bf:22:22:d1:c2:7f:f2:b7:eb:27:
                    89:78:ea:10:d3:34:d9:9a:9c:62:4b:50:1d:9c:1d:
                    9d:31:69:e6:03:73:33:a5:1f:a5:38:83:e6:92:9f:
                    f4:be:d3:77:b9:77:d2:a2:c2:5c:72:ae:5b:53:98:
                    67:77:c0:33:2c:b3:b5:d2:26:41:0b:98:7f:fd:15:
                    d6:c7:c4:7a:c6:da:7e:02:63:96:8d:5f:e3:f3:40:
                    4d:07:04:06:3b:8f:de:97:d9:77:8b:95:79:a8:5b:
                    ec:27:7b:b6:52:b7:22:73:df:62:0e:d9:75:a5:55:
                    44:d2:a2:de:c1:51:53:9c:2d:e6:fa:5f:97:41:d2:
                    4e:f2:65:9f:8c:82:01:6e:b3:be:63:c7:10:cf:45:
                    d0:8e:ad:ba:c9:b2:51:ff:a9:76:29:84:4e:1e:67:
                    4d:c8:2f:01:49:60:66:7e:81:48:47:f7:99:84:d6:
                    fa:82:4a:15:fc:de:d7:c9:74:ab:f4:43:fb:ec:d2:
                    53:c1:d5:75:73:56:cf:04:4c:99:c3:4a:1e:f1:35:
                    fc:13:88:ba:c3:98:6a:b9:c2:a5:25:9e:d4:f3:59:
                    3e:3c:cd:d1:49:54:fb:22:33:c6:11:b2:15:45:7e:
                    03:79:40:d9:4f:8a:8b:64:f5:b6:69:a3:11:ef:5a:
                    7a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F9:86:D5:57:FC:F9:4E:6B:FA:2B:2C:16:6F:E1:F5:C0:4E:4B:60
            X509v3 Authority Key Identifier:
                keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/64D923942F8B11EE967524854AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.96.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         22:26:26:1f:14:dc:51:72:bf:d9:15:b3:79:96:8a:d3:84:e9:
         a2:81:a2:45:cb:50:fb:8d:34:f5:74:bc:27:a3:5b:8f:a0:92:
         0c:ec:7c:6a:14:3f:e3:78:78:78:73:0a:2c:2d:af:36:a4:0b:
         89:bf:f3:f1:c0:b7:49:22:d1:12:8c:4b:73:d8:00:7c:63:a7:
         fb:d1:77:d9:8a:7c:de:36:60:be:98:fc:90:31:23:e2:8f:33:
         d6:97:9d:06:34:ed:04:11:d3:8b:1c:9b:5d:2b:3a:d6:8d:82:
         ed:ae:0f:22:7e:7b:19:cd:d3:2d:7b:5a:fe:73:a7:c4:82:1b:
         e2:56:d0:f9:28:c6:82:17:7a:44:2b:6c:a4:6c:79:0b:67:c9:
         68:49:d6:74:50:fb:b1:3e:d4:3b:76:e8:21:74:16:b5:49:a7:
         bb:5b:c3:f5:23:b3:97:95:38:c7:6e:f4:a9:4d:67:65:81:47:
         44:eb:b5:7b:95:cb:0a:5e:db:52:76:9d:6c:ac:c2:7a:e1:07:
         53:e7:a3:e2:51:11:8d:3e:60:1f:3c:b8:ed:4c:ca:9d:4d:2c:
         cc:64:69:84:6d:fa:bc:21:e3:a2:dc:c5:39:4b:de:55:85:22:
         9a:83:5b:9e:18:73:c4:aa:df:a2:69:fc:a5:cc:6f:11:9d:f8:
         f9:c7:ca:6a
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODIxMDRBRjExMC8GA1UEBRMoOEIxMDI2OTUzRUNGN0M0Q0UxMzlGRTlBNTlCREQ3
MjI4QTE1MzU0NDAeFw0yMzA3MzExMDE3MDBaFw00MzA3MzExMDE3MDBaMBgxFjAU
BgNVBAMTDTY0Yzc4YTFmLWI4ZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHZvk3vyIi0cJ/8rfrJ4l46hDTNNmanGJLUB2cHZ0xaeYDczOlH6U4g+aS
n/S+03e5d9KiwlxyrltTmGd3wDMss7XSJkELmH/9FdbHxHrG2n4CY5aNX+PzQE0H
BAY7j96X2XeLlXmoW+wne7ZStyJz32IO2XWlVUTSot7BUVOcLeb6X5dB0k7yZZ+M
ggFus75jxxDPRdCOrbrJslH/qXYphE4eZ03ILwFJYGZ+gUhH95mE1vqCShX83tfJ
dKv0Q/vs0lPB1XVzVs8ETJnDSh7xNfwTiLrDmGq5wqUlntTzWT48zdFJVPsiM8YR
shVFfgN5QNlPiotk9bZpoxHvWnqXAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUTfmG
1Vf8+U5r+issFm/h9cBOS2AwHwYDVR0jBBgwFoAUixAmlT7PfEzhOf6aWb3XIooV
NUQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyMTA0LzA5Q0NCOTRDQTc2MzExRUFCQkMxOTExQ0Y4QUVBMjI4L2l4QW1s
VDdQZkV6aE9mNmFXYjNYSW9vVk5VUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2l4QW1sVDdQZkV6aE9mNmFXYjNYSW9vVk5VUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyMTA0LzA5Q0NCOTRDQTc2MzExRUFCQkMxOTExQ0Y4
QUVBMjI4LzY0RDkyMzk0MkY4QjExRUU5Njc1MjQ4NTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwTEYDANBgkqhkiG9w0BAQsF
AAOCAQEAIiYmHxTcUXK/2RWzeZaK04TpooGiRctQ+4009XS8J6Nbj6CSDOx8ahQ/
43h4eHMKLC2vNqQLib/z8cC3SSLREoxLc9gAfGOn+9F32Yp83jZgvpj8kDEj4o8z
1pedBjTtBBHTixybXSs61o2C7a4PIn57Gc3TLXta/nOnxIIb4lbQ+SjGghd6RCts
pGx5C2fJaEnWdFD7sT7UO3boIXQWtUmnu1vD9SOzl5U4x270qU1nZYFHROu1e5XL
Cl7bUnadbKzCeuEHU+ej4lERjT5gHzy47UzKnU0szGRphG36vCHjotzFOUveVYUi
moNbnhhzxKrfomn8pcxvEZ34+cfKag==
-----END CERTIFICATE-----
Generated at Mon May 6 01:48:16 2024 by rpki-client on console-fra.rpki-client.org