Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0E9A8D12904511EFB85D305A762E951A.roa
File:                     0E9A8D12904511EFB85D305A762E951A.roa (raw, json)
Hash identifier:          396BChm2mUWwBJ6a5EMjDFcQtDM5Hhu9Xt4Nmn1wPBg=
Subject key identifier:   DB:C6:34:F7:78:09:2D:D5:50:FB:1E:62:6A:D3:F8:30:94:75:D2:55
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       18AE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0E9A8D12904511EFB85D305A762E951A.roa
Signing time:             Tue 22 Oct 2024 07:12:55 +0000
ROA not before:           Tue 22 Oct 2024 07:12:51 +0000
ROA not after:            Thu 22 Oct 2026 07:12:51 +0000
asID:                     397373
IP address blocks:        154.127.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6318 (0x18ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct 22 07:12:51 2024 GMT
            Not After : Oct 22 07:12:51 2026 GMT
        Subject: CN=67175076-4151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:67:b9:db:44:20:45:22:d4:a3:4d:6d:9e:f7:
                    c5:99:09:30:6b:31:3e:5e:af:4b:8c:bc:8c:9f:60:
                    33:f9:0a:85:08:e7:af:1e:5c:4a:9a:26:e5:57:59:
                    c3:18:cb:c5:f2:1d:73:1a:a5:e2:1c:8c:6b:ca:6f:
                    20:e9:2f:32:e4:cd:e4:b3:fc:b9:78:30:00:de:d6:
                    1a:37:4c:d4:05:3f:22:98:41:0e:74:db:d8:b6:ef:
                    8a:d0:99:31:81:0b:96:25:3f:22:f6:8a:78:52:7a:
                    8a:b5:93:62:b3:b7:ff:26:70:8f:94:cf:51:42:b2:
                    6b:53:8e:03:35:a9:33:db:f2:65:c8:32:10:88:55:
                    2e:33:05:93:0f:a7:b5:ae:ef:3f:fa:fe:2f:cc:a6:
                    5a:b7:55:6d:10:c6:3d:c6:85:49:62:60:ef:5a:de:
                    e3:16:50:2c:83:83:cb:bf:a5:e9:81:00:d4:d8:62:
                    84:39:d7:6f:a6:6a:91:9c:b1:89:99:c1:1e:1f:e6:
                    cc:1e:73:9c:e1:2b:e8:82:98:a5:6e:5e:41:de:2c:
                    c0:3c:58:f9:92:db:8c:1c:41:96:06:5b:ed:c6:dd:
                    3a:66:23:ef:9d:30:f4:48:b4:73:07:50:b2:e7:51:
                    cd:00:fc:4a:24:9b:45:c2:12:bd:94:c0:3f:1e:e2:
                    98:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C6:34:F7:78:09:2D:D5:50:FB:1E:62:6A:D3:F8:30:94:75:D2:55
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0E9A8D12904511EFB85D305A762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.127.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:eb:3f:fe:e5:ea:73:55:2e:f9:6d:b3:e9:2a:e3:28:47:0d:
         8a:13:bd:19:14:40:d9:23:d0:16:d4:da:5d:53:c5:70:23:d8:
         58:59:5b:e3:1f:42:bc:fa:fd:2c:6b:f1:a3:c0:45:79:09:46:
         9f:b9:32:b7:fd:83:3c:1a:b4:44:2b:ff:af:9c:09:19:c5:cd:
         84:50:ec:83:d7:4b:b5:32:ab:4c:bd:49:ba:89:ca:61:15:7c:
         e9:c0:ae:3b:fd:12:a5:99:a4:e8:3a:78:70:10:dc:c8:dc:19:
         1a:a2:31:b4:af:a7:98:22:95:6b:e3:65:74:aa:64:8a:96:1f:
         fe:f5:73:97:1d:ec:6d:ab:ab:ad:d8:73:c8:1b:63:3d:42:83:
         12:c6:86:d4:c1:fb:25:3b:b8:7b:f2:7e:f9:1b:15:f5:5d:84:
         02:64:6b:02:d0:4c:42:c3:04:82:b6:ea:88:f2:b9:db:19:f8:
         7a:bd:be:bd:59:0e:4e:ed:76:64:32:a8:0c:32:2d:f3:c5:68:
         a7:86:a1:14:46:a0:b3:0c:d7:6b:bb:20:3b:5a:a8:89:ee:28:
         36:00:cb:c6:af:07:1c:74:65:13:66:fa:e0:f1:4a:02:00:56:
         7e:fa:b1:7e:c6:a8:95:4a:1a:22:20:95:20:2c:a6:98:5a:53:
         77:49:1a:03
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGK4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDEwMjIwNzEyNTFaFw0yNjEwMjIwNzEyNTFaMBgxFjAU
BgNVBAMTDTY3MTc1MDc2LTQxNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQChZ7nbRCBFItSjTW2e98WZCTBrMT5er0uMvIyfYDP5CoUI568eXEqaJuVX
WcMYy8XyHXMapeIcjGvKbyDpLzLkzeSz/Ll4MADe1ho3TNQFPyKYQQ5029i274rQ
mTGBC5YlPyL2inhSeoq1k2Kzt/8mcI+Uz1FCsmtTjgM1qTPb8mXIMhCIVS4zBZMP
p7Wu7z/6/i/Mplq3VW0Qxj3GhUliYO9a3uMWUCyDg8u/pemBANTYYoQ512+mapGc
sYmZwR4f5swec5zhK+iCmKVuXkHeLMA8WPmS24wcQZYGW+3G3TpmI++dMPRItHMH
ULLnUc0A/Eokm0XCEr2UwD8e4pizAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU28Y0
93gJLdVQ+x5iatP4MJR10lUwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzBFOUE4RDEyOTA0NTExRUZCODVEMzA1QTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACafzcwDQYJKoZIhvcNAQEL
BQADggEBAHPrP/7l6nNVLvlts+kq4yhHDYoTvRkUQNkj0BbU2l1TxXAj2FhZW+Mf
Qrz6/Sxr8aPARXkJRp+5Mrf9gzwatEQr/6+cCRnFzYRQ7IPXS7Uyq0y9SbqJymEV
fOnArjv9EqWZpOg6eHAQ3MjcGRqiMbSvp5gilWvjZXSqZIqWH/71c5cd7G2rq63Y
c8gbYz1CgxLGhtTB+yU7uHvyfvkbFfVdhAJkawLQTELDBIK26ojyudsZ+Hq9vr1Z
Dk7tdmQyqAwyLfPFaKeGoRRGoLMM12u7IDtaqInuKDYAy8avBxx0ZRNm+uDxSgIA
Vn76sX7GqJVKGiIglSAspphaU3dJGgM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:45 2024 by rpki-client on console-ams.rpki-client.org