Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0F3E86D8903611EF96E7A27C762E951A.roa
File:                     0F3E86D8903611EF96E7A27C762E951A.roa (raw, json)
Hash identifier:          Eqgdn8Fgg4QmW1Uod11n2ZeTfHwYF0N5jpWFlTyWojA=
Subject key identifier:   74:BF:06:61:1B:D2:61:0D:32:A9:71:5D:BB:DE:3C:E5:9A:10:B3:B8
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       186C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0F3E86D8903611EF96E7A27C762E951A.roa
Signing time:             Tue 22 Oct 2024 05:25:33 +0000
ROA not before:           Tue 22 Oct 2024 05:25:29 +0000
ROA not after:            Thu 22 Oct 2026 05:25:29 +0000
asID:                     397384
IP address blocks:        154.16.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6252 (0x186c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct 22 05:25:29 2024 GMT
            Not After : Oct 22 05:25:29 2026 GMT
        Subject: CN=6717374d-1cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:75:77:f4:a3:7e:49:67:7e:5d:9d:27:ec:b4:
                    18:5f:bd:82:61:04:9a:d1:f1:e6:55:2b:5e:6a:92:
                    5f:8c:42:2c:05:a4:db:4a:6a:1f:78:cf:74:75:77:
                    2a:c8:32:f6:c5:c9:22:2e:b3:ae:3f:61:19:15:5e:
                    f9:ab:f3:b5:30:ca:2b:8a:d8:d7:a0:d0:79:29:cb:
                    95:4e:7f:ad:4f:36:59:af:24:13:fd:ce:a0:76:ae:
                    ae:3d:02:e8:66:1f:10:89:03:e4:25:f5:60:72:81:
                    a9:06:d2:29:85:18:08:55:c2:77:07:3c:5b:3c:56:
                    c8:75:64:60:e5:ff:3e:41:41:7e:37:93:c3:45:52:
                    d4:cf:6b:2b:3d:a2:28:4c:80:63:d2:e1:ef:38:29:
                    90:ea:93:f4:b0:46:41:2a:6b:bf:ea:34:0d:a9:71:
                    58:09:be:9e:bf:87:39:6a:eb:b9:a2:a7:c2:22:16:
                    0b:e7:70:fe:5c:a0:69:76:80:53:30:08:49:93:28:
                    99:5d:6b:ec:4b:4e:52:0c:59:7b:f9:36:3c:1c:e0:
                    b4:68:c5:f1:0b:3b:d1:93:9f:49:4d:9c:b7:b6:4a:
                    47:69:85:2d:ed:a7:98:af:7e:6b:9e:4b:22:85:f4:
                    04:7c:14:9d:bb:d1:54:3d:e5:56:66:ed:64:7c:a5:
                    bd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BF:06:61:1B:D2:61:0D:32:A9:71:5D:BB:DE:3C:E5:9A:10:B3:B8
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0F3E86D8903611EF96E7A27C762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:f9:a4:b7:5d:99:6c:18:ab:70:21:2f:d5:c8:97:eb:32:3c:
         87:89:ea:26:44:c0:7b:42:cd:70:56:c8:9a:5f:81:a5:76:33:
         92:30:38:71:76:7a:00:cb:df:6f:11:78:e0:ad:58:9c:2d:b7:
         43:01:39:a5:01:f1:d7:46:62:7d:30:45:44:a7:a1:34:36:84:
         da:8b:d7:8b:7b:91:27:eb:f9:fc:e7:9e:95:c7:b9:a0:e6:97:
         c6:f8:8f:92:f2:2f:62:9e:45:cc:83:9f:15:8c:9a:83:51:49:
         e8:69:4d:4b:95:1b:b8:f1:0f:e1:4e:29:97:09:43:e2:1c:92:
         d7:73:00:1f:dd:f3:5a:93:d3:06:47:a6:a0:bf:e3:02:8b:4d:
         09:13:4d:ab:58:b5:7a:e8:45:e9:92:0c:a2:8e:c5:85:66:3b:
         ac:11:99:66:05:18:7f:e2:c5:b1:3a:72:67:4e:df:91:ae:e7:
         62:b6:5b:ba:f9:2d:69:a5:43:22:9e:4f:09:aa:80:7a:fb:4f:
         a8:5c:a1:ae:61:93:11:f1:5b:cc:4a:44:38:a9:6a:2a:4b:cd:
         63:30:c1:c8:a6:cb:2c:ce:d0:5b:1f:2f:ce:4d:8f:73:b4:e9:
         51:ae:70:50:a6:71:fd:2d:51:ea:7e:e5:f8:9a:a1:7b:5f:3b:
         af:a0:7a:af
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGGwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDEwMjIwNTI1MjlaFw0yNjEwMjIwNTI1MjlaMBgxFjAU
BgNVBAMTDTY3MTczNzRkLTFjYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWdXf0o35JZ35dnSfstBhfvYJhBJrR8eZVK15qkl+MQiwFpNtKah94z3R1
dyrIMvbFySIus64/YRkVXvmr87UwyiuK2Neg0Hkpy5VOf61PNlmvJBP9zqB2rq49
AuhmHxCJA+Ql9WBygakG0imFGAhVwncHPFs8Vsh1ZGDl/z5BQX43k8NFUtTPays9
oihMgGPS4e84KZDqk/SwRkEqa7/qNA2pcVgJvp6/hzlq67mip8IiFgvncP5coGl2
gFMwCEmTKJlda+xLTlIMWXv5Njwc4LRoxfELO9GTn0lNnLe2SkdphS3tp5ivfmue
SyKF9AR8FJ270VQ95VZm7WR8pb3/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUdL8G
YRvSYQ0yqXFdu9485ZoQs7gwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzBGM0U4NkQ4OTAzNjExRUY5NkU3QTI3Qzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEJ8wDQYJKoZIhvcNAQEL
BQADggEBACr5pLddmWwYq3AhL9XIl+syPIeJ6iZEwHtCzXBWyJpfgaV2M5IwOHF2
egDL328ReOCtWJwtt0MBOaUB8ddGYn0wRUSnoTQ2hNqL14t7kSfr+fznnpXHuaDm
l8b4j5LyL2KeRcyDnxWMmoNRSehpTUuVG7jxD+FOKZcJQ+IcktdzAB/d81qT0wZH
pqC/4wKLTQkTTatYtXroRemSDKKOxYVmO6wRmWYFGH/ixbE6cmdO35Gu52K2W7r5
LWmlQyKeTwmqgHr7T6hcoa5hkxHxW8xKRDipaipLzWMwwcimyyzO0FsfL85Nj3O0
6VGucFCmcf0tUep+5fiaoXtfO6+geq8=
-----END CERTIFICATE-----