Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E2F57DA24B411EF99A4D6EF7CDC24C2.roa
File:                     3E2F57DA24B411EF99A4D6EF7CDC24C2.roa (raw, json)
Hash identifier:          sQhuk98fSprb28UAmOrsYtbeQzeZ4daV+98DIwJGKMU=
Subject key identifier:   CF:02:1C:EC:4B:1C:50:14:1E:78:3A:FC:99:B1:2C:07:31:40:3F:1E
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       16C6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E2F57DA24B411EF99A4D6EF7CDC24C2.roa
Signing time:             Fri 07 Jun 2024 09:56:43 +0000
ROA not before:           Fri 07 Jun 2024 09:56:39 +0000
ROA not after:            Sun 07 Jun 2026 09:56:39 +0000
asID:                     13213
IP address blocks:        154.16.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 16 Jul 2024 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5830 (0x16c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun  7 09:56:39 2024 GMT
            Not After : Jun  7 09:56:39 2026 GMT
        Subject: CN=6662d95b-999b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f5:e2:1f:9b:8f:67:42:04:3a:4c:ba:81:d9:
                    a0:a3:f8:d3:58:8d:83:72:c0:e3:20:17:80:f4:69:
                    81:d3:f1:20:fb:86:f7:1e:85:64:a1:2f:18:bf:dd:
                    b6:a9:44:f4:a7:93:cd:d1:fa:df:11:ad:68:25:73:
                    4e:5f:27:84:65:ff:54:6e:a4:25:76:fc:25:65:61:
                    11:e8:56:52:c2:af:14:f9:ce:22:c7:bb:8a:24:06:
                    1b:1c:a3:a0:19:50:cc:7b:6d:fc:31:e2:6c:29:9c:
                    e8:a4:77:8d:98:94:bb:b9:fd:9a:a8:0b:01:b7:e3:
                    99:f0:9d:19:1f:b4:62:af:3a:8a:fc:4b:18:11:38:
                    e1:1e:45:63:6d:7d:45:04:05:ef:4e:f4:74:6e:7d:
                    6b:f5:41:5e:71:cc:d7:cd:bf:d4:5c:5c:5e:ed:76:
                    07:d1:9a:3c:4c:c3:9f:1d:0f:95:3d:6f:35:6c:e7:
                    f8:11:dc:74:fb:a8:f0:0f:dc:65:32:76:11:70:d1:
                    5b:06:28:83:fd:60:6c:90:1f:97:01:fe:32:97:1f:
                    eb:63:be:d5:8f:42:26:44:64:85:9d:e0:0c:87:90:
                    c8:a4:b6:9c:a4:c1:70:4e:b3:58:25:e5:ca:89:78:
                    23:a4:e5:de:3d:c5:50:90:73:d6:59:1c:1e:05:6e:
                    1c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:02:1C:EC:4B:1C:50:14:1E:78:3A:FC:99:B1:2C:07:31:40:3F:1E
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E2F57DA24B411EF99A4D6EF7CDC24C2.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:32:e8:6f:b2:30:6e:af:82:b2:5a:e2:50:21:94:82:b4:1b:
         b1:93:9b:e0:fe:37:85:c1:91:6c:52:4b:5f:84:7a:73:9e:2d:
         e1:64:13:45:cd:f3:e3:de:67:3e:74:43:26:ea:63:ef:68:56:
         6c:f4:da:f7:37:93:a2:7c:72:c3:80:43:5b:c6:48:9b:66:ad:
         29:62:88:0c:a0:41:4e:fd:24:1e:2d:de:d0:02:0c:4c:47:5c:
         05:e9:fa:2e:28:db:e2:a0:b1:c8:96:2f:9c:8d:58:2c:37:84:
         3d:84:5a:0e:51:84:a6:52:a9:b6:5c:93:66:6e:b4:31:79:a3:
         f8:2f:70:bf:06:e8:bc:9a:b2:df:96:20:31:5f:98:ee:9a:a6:
         7d:36:f1:26:71:31:92:e4:f7:0d:06:5f:a6:89:03:b2:52:54:
         42:bd:ca:00:d2:d9:6b:6c:68:00:7d:d4:ea:c7:40:d1:84:c7:
         bf:e5:af:de:18:f4:19:42:fd:b1:f7:51:d3:c3:96:11:7a:d7:
         e5:b3:c4:f8:b2:67:da:bf:ac:56:ee:8a:70:49:e7:4b:af:5a:
         aa:3f:bd:3f:4f:1c:e1:58:17:25:e2:b3:bd:4b:f3:5e:55:11:
         56:91:c5:84:6e:c3:23:3b:22:23:88:71:2f:f8:11:dd:d1:ae:
         4c:28:bf:40
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFsYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDA2MDcwOTU2MzlaFw0yNjA2MDcwOTU2MzlaMBgxFjAU
BgNVBAMTDTY2NjJkOTViLTk5OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDF9eIfm49nQgQ6TLqB2aCj+NNYjYNywOMgF4D0aYHT8SD7hvcehWShLxi/
3bapRPSnk83R+t8RrWglc05fJ4Rl/1RupCV2/CVlYRHoVlLCrxT5ziLHu4okBhsc
o6AZUMx7bfwx4mwpnOikd42YlLu5/ZqoCwG345nwnRkftGKvOor8SxgROOEeRWNt
fUUEBe9O9HRufWv1QV5xzNfNv9RcXF7tdgfRmjxMw58dD5U9bzVs5/gR3HT7qPAP
3GUydhFw0VsGKIP9YGyQH5cB/jKXH+tjvtWPQiZEZIWd4AyHkMiktpykwXBOs1gl
5cqJeCOk5d49xVCQc9ZZHB4FbhzHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUzwIc
7EscUBQeeDr8mbEsBzFAPx4wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzNFMkY1N0RBMjRCNDExRUY5OUE0RDZFRjdDREMyNEMyLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEOMwDQYJKoZIhvcNAQEL
BQADggEBAHky6G+yMG6vgrJa4lAhlIK0G7GTm+D+N4XBkWxSS1+EenOeLeFkE0XN
8+PeZz50QybqY+9oVmz02vc3k6J8csOAQ1vGSJtmrSliiAygQU79JB4t3tACDExH
XAXp+i4o2+KgsciWL5yNWCw3hD2EWg5RhKZSqbZck2ZutDF5o/gvcL8G6Lyast+W
IDFfmO6apn028SZxMZLk9w0GX6aJA7JSVEK9ygDS2WtsaAB91OrHQNGEx7/lr94Y
9BlC/bH3UdPDlhF61+WzxPiyZ9q/rFbuinBJ50uvWqo/vT9PHOFYFyXis71L815V
EVaRxYRuwyM7IiOIcS/4Ed3Rrkwov0A=
-----END CERTIFICATE-----
Generated at Sun Jul 14 01:34:43 2024 by rpki-client on console-fra.rpki-client.org