Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/673665E81BEE11EF8BB388FD7CDC24C2.roa
File:                     673665E81BEE11EF8BB388FD7CDC24C2.roa (raw, json)
Hash identifier:          RzAAfmrxxCBJAsXtNLyDsGrZ1t7Uidnn/SZkxwZ8ds8=
Subject key identifier:   17:26:59:8E:06:6E:E0:6F:57:A6:F2:FD:ED:24:1C:41:37:97:6E:E9
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1695
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/673665E81BEE11EF8BB388FD7CDC24C2.roa
Signing time:             Mon 27 May 2024 06:00:22 +0000
ROA not before:           Mon 27 May 2024 06:00:18 +0000
ROA not after:            Wed 27 May 2026 06:00:18 +0000
asID:                     834
IP address blocks:        154.16.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Jul 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5781 (0x1695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: May 27 06:00:18 2024 GMT
            Not After : May 27 06:00:18 2026 GMT
        Subject: CN=66542176-59ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ed:8d:ef:5d:cd:b9:12:2e:7e:0d:7f:56:3a:
                    d8:60:91:22:d0:7d:1e:31:f3:12:be:e9:0c:96:8f:
                    78:fb:99:74:6a:b8:31:a3:1a:57:e4:41:dd:0b:a3:
                    cd:5e:e5:b4:c7:84:43:21:4c:31:45:1e:8c:0e:bf:
                    e9:33:9c:56:23:24:1f:78:4c:2b:52:3c:69:3a:52:
                    5a:90:8d:63:27:09:9a:be:68:6f:18:32:72:b7:45:
                    e5:f4:4a:a0:31:0b:9f:5d:52:0a:75:89:6a:14:ac:
                    22:58:55:70:f2:2d:50:f2:68:c7:4b:46:c8:f9:5b:
                    e2:7b:97:94:fb:61:d4:95:6a:d3:34:02:8d:09:0f:
                    5d:af:52:4e:4b:de:29:12:a0:c7:8b:b3:ec:c6:a1:
                    99:f9:0f:15:18:81:7a:73:c8:ba:ba:05:fa:b7:61:
                    2f:8f:11:b8:bc:95:f9:be:d4:0e:20:f2:26:74:5f:
                    cb:05:a1:b9:a1:bd:b5:c7:9e:94:55:1b:03:36:82:
                    3a:e4:46:c7:f4:36:22:25:af:a4:9b:1e:cc:f0:65:
                    0a:cd:75:d8:98:19:a3:5b:ef:a7:63:25:5e:cd:62:
                    73:d3:70:8e:49:2a:9b:45:07:11:06:9c:ec:a8:4d:
                    e3:91:39:6f:92:ef:ea:36:53:b9:08:52:f6:c0:7b:
                    e0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:26:59:8E:06:6E:E0:6F:57:A6:F2:FD:ED:24:1C:41:37:97:6E:E9
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/673665E81BEE11EF8BB388FD7CDC24C2.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:a1:a0:96:a5:f4:0b:01:8e:93:ac:ce:d4:d0:27:77:84:47:
         bf:c4:b1:cf:98:80:b0:a3:87:2f:e6:61:10:49:80:b1:24:0c:
         3b:f8:a1:dd:17:59:cf:d5:3b:f9:35:8a:8b:dd:0b:a0:1d:3d:
         73:7a:d2:be:65:02:37:99:c4:d3:13:90:ce:7e:44:03:36:2c:
         16:3b:d8:4e:82:0a:ef:68:6f:36:d6:ce:ea:59:c7:de:76:c2:
         c5:b1:00:97:96:bf:85:0b:c9:f4:91:13:94:95:1f:82:c8:ab:
         c5:3f:ea:25:2a:07:ef:7f:3f:18:0e:5b:9a:13:bb:79:12:af:
         b3:fd:58:57:24:14:8e:65:60:1e:34:1b:d2:1c:46:5e:34:39:
         80:60:ff:a7:ab:a8:0b:8a:0a:26:4c:49:c5:6e:3a:10:fd:bf:
         f3:11:bc:05:e0:d6:9b:f6:43:32:ef:3c:f2:a4:f1:0b:77:0d:
         ee:88:74:3b:86:cb:8b:82:15:22:2b:d6:3f:f0:8f:76:2c:0c:
         ea:fb:fc:4d:2c:35:18:b0:84:a1:75:5e:46:cf:5d:6a:62:ff:
         77:88:a7:a7:45:57:c2:69:bc:cb:6e:bc:04:fb:3a:ba:ca:0d:
         73:eb:c4:62:ab:83:80:c2:7f:21:96:dc:5d:7c:90:25:e5:33:
         1d:dd:4e:d5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFpUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDA1MjcwNjAwMThaFw0yNjA1MjcwNjAwMThaMBgxFjAU
BgNVBAMTDTY2NTQyMTc2LTU5ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDa7Y3vXc25Ei5+DX9WOthgkSLQfR4x8xK+6QyWj3j7mXRquDGjGlfkQd0L
o81e5bTHhEMhTDFFHowOv+kznFYjJB94TCtSPGk6UlqQjWMnCZq+aG8YMnK3ReX0
SqAxC59dUgp1iWoUrCJYVXDyLVDyaMdLRsj5W+J7l5T7YdSVatM0Ao0JD12vUk5L
3ikSoMeLs+zGoZn5DxUYgXpzyLq6Bfq3YS+PEbi8lfm+1A4g8iZ0X8sFobmhvbXH
npRVGwM2gjrkRsf0NiIlr6SbHszwZQrNddiYGaNb76djJV7NYnPTcI5JKptFBxEG
nOyoTeOROW+S7+o2U7kIUvbAe+AhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUFyZZ
jgZu4G9XpvL97SQcQTeXbukwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzY3MzY2NUU4MUJFRTExRUY4QkIzODhGRDdDREMyNEMyLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEOgwDQYJKoZIhvcNAQEL
BQADggEBAHOhoJal9AsBjpOsztTQJ3eER7/Esc+YgLCjhy/mYRBJgLEkDDv4od0X
Wc/VO/k1iovdC6AdPXN60r5lAjeZxNMTkM5+RAM2LBY72E6CCu9obzbWzupZx952
wsWxAJeWv4ULyfSRE5SVH4LIq8U/6iUqB+9/PxgOW5oTu3kSr7P9WFckFI5lYB40
G9IcRl40OYBg/6erqAuKCiZMScVuOhD9v/MRvAXg1pv2QzLvPPKk8Qt3De6IdDuG
y4uCFSIr1j/wj3YsDOr7/E0sNRiwhKF1XkbPXWpi/3eIp6dFV8JpvMtuvAT7OrrK
DXPrxGKrg4DCfyGW3F18kCXlMx3dTtU=
-----END CERTIFICATE-----
Generated at Thu Jul 18 01:58:03 2024 by rpki-client on console-ams.rpki-client.org