Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/73CCC92838EB11EE8CFCBE6E4AD9E6FC.roa
File:                     73CCC92838EB11EE8CFCBE6E4AD9E6FC.roa (raw, json)
Hash identifier:          eZXjuSe4S4mlt5vqNp9GAjsyoQs7mg70LzhAym7v7Ig=
Subject key identifier:   11:51:C7:4E:0B:F3:10:D5:05:54:96:84:94:B6:71:14:2C:88:EB:37
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1137
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/73CCC92838EB11EE8CFCBE6E4AD9E6FC.roa
Signing time:             Sat 12 Aug 2023 08:37:21 +0000
ROA not before:           Sat 12 Aug 2023 08:37:17 +0000
ROA not after:            Wed 14 Aug 2024 08:37:17 +0000
asID:                     14670
IP address blocks:        154.16.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Jul 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4407 (0x1137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 12 08:37:17 2023 GMT
            Not After : Aug 14 08:37:17 2024 GMT
        Subject: CN=64d744c1-4a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f2:a7:73:df:34:66:fc:45:6e:6a:05:9e:97:
                    93:90:61:3b:38:fd:df:45:64:3e:8a:f7:83:18:eb:
                    84:96:02:fb:ff:dc:d0:bc:8c:d5:38:d6:87:6b:d7:
                    b4:be:39:78:5a:97:c4:5b:7c:6e:59:75:3a:7a:25:
                    4a:2e:db:83:38:ad:76:34:34:18:2b:54:38:7b:25:
                    b1:55:64:44:8a:11:6d:d4:fc:f2:45:40:8e:7f:96:
                    f7:d9:b5:ca:4d:37:4e:2d:9b:f6:65:a9:85:d1:80:
                    fa:30:dd:e0:9f:f4:47:f5:71:35:f2:4c:75:dc:80:
                    e3:c1:b0:8a:78:79:9c:39:b1:bf:69:3c:83:64:7e:
                    4f:ef:ce:f2:17:39:73:df:24:d3:9d:c6:36:4d:b3:
                    18:fd:ee:ac:32:38:c1:06:79:a5:1b:31:91:2f:e3:
                    65:28:de:46:ae:ab:cd:7c:c2:01:96:51:77:01:ff:
                    46:b3:06:e2:9b:e7:87:c3:4c:71:c6:bb:8c:13:34:
                    ae:b8:e2:90:bf:b4:44:2d:f2:93:be:ee:56:ae:86:
                    17:f4:dd:4f:dc:0e:54:39:a6:74:b2:08:4f:3a:f3:
                    a9:97:94:2a:3d:d3:c0:49:f3:c2:1a:df:08:95:0f:
                    4e:96:ef:1c:39:4d:17:00:03:e6:24:d8:3f:12:14:
                    9d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:51:C7:4E:0B:F3:10:D5:05:54:96:84:94:B6:71:14:2C:88:EB:37
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/73CCC92838EB11EE8CFCBE6E4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:5a:18:42:49:0e:3e:78:7e:09:bd:68:b3:26:09:72:b1:d4:
         45:08:ee:c4:36:31:73:d9:01:f1:ef:a6:46:e9:a8:09:5f:5c:
         c8:22:38:fa:16:b2:b7:fd:8a:5c:7d:7a:e8:96:4b:e6:d4:f5:
         20:30:95:4e:59:91:12:23:61:0c:91:b6:a4:97:9b:eb:22:6e:
         37:f7:58:96:70:fe:ba:ff:60:f6:5b:f6:22:62:b5:1c:07:20:
         3d:aa:8b:95:10:dd:97:45:bb:55:e4:2e:44:b5:e6:04:c8:06:
         e0:b8:f3:f9:9f:f8:32:06:e0:73:02:d6:cb:c6:32:93:11:15:
         c7:e8:0b:71:da:25:db:db:3e:d7:32:2b:00:76:fa:71:f6:0d:
         3f:f1:24:41:fd:f5:c2:78:8b:13:2b:08:e9:93:72:14:07:a0:
         6e:7f:90:cf:03:19:9e:b3:91:46:f0:fd:94:10:dd:75:c1:d9:
         56:a9:6e:88:d8:c4:60:e8:a7:8f:81:bd:d3:4a:a3:d1:b4:50:
         bf:f5:5e:29:a3:8f:3e:fb:7e:c4:4d:27:6f:68:1c:12:48:16:
         38:0c:cb:be:5e:fe:a4:cb:c1:7d:4b:2c:7c:d2:8f:38:8c:e6:
         20:20:50:46:44:1c:86:3f:4b:aa:2b:03:b0:29:48:e9:37:f8:
         28:e6:d4:23
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICETcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA4MTIwODM3MTdaFw0yNDA4MTQwODM3MTdaMBgxFjAU
BgNVBAMTDTY0ZDc0NGMxLTRhMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCV8qdz3zRm/EVuagWel5OQYTs4/d9FZD6K94MY64SWAvv/3NC8jNU41odr
17S+OXhal8RbfG5ZdTp6JUou24M4rXY0NBgrVDh7JbFVZESKEW3U/PJFQI5/lvfZ
tcpNN04tm/ZlqYXRgPow3eCf9Ef1cTXyTHXcgOPBsIp4eZw5sb9pPINkfk/vzvIX
OXPfJNOdxjZNsxj97qwyOMEGeaUbMZEv42Uo3kauq818wgGWUXcB/0azBuKb54fD
THHGu4wTNK644pC/tEQt8pO+7lauhhf03U/cDlQ5pnSyCE8686mXlCo908BJ88Ia
3wiVD06W7xw5TRcAA+Yk2D8SFJ0ZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUEVHH
TgvzENUFVJaElLZxFCyI6zcwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzczQ0NDOTI4MzhFQjExRUU4Q0ZDQkU2RTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEHQwDQYJKoZIhvcNAQEL
BQADggEBAD5aGEJJDj54fgm9aLMmCXKx1EUI7sQ2MXPZAfHvpkbpqAlfXMgiOPoW
srf9ilx9euiWS+bU9SAwlU5ZkRIjYQyRtqSXm+sibjf3WJZw/rr/YPZb9iJitRwH
ID2qi5UQ3ZdFu1XkLkS15gTIBuC48/mf+DIG4HMC1svGMpMRFcfoC3HaJdvbPtcy
KwB2+nH2DT/xJEH99cJ4ixMrCOmTchQHoG5/kM8DGZ6zkUbw/ZQQ3XXB2VapbojY
xGDop4+BvdNKo9G0UL/1Ximjjz77fsRNJ29oHBJIFjgMy75e/qTLwX1LLHzSjziM
5iAgUEZEHIY/S6orA7ApSOk3+Cjm1CM=
-----END CERTIFICATE-----
Generated at Thu Jul 18 02:13:04 2024 by rpki-client on console-fra.rpki-client.org