Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/980841C8552011ED87F22186F1222468.roa
File:                     980841C8552011ED87F22186F1222468.roa (raw, json)
Hash identifier:          XZsVafRJ2D/mreyh5jWS78jgc2kDSwu4blwYDuIWA9A=
Subject key identifier:   6B:20:70:93:FB:2A:66:AC:B4:3E:2F:5C:ED:54:D9:26:5C:55:24:AF
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0A5E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/980841C8552011ED87F22186F1222468.roa
Signing time:             Wed 26 Oct 2022 11:23:20 +0000
ROA not before:           Wed 26 Oct 2022 11:23:16 +0000
ROA not after:            Sun 27 Oct 2024 11:23:16 +0000
asID:                     212238
IP address blocks:        154.16.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 10 May 2024 00:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2654 (0xa5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct 26 11:23:16 2022 GMT
            Not After : Oct 27 11:23:16 2024 GMT
        Subject: CN=635918a8-0bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a6:b5:03:4e:2c:59:73:93:91:9c:62:ce:63:
                    17:ee:2f:4e:96:0c:89:ac:70:31:4d:f2:3e:c2:93:
                    6d:87:51:47:6e:0f:9c:1e:38:ff:4f:d3:3a:58:4a:
                    fd:87:26:a9:6d:70:e6:14:18:45:23:f9:36:36:86:
                    10:ef:d5:8f:76:55:67:63:7f:d5:74:68:b4:5a:95:
                    75:b6:a7:f0:53:04:b4:ef:6f:48:bb:53:fe:1f:00:
                    3d:67:eb:72:8e:81:ed:5c:b6:ea:b4:f6:f9:6d:c6:
                    a8:e1:20:ce:60:4a:a7:e7:4e:91:d6:be:03:f8:37:
                    eb:21:c4:3f:9b:e0:e9:7c:80:3d:93:b2:2e:13:1a:
                    e8:37:9b:e7:8b:c1:6b:31:0f:bc:ac:3b:7a:ee:d3:
                    de:ac:00:d8:e7:71:92:bc:51:a9:a9:02:c8:f9:10:
                    e9:83:f0:8f:b7:d0:cc:3f:8e:6a:49:03:a7:ab:2d:
                    dc:31:24:1b:44:12:1c:79:bd:5f:f3:60:1c:bf:99:
                    2d:05:a7:21:eb:10:3e:de:33:c7:0b:59:59:33:77:
                    7c:6a:3f:43:bc:b7:ee:1c:76:f2:b4:d4:32:7d:2f:
                    c6:a5:d1:95:6c:d4:0d:4f:4d:33:d3:81:ed:98:5a:
                    1c:b7:0a:42:ad:e6:ed:f6:45:5c:ac:4b:1d:46:15:
                    24:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:20:70:93:FB:2A:66:AC:B4:3E:2F:5C:ED:54:D9:26:5C:55:24:AF
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/980841C8552011ED87F22186F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:bc:8d:ca:68:2b:c6:96:67:0f:0b:05:00:dd:68:db:68:37:
         63:a5:f1:fa:bf:60:bf:7c:3e:b5:1f:83:d6:f9:4f:69:5f:a5:
         df:c4:e0:27:02:0b:c7:83:29:50:da:fb:a4:0e:0b:85:8d:1a:
         e1:33:05:5a:e7:83:7c:c2:ba:89:56:6b:33:7e:d8:aa:97:1c:
         86:cd:fe:d1:20:fc:3a:a8:1f:de:67:54:7d:6a:e0:cf:4f:0c:
         ec:f5:e2:87:56:59:e1:04:c6:7d:78:fa:d3:3b:4f:48:80:0f:
         61:e4:36:f4:46:08:2e:5c:04:94:5b:6b:41:f1:29:82:6c:c1:
         12:35:47:57:f1:cc:2e:e8:43:34:6b:19:0e:7a:3c:5a:c1:62:
         97:52:48:c2:b9:45:83:97:a9:45:26:0d:fc:53:1f:37:0f:6c:
         74:e2:9a:72:1c:1a:6f:44:7c:d7:70:40:2b:b4:c1:36:3c:58:
         ac:cc:5f:55:b8:2d:e1:9a:8f:8f:0e:33:93:5b:3a:8a:bd:84:
         64:c2:d8:45:f6:34:d4:61:5a:8d:02:5a:bc:01:da:05:d4:4a:
         84:73:bf:2b:b8:bc:c9:5d:97:dd:4a:86:de:03:94:54:38:bb:
         96:44:f3:a7:2e:9b:a5:e6:8c:5d:57:74:c8:2a:3a:48:d7:c2:
         af:0a:9a:af
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCl4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjEwMjYxMTIzMTZaFw0yNDEwMjcxMTIzMTZaMBgxFjAU
BgNVBAMMDTYzNTkxOGE4LTBiYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsprUDTixZc5ORnGLOYxfuL06WDImscDFN8j7Ck22HUUduD5weOP9P0zpY
Sv2HJqltcOYUGEUj+TY2hhDv1Y92VWdjf9V0aLRalXW2p/BTBLTvb0i7U/4fAD1n
63KOge1ctuq09vltxqjhIM5gSqfnTpHWvgP4N+shxD+b4Ol8gD2Tsi4TGug3m+eL
wWsxD7ysO3ru096sANjncZK8UampAsj5EOmD8I+30Mw/jmpJA6erLdwxJBtEEhx5
vV/zYBy/mS0FpyHrED7eM8cLWVkzd3xqP0O8t+4cdvK01DJ9L8al0ZVs1A1PTTPT
ge2YWhy3CkKt5u32RVysSx1GFSSRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUayBw
k/sqZqy0Pi9c7VTZJlxVJK8wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4Lzk4MDg0MUM4NTUyMDExRUQ4N0YyMjE4NkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEMUwDQYJKoZIhvcNAQEL
BQADggEBABG8jcpoK8aWZw8LBQDdaNtoN2Ol8fq/YL98PrUfg9b5T2lfpd/E4CcC
C8eDKVDa+6QOC4WNGuEzBVrng3zCuolWazN+2KqXHIbN/tEg/DqoH95nVH1q4M9P
DOz14odWWeEExn14+tM7T0iAD2HkNvRGCC5cBJRba0HxKYJswRI1R1fxzC7oQzRr
GQ56PFrBYpdSSMK5RYOXqUUmDfxTHzcPbHTimnIcGm9EfNdwQCu0wTY8WKzMX1W4
LeGaj48OM5NbOoq9hGTC2EX2NNRhWo0CWrwB2gXUSoRzvyu4vMldl91Kht4DlFQ4
u5ZE86cum6XmjF1XdMgqOkjXwq8Kmq8=
-----END CERTIFICATE-----
Generated at Wed May 8 02:09:00 2024 by rpki-client on console-ams.rpki-client.org