Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9976DAFAD9BF11EDAEC16D0A306D8C1D.roa
File:                     9976DAFAD9BF11EDAEC16D0A306D8C1D.roa (raw, json)
Hash identifier:          Im3eGBOjnfqOlw6rddug6ZyDK8vbE9+BR3SumuaLB0U=
Subject key identifier:   17:DA:6E:CB:7E:23:9A:43:8B:8F:5F:3A:38:B2:57:00:BB:C1:11:46
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0D52
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9976DAFAD9BF11EDAEC16D0A306D8C1D.roa
Signing time:             Thu 13 Apr 2023 05:54:06 +0000
ROA not before:           Thu 13 Apr 2023 05:54:01 +0000
ROA not after:            Tue 15 Apr 2025 05:54:01 +0000
asID:                     206505
IP address blocks:        154.16.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 21 Jul 2023 00:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3410 (0xd52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Apr 13 05:54:01 2023 GMT
            Not After : Apr 15 05:54:01 2025 GMT
        Subject: CN=643798fd-8014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1c:8b:94:5f:52:bb:2b:8d:68:58:0f:08:8d:
                    86:df:3a:4d:02:5a:9f:20:9a:b5:e6:57:b0:dd:07:
                    9e:8d:1a:2e:bb:14:5a:3a:cd:ea:2b:9c:c2:fa:52:
                    a8:02:56:98:f2:d8:17:be:b4:81:d4:07:45:dc:85:
                    b5:31:81:0b:5e:4c:57:46:d7:ea:83:0c:cb:04:50:
                    a2:9a:ae:2d:1e:35:d3:44:e0:94:b9:91:a8:11:17:
                    e3:02:c5:ca:56:ac:e3:ba:c6:7c:8c:b9:95:bf:2b:
                    f6:7a:3f:b6:a3:ca:ec:37:fa:a7:e3:03:c7:d2:34:
                    cd:65:ee:ab:18:21:83:cc:35:6d:38:41:ba:f6:c8:
                    d1:15:25:55:90:2d:89:0b:08:c0:06:5d:a1:9b:07:
                    87:59:5f:3a:04:01:49:25:8d:c1:e6:3a:6e:7f:39:
                    ba:b5:98:b3:45:05:14:95:31:89:22:d2:a4:a4:4b:
                    c2:7e:c1:51:1c:83:ac:b9:5d:61:41:86:88:6e:4e:
                    ea:88:7a:80:c2:b6:9a:49:1f:41:e0:4b:a0:f3:aa:
                    cf:dc:e5:96:ae:ae:7d:a1:65:86:2c:23:ae:c8:35:
                    ca:e8:48:bb:fa:07:19:93:25:d9:42:3a:da:f5:e4:
                    67:6d:3d:00:4f:62:29:5b:9d:d6:5e:e2:ca:35:91:
                    c8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DA:6E:CB:7E:23:9A:43:8B:8F:5F:3A:38:B2:57:00:BB:C1:11:46
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9976DAFAD9BF11EDAEC16D0A306D8C1D.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:1f:e0:a3:e9:43:d6:6f:e3:3e:4d:70:94:e4:45:9f:b7:47:
         44:07:8a:5f:ac:56:4b:41:8d:8c:32:1b:16:61:db:15:8d:e1:
         4e:04:9f:ae:45:28:fa:cc:fb:27:57:6c:bc:2b:00:00:ea:2e:
         11:27:f2:52:94:81:96:79:80:32:aa:96:cc:da:70:b8:09:d9:
         7a:a3:4e:51:2e:c0:b0:58:29:2a:74:70:be:7e:28:59:e6:37:
         8a:8b:f3:a2:4f:f5:b9:1b:e3:a5:fe:34:23:c8:cb:ba:e1:95:
         0e:35:a0:cf:5d:e1:23:08:ce:df:09:3c:52:6d:9d:6a:44:1c:
         6c:ca:55:e6:d7:53:f8:ed:29:e3:af:78:04:b7:ae:3d:50:db:
         0e:65:c4:0e:9b:9e:d7:0d:89:4d:ba:5a:67:2b:eb:97:e4:2b:
         30:a9:82:2b:54:7a:7b:e1:cc:6a:e9:e4:a1:c0:e5:67:cc:d1:
         42:8f:85:bb:d7:ac:35:0e:f8:de:ab:97:aa:7f:41:ff:25:0c:
         66:4c:20:d0:a4:cf:f3:f4:ee:9c:f2:56:8f:ba:b4:8d:c3:48:
         b5:64:da:0f:06:17:8e:a9:2c:82:ce:51:bb:38:ed:cf:c7:35:
         23:5e:be:ef:70:4b:11:58:f5:8a:23:d1:ec:6a:6c:c5:02:cf:
         ce:cd:50:f1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDVIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA0MTMwNTU0MDFaFw0yNTA0MTUwNTU0MDFaMBgxFjAU
BgNVBAMMDTY0Mzc5OGZkLTgwMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDeHIuUX1K7K41oWA8IjYbfOk0CWp8gmrXmV7DdB56NGi67FFo6zeornML6
UqgCVpjy2Be+tIHUB0XchbUxgQteTFdG1+qDDMsEUKKari0eNdNE4JS5kagRF+MC
xcpWrOO6xnyMuZW/K/Z6P7ajyuw3+qfjA8fSNM1l7qsYIYPMNW04Qbr2yNEVJVWQ
LYkLCMAGXaGbB4dZXzoEAUkljcHmOm5/Obq1mLNFBRSVMYki0qSkS8J+wVEcg6y5
XWFBhohuTuqIeoDCtppJH0HgS6Dzqs/c5Zaurn2hZYYsI67INcroSLv6BxmTJdlC
Otr15GdtPQBPYilbndZe4so1kcibAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUF9pu
y34jmkOLj186OLJXALvBEUYwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4Lzk5NzZEQUZBRDlCRjExRURBRUMxNkQwQTMwNkQ4QzFELnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEPowDQYJKoZIhvcNAQEL
BQADggEBAMYf4KPpQ9Zv4z5NcJTkRZ+3R0QHil+sVktBjYwyGxZh2xWN4U4En65F
KPrM+ydXbLwrAADqLhEn8lKUgZZ5gDKqlszacLgJ2XqjTlEuwLBYKSp0cL5+KFnm
N4qL86JP9bkb46X+NCPIy7rhlQ41oM9d4SMIzt8JPFJtnWpEHGzKVebXU/jtKeOv
eAS3rj1Q2w5lxA6bntcNiU26Wmcr65fkKzCpgitUenvhzGrp5KHA5WfM0UKPhbvX
rDUO+N6rl6p/Qf8lDGZMINCkz/P07pzyVo+6tI3DSLVk2g8GF46pLILOUbs47c/H
NSNevu9wSxFY9Yoj0exqbMUCz87NUPE=
-----END CERTIFICATE-----