Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C6FC512AE1011EEA6810988775412E6.roa
File:                     8C6FC512AE1011EEA6810988775412E6.roa (raw, json)
Hash identifier:          r6C6nG+J1EdGxesWcFeikcD27UxJrPCnBy4aMOoynqk=
Subject key identifier:   2C:B8:0F:69:63:F7:CB:A0:60:06:34:BE:C7:1F:69:0D:FC:2C:A5:F9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       728E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C6FC512AE1011EEA6810988775412E6.roa
Signing time:             Mon 08 Jan 2024 10:27:39 +0000
ROA not before:           Mon 08 Jan 2024 10:27:36 +0000
ROA not after:            Sun 30 Jun 2024 10:27:36 +0000
asID:                     133748
IP address blocks:        154.197.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29326 (0x728e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  8 10:27:36 2024 GMT
            Not After : Jun 30 10:27:36 2024 GMT
        Subject: CN=659bce1b-8ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:98:85:36:bc:f8:76:69:49:7e:2f:5f:68:57:
                    c9:55:7c:21:0b:a2:87:99:df:ad:34:9f:32:25:ed:
                    dd:8d:2f:eb:39:da:fb:61:99:db:29:c5:1e:95:38:
                    24:68:0b:51:56:73:b2:56:61:6f:07:2c:ac:ef:42:
                    25:e9:73:0d:ac:1a:c3:55:3a:0f:50:f9:b0:2d:9a:
                    03:67:11:4d:6a:76:3a:27:4f:3b:e5:87:bf:1d:1d:
                    73:71:78:8e:0a:b6:1f:6f:fa:a4:a5:79:34:44:d3:
                    41:35:c7:fb:6f:76:7d:83:a7:36:d9:44:0f:5f:0d:
                    5e:19:dd:aa:de:fd:26:95:37:1b:00:0d:81:9f:11:
                    ff:a1:c1:e3:61:ee:73:b1:29:f1:1d:31:e7:1d:6f:
                    47:13:24:e4:5e:75:89:f9:be:7e:a3:b6:d4:83:e8:
                    fd:a4:6f:db:49:a7:44:a2:08:85:68:5a:60:71:20:
                    ec:98:a6:36:ec:37:13:c6:b0:7b:cb:60:2b:43:b4:
                    76:31:2c:8f:e2:f0:60:bb:13:be:ed:ef:c4:23:a1:
                    fd:f6:45:43:80:8d:79:89:2f:82:a3:29:10:15:d0:
                    83:c7:8b:a6:62:02:c5:ea:e9:a7:76:2f:5a:3d:ae:
                    ad:bc:88:9f:7f:ae:88:1d:fe:84:7d:d0:ee:61:13:
                    90:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B8:0F:69:63:F7:CB:A0:60:06:34:BE:C7:1F:69:0D:FC:2C:A5:F9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C6FC512AE1011EEA6810988775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:d3:5b:a7:3d:ef:42:c9:c9:17:78:29:12:f3:fa:cf:2e:54:
         2b:48:b7:36:9f:88:39:5b:0d:5e:67:7a:e8:2d:23:7d:70:0a:
         dd:e8:7d:6a:d1:3f:49:8b:61:57:8b:b0:13:5b:ff:be:b1:a0:
         3a:0a:62:5c:74:32:23:20:18:08:af:52:2e:bd:a3:71:42:67:
         d6:2b:7a:02:4f:7e:e9:a8:4a:bd:43:47:9e:89:c8:00:7c:ec:
         8f:00:fa:62:30:58:61:26:57:a2:99:6f:42:6e:44:4c:6b:d6:
         bb:8b:30:b9:49:e3:58:58:90:83:a5:ae:1e:93:d2:33:2d:07:
         09:f5:63:de:f7:07:1a:b7:b9:98:a2:00:a9:80:eb:ab:cb:4f:
         c0:60:0a:b3:24:a6:09:52:7f:c2:67:6a:95:cb:5e:4b:77:a5:
         97:61:88:3a:f8:0a:a8:d7:c6:1f:a0:a1:9b:f9:b3:84:ed:70:
         e5:09:fb:90:93:7a:86:09:54:50:89:86:85:fb:51:76:da:6b:
         32:9b:2a:36:9b:f0:8a:03:2d:47:d0:80:fe:44:1e:5f:3c:9e:
         2b:7a:72:c9:e7:a5:a5:0e:c3:0a:f2:4c:b3:38:cd:59:f8:5c:
         92:86:e8:f9:8b:4c:c7:fa:55:84:18:11:86:1c:64:d5:2c:0f:
         db:52:93:9a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICco4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yNDAxMDgxMDI3MzZaFw0yNDA2MzAxMDI3MzZaMBgxFjAU
BgNVBAMTDTY1OWJjZTFiLThlZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDnmIU2vPh2aUl+L19oV8lVfCELooeZ3600nzIl7d2NL+s52vthmdspxR6V
OCRoC1FWc7JWYW8HLKzvQiXpcw2sGsNVOg9Q+bAtmgNnEU1qdjonTzvlh78dHXNx
eI4Kth9v+qSleTRE00E1x/tvdn2DpzbZRA9fDV4Z3are/SaVNxsADYGfEf+hweNh
7nOxKfEdMecdb0cTJORedYn5vn6jttSD6P2kb9tJp0SiCIVoWmBxIOyYpjbsNxPG
sHvLYCtDtHYxLI/i8GC7E77t78Qjof32RUOAjXmJL4KjKRAV0IPHi6ZiAsXq6ad2
L1o9rq28iJ9/rogd/oR90O5hE5CRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQULLgP
aWP3y6BgBjS+xx9pDfwspfkwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzhDNkZDNTEyQUUxMDExRUVBNjgxMDk4ODc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaxSkwDQYJKoZIhvcNAQEL
BQADggEBAMfTW6c970LJyRd4KRLz+s8uVCtItzafiDlbDV5neugtI31wCt3ofWrR
P0mLYVeLsBNb/76xoDoKYlx0MiMgGAivUi69o3FCZ9YregJPfumoSr1DR56JyAB8
7I8A+mIwWGEmV6KZb0JuRExr1ruLMLlJ41hYkIOlrh6T0jMtBwn1Y973Bxq3uZii
AKmA66vLT8BgCrMkpglSf8JnapXLXkt3pZdhiDr4CqjXxh+goZv5s4TtcOUJ+5CT
eoYJVFCJhoX7UXbaazKbKjab8IoDLUfQgP5EHl88nit6csnnpaUOwwryTLM4zVn4
XJKG6PmLTMf6VYQYEYYcZNUsD9tSk5o=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:14 2024 by rpki-client on console-ams.rpki-client.org