Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC6B020A08F211EE9D74AE204AD9E6FC.roa
File:                     FC6B020A08F211EE9D74AE204AD9E6FC.roa (raw, json)
Hash identifier:          eE+3FZ4279C1KrMTlaW4c0txeycx2LKIyAvqURY7gDQ=
Subject key identifier:   30:56:0D:88:D8:AF:5A:5A:99:FF:91:F1:B2:FB:CB:B2:71:98:6D:2E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       2AFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC6B020A08F211EE9D74AE204AD9E6FC.roa
Signing time:             Mon 12 Jun 2023 07:30:21 +0000
ROA not before:           Mon 12 Jun 2023 07:30:17 +0000
ROA not after:            Sat 25 May 2024 07:30:17 +0000
asID:                     131178
IP address blocks:        45.201.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11003 (0x2afb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 12 07:30:17 2023 GMT
            Not After : May 25 07:30:17 2024 GMT
        Subject: CN=6486c98c-da5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:b2:3d:f1:7f:67:56:54:de:a7:85:f4:d9:
                    ea:04:5a:e3:93:12:18:08:b6:f3:79:74:d9:48:ca:
                    f0:b7:71:52:54:60:72:5a:7c:0b:89:de:71:98:fe:
                    dd:3a:d6:a4:63:d8:3a:1c:af:27:6e:1b:73:e0:b9:
                    69:b8:0c:f4:f1:35:2a:e4:4c:40:bf:1b:07:25:18:
                    09:ed:5e:1c:9d:4d:67:4c:78:f6:b4:e1:1c:51:e6:
                    7b:ed:18:53:e8:55:60:a6:b4:8d:c6:ce:6b:17:fe:
                    ad:80:80:e0:6a:fa:73:a5:bc:cf:b5:ed:6f:8a:01:
                    d9:19:fd:b3:1a:6e:b9:7b:25:28:82:18:c2:3c:fe:
                    9b:f1:a2:c8:8d:2a:67:71:1c:d6:fb:ed:7f:8c:0e:
                    3f:b3:2b:7b:63:b3:21:74:ca:26:30:30:e8:31:86:
                    b7:0c:eb:ef:f5:39:b5:07:7a:9f:48:25:67:3b:95:
                    d4:7b:c9:29:44:22:42:02:45:30:a3:59:60:fd:13:
                    37:5a:00:b8:b6:e0:d2:c1:3a:9c:94:7b:99:92:d0:
                    4a:99:33:05:4e:e7:69:98:ff:f4:00:6a:f3:cf:3a:
                    5c:67:75:12:79:d0:1f:3a:29:f7:44:68:7e:07:38:
                    3b:39:fa:d2:b4:d8:27:1c:73:65:c8:84:d8:59:1f:
                    21:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:56:0D:88:D8:AF:5A:5A:99:FF:91:F1:B2:FB:CB:B2:71:98:6D:2E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC6B020A08F211EE9D74AE204AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:d0:a8:75:77:c5:77:4b:0d:7b:e3:6b:da:1f:e0:67:c2:68:
         74:7c:1e:91:52:46:61:92:c0:8e:90:44:c7:e1:a9:fe:ca:7c:
         0e:17:b6:b1:dd:13:0a:01:99:f6:37:ba:bc:5c:64:51:3b:0f:
         fa:70:9b:1d:b8:91:eb:c8:68:9e:d2:e3:e4:5c:ff:d8:05:62:
         80:de:cf:7d:46:f9:66:f9:3e:85:23:2b:1d:48:42:a9:fd:12:
         e7:20:ed:6d:af:e9:76:5e:ca:bd:64:a0:d4:b6:94:be:34:a6:
         d5:f7:a8:b2:49:4b:b7:ea:51:3d:4d:a4:d0:a7:90:a8:d1:d1:
         0d:ed:15:80:f4:09:f0:9d:cd:61:cc:46:f9:f3:23:71:a2:76:
         88:9b:a4:55:70:8b:46:26:0d:7a:00:18:aa:c9:3b:5d:df:91:
         13:e0:ed:37:94:61:b7:fb:d4:8a:60:ab:bc:23:50:02:f2:93:
         4e:29:fc:40:bc:36:09:54:43:ee:29:b0:66:d2:ea:66:6c:c1:
         e7:cf:34:f5:fb:69:65:10:ec:13:04:3a:12:3a:be:c5:ee:16:
         aa:8b:1c:ef:74:b0:ae:07:cc:35:8c:51:3a:94:35:8b:09:6c:
         89:d4:e1:a1:3d:64:c3:69:f6:44:80:31:41:8a:c3:4c:12:95:
         6c:99:99:78
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICKvswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA2MTIwNzMwMTdaFw0yNDA1MjUwNzMwMTdaMBgxFjAU
BgNVBAMTDTY0ODZjOThjLWRhNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDERLI98X9nVlTep4X02eoEWuOTEhgItvN5dNlIyvC3cVJUYHJafAuJ3nGY
/t061qRj2DocryduG3PguWm4DPTxNSrkTEC/GwclGAntXhydTWdMePa04RxR5nvt
GFPoVWCmtI3GzmsX/q2AgOBq+nOlvM+17W+KAdkZ/bMabrl7JSiCGMI8/pvxosiN
KmdxHNb77X+MDj+zK3tjsyF0yiYwMOgxhrcM6+/1ObUHep9IJWc7ldR7ySlEIkIC
RTCjWWD9EzdaALi24NLBOpyUe5mS0EqZMwVO52mY//QAavPPOlxndRJ50B86KfdE
aH4HODs5+tK02Cccc2XIhNhZHyHTAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUMFYN
iNivWlqZ/5HxsvvLsnGYbS4wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0ZDNkIwMjBBMDhGMjExRUU5RDc0QUUyMDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtyaQwDQYJKoZIhvcNAQELBQAD
ggEBABzQqHV3xXdLDXvja9of4GfCaHR8HpFSRmGSwI6QRMfhqf7KfA4XtrHdEwoB
mfY3urxcZFE7D/pwmx24kevIaJ7S4+Rc/9gFYoDez31G+Wb5PoUjKx1IQqn9Eucg
7W2v6XZeyr1koNS2lL40ptX3qLJJS7fqUT1NpNCnkKjR0Q3tFYD0CfCdzWHMRvnz
I3GidoibpFVwi0YmDXoAGKrJO13fkRPg7TeUYbf71Ipgq7wjUALyk04p/EC8NglU
Q+4psGbS6mZswefPNPX7aWUQ7BMEOhI6vsXuFqqLHO90sK4HzDWMUTqUNYsJbInU
4aE9ZMNp9kSAMUGKw0wSlWyZmXg=
-----END CERTIFICATE-----
Generated at Thu May 2 17:43:01 2024 by rpki-client on console-fra.rpki-client.org