Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960BB/9458ACF6AE6411EC9ED36E905A40D577/87600BFCA51511EF8C97729E762E951A.roa
File:                     87600BFCA51511EF8C97729E762E951A.roa (raw, json)
Hash identifier:          l0SIxuTtkbCjNm/ef0KG6iRqNQnl7lhSTz8BNpsl3nc=
Subject key identifier:   AB:D4:AD:1B:67:27:D4:D2:B2:1F:8D:4C:E4:9D:10:3B:D3:22:4A:71
Certificate issuer:       /CN=F36960BBAF/serialNumber=97A78EBB6EBD8774BF8A8D5D7E8A15AD6454609D
Certificate serial:       03EB
Authority key identifier: 97:A7:8E:BB:6E:BD:87:74:BF:8A:8D:5D:7E:8A:15:AD:64:54:60:9D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l6eOu269h3S_io1dfooVrWRUYJ0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36960BB/9458ACF6AE6411EC9ED36E905A40D577/87600BFCA51511EF8C97729E762E951A.roa
Signing time:             Sun 17 Nov 2024 18:55:36 +0000
ROA not before:           Wed 01 Jan 2025 18:55:32 +0000
ROA not after:            Fri 31 Dec 2027 18:55:32 +0000
asID:                     329035
IP address blocks:        102.216.24.0/24 maxlen: 24
                          2c0f:4c80::/32 maxlen: 32

Validation:               Failed, certificate is not yet valid

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003 (0x3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36960BBAF/serialNumber=97A78EBB6EBD8774BF8A8D5D7E8A15AD6454609D
        Validity
            Not Before: Jan  1 18:55:32 2025 GMT
            Not After : Dec 31 18:55:32 2027 GMT
        Subject: CN=673a3c28-dded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:da:33:ad:9b:6d:5e:06:a0:79:b3:44:aa:0c:
                    96:dd:87:d7:03:fc:f6:5e:c6:12:49:80:6d:19:74:
                    30:76:2f:aa:48:20:b7:55:31:7e:27:26:64:1d:11:
                    bd:50:84:36:44:bf:b4:b0:27:11:2b:72:b7:b3:bd:
                    45:79:8d:8f:6f:95:ba:86:ff:cb:8a:0f:23:74:40:
                    00:1f:bf:45:e1:a8:c9:2a:ac:a5:af:7c:9f:6e:28:
                    5d:a5:5d:0c:45:24:4d:1d:62:39:8c:70:73:07:57:
                    d2:90:04:4e:e4:f0:82:29:e3:73:92:13:6a:ec:9f:
                    0f:cd:c7:69:74:e9:08:96:e5:dd:3c:bd:d3:17:10:
                    96:85:fb:44:04:ca:9b:fc:bc:9b:66:80:c2:fc:8a:
                    9c:26:7d:63:f2:13:f4:85:e5:16:39:6d:f4:12:55:
                    3c:8d:5d:dc:66:c2:d4:2a:8b:b9:29:b8:41:ae:d5:
                    5b:c1:84:7d:40:4c:13:37:e0:df:2c:75:9c:35:29:
                    e3:b8:80:52:ba:7d:33:e3:2c:8b:05:6b:96:6b:f5:
                    5e:c9:60:4b:d4:a2:14:17:ba:bd:c5:6c:00:d8:82:
                    f8:f3:09:4b:ef:bd:1f:cd:19:3a:46:9a:ad:f2:69:
                    33:20:1d:2f:ad:ff:2f:58:dc:3f:d0:a0:5b:19:d9:
                    9c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D4:AD:1B:67:27:D4:D2:B2:1F:8D:4C:E4:9D:10:3B:D3:22:4A:71
            X509v3 Authority Key Identifier:
                keyid:97:A7:8E:BB:6E:BD:87:74:BF:8A:8D:5D:7E:8A:15:AD:64:54:60:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36960BB/9458ACF6AE6411EC9ED36E905A40D577/l6eOu269h3S_io1dfooVrWRUYJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l6eOu269h3S_io1dfooVrWRUYJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960BB/9458ACF6AE6411EC9ED36E905A40D577/87600BFCA51511EF8C97729E762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.24.0/24
                IPv6:
                  2c0f:4c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:be:d8:75:3d:15:57:75:01:8a:13:66:d2:44:88:26:75:1a:
         b7:48:7e:17:e3:78:0d:3b:c6:a0:34:aa:b2:7d:ed:d2:b7:03:
         ef:3d:c8:c6:39:97:93:32:8a:66:f3:8e:f1:3c:cb:f3:65:63:
         79:86:a1:70:76:67:d6:79:59:eb:93:9e:de:d5:72:d3:2f:c6:
         73:9d:ed:d1:47:34:0c:2c:05:5a:ef:f8:15:28:4d:28:07:9d:
         27:d3:fc:68:b3:f4:84:31:1d:e9:c8:68:56:d9:c3:1b:f3:8e:
         30:11:e8:49:4f:af:82:6b:f3:09:12:b7:3e:1f:2b:35:1d:f3:
         95:e2:7b:e0:d2:4a:04:8d:74:4a:fe:6d:7f:60:0a:df:22:39:
         d1:c1:54:1f:3d:c3:8b:bd:bc:9f:54:ef:09:e5:d9:8e:44:1a:
         e9:68:04:fa:12:ce:7a:46:75:2e:cc:e0:4c:e3:e7:f2:14:05:
         b9:bc:02:4d:c0:2f:6d:9d:17:a1:40:51:02:c4:eb:39:f2:fb:
         1b:5e:b9:df:e5:6e:1b:9c:d5:4d:66:90:c1:12:3a:e4:f4:bf:
         a5:5c:ab:2b:95:bc:ad:64:20:c9:ec:f4:8d:90:49:02:25:9c:
         e7:4e:0d:87:f6:30:2a:10:6f:ca:5e:50:d8:61:06:23:db:d4:
         00:1a:7c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----