Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/6824A2D6004611EEB9E8E6664AD9E6FC.roa
File:                     6824A2D6004611EEB9E8E6664AD9E6FC.roa (raw, json)
Hash identifier:          /eNM3S/PVFwQF0mDt7Qv6AlyFu8IcIeM1jGIBn/FkBQ=
Subject key identifier:   1A:B5:65:FA:7B:DD:1A:3C:D3:B0:D1:7A:F5:85:98:C6:9A:79:77:89
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       037B
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/6824A2D6004611EEB9E8E6664AD9E6FC.roa
Signing time:             Thu 01 Jun 2023 06:34:49 +0000
ROA not before:           Thu 01 Jun 2023 06:34:43 +0000
ROA not after:            Wed 01 Jun 2033 06:34:43 +0000
asID:                     59895
IP address blocks:        41.216.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891 (0x37b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Jun  1 06:34:43 2023 GMT
            Not After : Jun  1 06:34:43 2033 GMT
        Subject: CN=64783c09-a623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6b:42:0c:33:82:cd:ea:ab:92:48:1f:a3:e1:
                    e2:84:9e:26:86:6e:17:da:51:14:72:30:cb:65:b5:
                    12:62:97:ca:90:ba:9d:da:b9:9f:b1:11:a2:50:09:
                    a6:6d:98:7e:fb:cd:e9:e7:d1:ab:b9:0d:3e:bb:3e:
                    87:79:af:ab:83:20:57:74:59:59:f9:4c:52:25:8e:
                    f4:a6:14:88:d8:c7:10:36:b7:13:7b:f7:7a:4a:fa:
                    e4:c6:6b:de:8f:1d:c2:33:04:4f:fa:02:27:f9:06:
                    ba:d8:a6:e9:28:38:5d:a5:fc:aa:7c:6f:89:05:85:
                    b0:f3:9c:62:6d:76:82:f5:ad:09:cd:13:95:a3:62:
                    7b:51:da:74:08:70:b8:38:50:4a:0e:b2:f8:a5:c2:
                    83:f8:a1:25:7a:a0:b5:48:33:bd:2b:a0:9b:58:fe:
                    8d:af:72:43:9c:c8:22:f2:a9:5d:bc:bb:99:e0:35:
                    03:17:13:0b:b1:b8:89:8d:74:c1:a4:09:79:3d:ee:
                    3b:33:ec:04:4a:e7:b9:7a:82:dd:86:0a:87:3d:85:
                    49:b2:09:78:94:41:32:37:c7:56:c9:c3:84:f5:d9:
                    40:59:bd:d9:04:aa:c9:6f:0a:87:0f:80:e9:69:14:
                    bc:2c:98:06:0e:3a:4c:78:93:8b:4a:ca:d7:04:f8:
                    7a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B5:65:FA:7B:DD:1A:3C:D3:B0:D1:7A:F5:85:98:C6:9A:79:77:89
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/6824A2D6004611EEB9E8E6664AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:42:36:ce:70:36:d9:51:a8:5d:92:d4:56:39:64:f6:fc:a3:
         4a:81:71:41:83:65:87:fd:ec:d9:cf:11:ab:9a:bc:cd:1f:35:
         12:45:61:f8:27:f9:bc:6e:d1:3e:a7:d0:2b:1d:a7:d3:52:bc:
         6a:0d:6f:d6:68:71:cc:65:07:cb:ab:2d:9c:0d:ef:36:9d:58:
         b9:93:ac:6d:af:16:48:37:c7:64:c0:99:93:56:e2:8c:4b:a0:
         24:a3:28:4a:13:5e:da:1a:40:26:1d:1e:ea:1a:77:7b:67:7f:
         60:85:24:fa:72:91:ca:03:45:20:6a:5a:4b:be:23:46:83:bd:
         58:c9:cd:2c:d7:cd:a5:e9:6b:8c:5d:53:7b:bd:07:3e:33:5b:
         43:a7:58:0c:99:d0:34:80:7d:be:38:68:09:9e:3d:f7:bc:ba:
         77:30:3c:69:c3:80:05:b3:c9:78:a6:4f:ac:b3:d5:53:fb:f4:
         d1:03:a3:d0:cc:dc:dc:3d:f3:f8:46:42:2b:83:3f:01:b6:b6:
         56:c5:1b:23:bd:10:50:1e:03:f2:de:42:5e:3f:72:d7:9c:09:
         c4:5f:eb:28:15:26:34:4d:71:29:92:91:2c:f9:bb:fa:3b:97:
         24:3f:12:9c:72:7b:2a:fb:38:cf:5a:dc:c4:f2:01:e2:3e:8f:
         42:ca:de:a2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA3swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OUFGRERBRjExMC8GA1UEBRMoRTdDNjgwMzYwMDI0RURCOUYzNDUxREM5MTNFQTMz
MDU5QkM5MDRBNTAeFw0yMzA2MDEwNjM0NDNaFw0zMzA2MDEwNjM0NDNaMBgxFjAU
BgNVBAMTDTY0NzgzYzA5LWE2MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCia0IMM4LN6quSSB+j4eKEniaGbhfaURRyMMtltRJil8qQup3auZ+xEaJQ
CaZtmH77zenn0au5DT67Pod5r6uDIFd0WVn5TFIljvSmFIjYxxA2txN793pK+uTG
a96PHcIzBE/6Aif5BrrYpukoOF2l/Kp8b4kFhbDznGJtdoL1rQnNE5WjYntR2nQI
cLg4UEoOsvilwoP4oSV6oLVIM70roJtY/o2vckOcyCLyqV28u5ngNQMXEwuxuImN
dMGkCXk97jsz7ARK57l6gt2GCoc9hUmyCXiUQTI3x1bJw4T12UBZvdkEqslvCocP
gOlpFLwsmAYOOkx4k4tKytcE+HqXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUGrVl
+nvdGjzTsNF69YWYxpp5d4kwHwYDVR0jBBgwFoAU58aANgAk7bnzRR3JE+ozBZvJ
BKUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4QUVBMjI4LzU4YUFO
Z0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzU4YUFOZ0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4
QUVBMjI4LzY4MjRBMkQ2MDA0NjExRUVCOUU4RTY2NjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAp2LMwDQYJKoZIhvcNAQEL
BQADggEBALJCNs5wNtlRqF2S1FY5ZPb8o0qBcUGDZYf97NnPEauavM0fNRJFYfgn
+bxu0T6n0Csdp9NSvGoNb9ZoccxlB8urLZwN7zadWLmTrG2vFkg3x2TAmZNW4oxL
oCSjKEoTXtoaQCYdHuoad3tnf2CFJPpykcoDRSBqWku+I0aDvVjJzSzXzaXpa4xd
U3u9Bz4zW0OnWAyZ0DSAfb44aAmePfe8uncwPGnDgAWzyXimT6yz1VP79NEDo9DM
3Nw98/hGQiuDPwG2tlbFGyO9EFAeA/LeQl4/ctecCcRf6ygVJjRNcSmSkSz5u/o7
lyQ/Epxyeyr7OM9a3MTyAeI+j0LK3qI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:17 2024 by rpki-client on console-ams.rpki-client.org