Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/DD91CC887EB011ECA94A696F5A40D577.roa
File:                     DD91CC887EB011ECA94A696F5A40D577.roa (raw, json)
Hash identifier:          5onVcD6rU+U5kC2oY8/5fS1zI4a1bB9OMFKRQ49T6s0=
Subject key identifier:   25:DC:22:F0:67:E6:40:6A:CE:E9:74:3F:C2:33:C3:FB:6F:3E:64:BF
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       015F
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/DD91CC887EB011ECA94A696F5A40D577.roa
Signing time:             Wed 26 Jan 2022 14:04:24 +0000
ROA not before:           Wed 26 Jan 2022 14:04:19 +0000
ROA not after:            Mon 26 Jan 2032 14:04:19 +0000
asID:                     213035
IP address blocks:        41.216.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 11:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Jan 26 14:04:19 2022 GMT
            Not After : Jan 26 14:04:19 2032 GMT
        Subject: CN=61f154e8-70c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:78:3b:8a:de:b7:d4:ea:b7:1c:0b:71:c2:
                    75:c2:d9:8b:2d:18:52:98:f6:cd:c1:79:5e:94:97:
                    25:bf:38:0e:f7:52:be:24:6b:22:83:34:6f:69:e2:
                    fe:3f:7d:45:91:b7:b6:5e:f7:5b:2d:9d:14:82:73:
                    7d:4f:1b:8c:99:be:ee:0f:48:0d:9b:90:67:fb:51:
                    ba:2c:63:b2:d5:b3:5a:ff:e0:fe:d4:2e:6f:62:de:
                    fd:67:9d:a3:58:14:c3:47:c2:18:ce:27:94:12:2c:
                    84:c5:76:19:1e:a9:41:c6:5c:7e:eb:97:26:60:72:
                    b2:20:6e:02:16:fc:b2:c4:20:ee:c8:93:b9:db:32:
                    0e:4d:2a:a4:6a:a2:3d:fe:d9:6d:67:73:48:d8:07:
                    bc:eb:7a:ca:52:02:09:4e:b9:80:1f:01:37:46:56:
                    77:35:74:95:08:38:1c:25:0a:88:c3:46:4d:2a:40:
                    25:84:b5:d3:dc:28:5a:af:84:9c:18:d4:9e:ac:44:
                    c9:59:6d:ef:ca:67:ac:ea:1e:a4:12:75:12:97:9b:
                    58:9f:94:f1:2f:26:c2:73:f8:ea:19:23:91:44:94:
                    86:06:00:74:ab:bd:61:e5:d1:42:a1:8f:af:36:69:
                    5b:46:f7:65:ad:ca:5a:91:8f:44:4c:c3:6e:00:96:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DC:22:F0:67:E6:40:6A:CE:E9:74:3F:C2:33:C3:FB:6F:3E:64:BF
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/DD91CC887EB011ECA94A696F5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:98:c3:ba:c6:64:0d:34:7f:32:2a:9c:75:13:d9:bc:4f:b5:
         95:84:0c:fb:30:b8:52:63:27:5b:7b:4b:04:af:90:34:6d:57:
         46:66:1c:de:9c:4b:72:17:4e:1b:7b:c3:8a:58:fc:0b:6c:3c:
         b9:1c:bb:a2:83:ba:28:83:12:32:1a:6b:1b:bd:eb:54:fa:9c:
         99:e3:a5:33:89:bc:58:29:bd:28:36:35:5e:59:ae:47:46:86:
         18:fa:74:59:7e:4a:ce:18:d6:66:21:23:de:2e:24:b2:38:1f:
         ac:ee:25:bf:e8:ae:79:d5:26:6b:d2:61:54:da:18:f7:f9:f7:
         9e:da:e5:50:02:26:45:aa:5a:ba:59:bd:23:3a:98:09:f9:52:
         0c:78:cd:f2:84:86:97:68:ef:67:db:b4:ce:fc:c5:55:8e:09:
         12:c2:e5:55:0e:f5:9b:82:4c:18:64:46:e4:bd:8f:c7:d9:23:
         12:5c:2a:8d:51:a6:45:bf:16:ae:1d:16:e9:f0:4c:52:42:21:
         a2:55:d9:b0:b1:b5:20:f8:11:ea:bc:86:b0:45:fe:48:c9:bc:
         29:0c:38:6b:ad:a0:e3:c6:d7:94:3d:55:b4:ef:b1:99:be:ce:
         7b:25:af:f7:5e:a5:f8:d5:b0:8e:73:d4:55:7d:bc:80:b1:47:
         02:42:16:25
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OUFGRERBRjExMC8GA1UEBRMoRTdDNjgwMzYwMDI0RURCOUYzNDUxREM5MTNFQTMz
MDU5QkM5MDRBNTAeFw0yMjAxMjYxNDA0MTlaFw0zMjAxMjYxNDA0MTlaMBgxFjAU
BgNVBAMMDTYxZjE1NGU4LTcwYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwq3g7it631Oq3HAtxwnXC2YstGFKY9s3BeV6UlyW/OA73Ur4kayKDNG9p
4v4/fUWRt7Ze91stnRSCc31PG4yZvu4PSA2bkGf7UbosY7LVs1r/4P7ULm9i3v1n
naNYFMNHwhjOJ5QSLITFdhkeqUHGXH7rlyZgcrIgbgIW/LLEIO7Ik7nbMg5NKqRq
oj3+2W1nc0jYB7zrespSAglOuYAfATdGVnc1dJUIOBwlCojDRk0qQCWEtdPcKFqv
hJwY1J6sRMlZbe/KZ6zqHqQSdRKXm1iflPEvJsJz+OoZI5FElIYGAHSrvWHl0UKh
j682aVtG92WtylqRj0RMw24Alp+FAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUJdwi
8GfmQGrO6XQ/wjPD+28+ZL8wHwYDVR0jBBgwFoAU58aANgAk7bnzRR3JE+ozBZvJ
BKUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4QUVBMjI4LzU4YUFO
Z0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzU4YUFOZ0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4
QUVBMjI4L0REOTFDQzg4N0VCMDExRUNBOTRBNjk2RjVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAp2LUwDQYJKoZIhvcNAQEL
BQADggEBALKYw7rGZA00fzIqnHUT2bxPtZWEDPswuFJjJ1t7SwSvkDRtV0ZmHN6c
S3IXTht7w4pY/AtsPLkcu6KDuiiDEjIaaxu961T6nJnjpTOJvFgpvSg2NV5ZrkdG
hhj6dFl+Ss4Y1mYhI94uJLI4H6zuJb/ornnVJmvSYVTaGPf5957a5VACJkWqWrpZ
vSM6mAn5Ugx4zfKEhpdo72fbtM78xVWOCRLC5VUO9ZuCTBhkRuS9j8fZIxJcKo1R
pkW/Fq4dFunwTFJCIaJV2bCxtSD4Eeq8hrBF/kjJvCkMOGutoOPG15Q9VbTvsZm+
znslr/depfjVsI5z1FV9vICxRwJCFiU=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:18:13 2024 by rpki-client on console-ams.rpki-client.org