Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/DE34D0AC7E9411EC8F56DC9E5A40D577.roa
File:                     DE34D0AC7E9411EC8F56DC9E5A40D577.roa (raw, json)
Hash identifier:          Ejkm0DAvDYmzby5n4WAbHpYCi7SXzrDebeQ2YB2KL2o=
Subject key identifier:   2F:B2:DD:B9:D3:68:F9:21:56:2B:31:41:DB:E3:5E:8E:F4:B8:B9:1F
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       0159
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/DE34D0AC7E9411EC8F56DC9E5A40D577.roa
Signing time:             Wed 26 Jan 2022 10:43:59 +0000
ROA not before:           Wed 26 Jan 2022 10:43:55 +0000
ROA not after:            Mon 26 Jan 2032 10:43:55 +0000
asID:                     212738
IP address blocks:        41.216.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Jan 26 10:43:55 2022 GMT
            Not After : Jan 26 10:43:55 2032 GMT
        Subject: CN=61f125ef-c6e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c7:a1:e5:4a:5b:f2:97:4e:43:57:12:6c:ce:
                    44:08:f4:72:8d:59:70:0f:25:b1:19:98:a7:55:44:
                    55:3a:16:93:f2:df:1c:33:c3:83:d2:70:18:03:4c:
                    6f:d9:2d:c8:17:47:14:49:7c:79:62:6c:08:ca:65:
                    c0:af:07:81:0a:ff:88:e9:12:37:3f:b9:a8:d2:38:
                    82:39:74:c4:1e:5f:d6:de:2d:48:46:8a:36:7c:3a:
                    83:35:72:ce:30:f5:c0:15:ce:64:5a:62:37:9b:52:
                    5f:97:92:88:bb:ed:b9:91:0e:1d:74:63:6e:e3:17:
                    09:1f:b7:64:4e:e4:b9:98:4f:50:91:bd:77:3b:32:
                    55:d4:eb:92:78:27:34:86:84:ef:e5:48:64:bb:62:
                    ca:4d:1a:37:49:f7:0e:1e:d8:c4:e8:ea:b0:7d:54:
                    8a:f1:48:4f:24:68:a9:71:48:71:71:fd:6a:fd:4d:
                    39:cc:b2:b4:76:73:72:92:71:22:76:3d:1a:9b:09:
                    06:03:48:d0:04:1a:98:ab:6b:ff:6c:b1:05:0e:8a:
                    a4:77:59:ae:4f:91:79:53:0c:f3:7a:a5:c2:a0:f6:
                    3d:ef:9a:9f:04:79:4a:5e:23:17:dc:8d:43:ab:81:
                    1a:32:42:c9:dd:32:da:bd:23:21:78:34:ee:50:a3:
                    a8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B2:DD:B9:D3:68:F9:21:56:2B:31:41:DB:E3:5E:8E:F4:B8:B9:1F
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/DE34D0AC7E9411EC8F56DC9E5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:13:d5:14:eb:fb:53:20:b7:a7:7e:5a:5e:64:fa:8b:3f:4f:
         f9:4c:03:40:f0:0f:01:41:7d:f9:6d:15:da:d7:88:be:59:56:
         ac:78:f7:d3:56:2d:4b:9a:65:32:66:aa:d4:30:bc:ff:97:0c:
         6c:fc:bf:52:b9:50:09:cf:dc:8c:ab:8a:1c:5b:f7:81:2f:94:
         b8:3f:9c:5e:1b:75:95:f1:86:fb:0b:de:46:17:6e:e8:1b:d3:
         21:c1:db:e3:c0:a6:b1:d9:af:b0:10:76:52:2c:99:5f:dc:40:
         2e:9e:de:58:ab:8e:1d:40:a3:69:f9:69:f6:43:15:ea:fc:31:
         a1:ac:e7:87:58:79:74:5b:b5:82:ee:d5:08:ab:d1:b9:e4:4d:
         0a:93:da:33:c2:3e:5b:cc:60:81:00:73:e9:d3:1e:53:5d:3b:
         1e:4c:6f:ac:b8:03:f5:21:47:58:14:af:c1:83:d5:b5:71:00:
         bb:b3:a4:b9:2a:f2:93:4b:b3:14:3a:9a:2a:57:39:e4:72:bb:
         1e:a5:96:09:d3:80:7e:4b:38:f3:d3:87:1f:5e:fa:e7:1f:0b:
         45:70:e1:4f:c1:24:3b:ad:b8:6f:9e:17:78:6d:1b:17:97:bc:
         2d:1b:5c:35:8e:ea:4a:f4:2a:ae:89:dc:ba:03:06:f9:bb:18:
         f4:f7:29:26
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OUFGRERBRjExMC8GA1UEBRMoRTdDNjgwMzYwMDI0RURCOUYzNDUxREM5MTNFQTMz
MDU5QkM5MDRBNTAeFw0yMjAxMjYxMDQzNTVaFw0zMjAxMjYxMDQzNTVaMBgxFjAU
BgNVBAMMDTYxZjEyNWVmLWM2ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLx6HlSlvyl05DVxJszkQI9HKNWXAPJbEZmKdVRFU6FpPy3xwzw4PScBgD
TG/ZLcgXRxRJfHlibAjKZcCvB4EK/4jpEjc/uajSOII5dMQeX9beLUhGijZ8OoM1
cs4w9cAVzmRaYjebUl+Xkoi77bmRDh10Y27jFwkft2RO5LmYT1CRvXc7MlXU65J4
JzSGhO/lSGS7YspNGjdJ9w4e2MTo6rB9VIrxSE8kaKlxSHFx/Wr9TTnMsrR2c3KS
cSJ2PRqbCQYDSNAEGpira/9ssQUOiqR3Wa5PkXlTDPN6pcKg9j3vmp8EeUpeIxfc
jUOrgRoyQsndMtq9IyF4NO5Qo6gjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUL7Ld
udNo+SFWKzFB2+NejvS4uR8wHwYDVR0jBBgwFoAU58aANgAk7bnzRR3JE+ozBZvJ
BKUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4QUVBMjI4LzU4YUFO
Z0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzU4YUFOZ0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4
QUVBMjI4L0RFMzREMEFDN0U5NDExRUM4RjU2REM5RTVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAp2LAwDQYJKoZIhvcNAQEL
BQADggEBAJMT1RTr+1Mgt6d+Wl5k+os/T/lMA0DwDwFBffltFdrXiL5ZVqx499NW
LUuaZTJmqtQwvP+XDGz8v1K5UAnP3Iyrihxb94EvlLg/nF4bdZXxhvsL3kYXbugb
0yHB2+PAprHZr7AQdlIsmV/cQC6e3lirjh1Ao2n5afZDFer8MaGs54dYeXRbtYLu
1Qir0bnkTQqT2jPCPlvMYIEAc+nTHlNdOx5Mb6y4A/UhR1gUr8GD1bVxALuzpLkq
8pNLsxQ6mipXOeRyux6llgnTgH5LOPPThx9e+ucfC0Vw4U/BJDutuG+eF3htGxeX
vC0bXDWO6kr0Kq6J3LoDBvm7GPT3KSY=
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:09 2024 by rpki-client on console-fra.rpki-client.org