Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/189309602E9611ED8FED3480F1222468.roa
File:                     189309602E9611ED8FED3480F1222468.roa (raw, json)
Hash identifier:          9thUVnLZZ7EOpFloeIsOWtyUvJheIIw/Jl2bg+WHMIM=
Subject key identifier:   6B:E7:12:7F:2A:6C:C8:6D:64:79:41:86:C9:34:15:0A:BC:B3:12:BB
Certificate issuer:       /CN=F369C632AF/serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Certificate serial:       02
Authority key identifier: 5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/189309602E9611ED8FED3480F1222468.roa
Signing time:             Wed 07 Sep 2022 10:16:11 +0000
ROA not before:           Wed 07 Sep 2022 10:16:08 +0000
ROA not after:            Wed 01 Sep 2049 10:16:08 +0000
asID:                     0
IP address blocks:        196.60.94.0/24 maxlen: 24
                          2001:43f8:1680::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C632AF/serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
        Validity
            Not Before: Sep  7 10:16:08 2022 GMT
            Not After : Sep  1 10:16:08 2049 GMT
        Subject: CN=63186f6b-65b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b4:b1:d2:81:84:ff:9e:48:34:42:c5:33:55:
                    32:c0:4c:d8:36:ec:58:0b:97:a2:60:00:00:68:f4:
                    eb:75:b9:1c:ba:9b:ac:24:90:f0:e5:6e:f7:97:93:
                    48:af:9b:6e:50:c4:a1:06:da:36:d6:de:87:2c:33:
                    c0:71:59:14:45:88:70:2a:5b:a6:98:94:1b:64:8b:
                    d0:61:a9:71:80:38:ac:10:01:7b:6b:92:84:44:2b:
                    d4:89:4e:48:ba:e2:e8:b6:47:c7:ca:8d:d2:c5:a2:
                    9c:e8:91:bc:f0:61:e9:e6:6b:34:81:f7:23:d9:72:
                    5e:fc:1a:83:b8:69:4c:a5:fd:a9:c6:7b:11:f9:35:
                    fe:7f:59:bd:f2:1f:09:df:3e:d9:c4:6c:62:a7:a6:
                    7f:94:98:6b:95:e7:69:27:4b:d5:13:50:77:31:39:
                    45:6c:b6:5e:b1:7c:cb:e4:18:0d:8e:de:2f:9c:34:
                    c9:ed:4b:34:9e:c4:23:6c:f8:17:4d:d9:26:d5:a1:
                    fc:1b:b9:d3:08:c1:9c:d8:3c:6a:53:34:94:ae:b5:
                    62:a3:16:a4:37:ce:bb:64:dd:87:bc:f5:49:eb:52:
                    aa:14:11:bb:a0:d8:0f:e7:76:5a:95:5f:28:94:df:
                    3b:6f:a0:06:1a:9a:1b:05:c2:d1:4b:06:3a:fd:b2:
                    02:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E7:12:7F:2A:6C:C8:6D:64:79:41:86:C9:34:15:0A:BC:B3:12:BB
            X509v3 Authority Key Identifier:
                keyid:5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/189309602E9611ED8FED3480F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.60.94.0/24
                IPv6:
                  2001:43f8:1680::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:9f:b7:8c:d7:27:25:37:58:98:51:aa:3c:d3:b6:fb:8b:2e:
         9e:d6:a8:29:e6:f8:db:2b:9a:63:7b:a5:52:9a:b2:69:a7:71:
         83:d4:16:ce:a4:a7:60:6f:24:64:ec:bf:e2:dd:d0:98:86:8f:
         65:09:59:1f:76:ba:85:68:b1:2b:90:a8:76:d3:ff:bd:f6:eb:
         8e:63:15:36:37:3a:ea:db:08:ea:b4:86:52:ae:aa:fc:01:a4:
         e8:3d:f9:f6:18:82:18:cf:f0:eb:f9:0f:49:d4:32:b7:59:32:
         70:98:da:58:38:47:fc:e3:d7:3a:15:a3:e7:ec:30:fb:ee:2f:
         71:83:9e:b6:bd:b7:4f:24:92:01:d0:86:3a:b0:42:f4:11:48:
         4e:cf:bd:a7:02:1a:77:45:41:34:f8:70:49:80:a1:37:9a:43:
         2f:bc:99:8c:54:32:93:0f:0e:52:e5:43:ec:99:8e:ff:75:b2:
         c3:46:a4:91:4e:e5:d0:c7:49:3e:c4:d0:dd:db:0e:75:25:5a:
         63:00:d3:dc:c6:9e:2d:cc:01:9e:05:4e:d8:7e:77:90:54:9d:
         4b:56:be:f9:a9:a0:8e:c2:2b:09:a3:55:2e:53:4d:9a:a3:bb:
         df:d4:22:47:7b:e7:1c:32:fb:a0:3a:cc:f8:36:5b:36:58:6c:
         29:d4:3d:30
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY5
QzYzMkFGMTEwLwYDVQQFEyg1RjZCMzQxMjE2NjIzRDg1QTc0RjJDRThBNUUyOUI1
RUVBQ0ZBMjUzMB4XDTIyMDkwNzEwMTYwOFoXDTQ5MDkwMTEwMTYwOFowGDEWMBQG
A1UEAwwNNjMxODZmNmItNjViMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO+0sdKBhP+eSDRCxTNVMsBM2DbsWAuXomAAAGj063W5HLqbrCSQ8OVu95eT
SK+bblDEoQbaNtbehywzwHFZFEWIcCpbppiUG2SL0GGpcYA4rBABe2uShEQr1IlO
SLri6LZHx8qN0sWinOiRvPBh6eZrNIH3I9lyXvwag7hpTKX9qcZ7Efk1/n9ZvfIf
Cd8+2cRsYqemf5SYa5XnaSdL1RNQdzE5RWy2XrF8y+QYDY7eL5w0ye1LNJ7EI2z4
F03ZJtWh/Bu50wjBnNg8alM0lK61YqMWpDfOu2Tdh7z1SetSqhQRu6DYD+d2WpVf
KJTfO2+gBhqaGwXC0UsGOv2yAqkCAwEAAaOCArYwggKyMB0GA1UdDgQWBBRr5xJ/
KmzIbWR5QYbJNBUKvLMSuzAfBgNVHSMEGDAWgBRfazQSFmI9hadPLOil4pte6s+i
UzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OUM2MzIvMzY0QzRGRjgyRTk1MTFFREE2NTlCQjdERjEyMjI0NjgvWDJzMEVo
WmlQWVduVHl6b3BlS2JYdXJQb2xNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWDJzMEVoWmlQWVduVHl6b3BlS2JYdXJQb2xNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUM2MzIvMzY0QzRGRjgyRTk1MTFFREE2NTlCQjdERjEy
MjI0NjgvMTg5MzA5NjAyRTk2MTFFRDhGRUQzNDgwRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMQ8XjAPBAIAAjAJAwcAIAFD
+BaAMA0GCSqGSIb3DQEBCwUAA4IBAQCxn7eM1yclN1iYUao807b7iy6e1qgp5vjb
K5pje6VSmrJpp3GD1BbOpKdgbyRk7L/i3dCYho9lCVkfdrqFaLErkKh20/+99uuO
YxU2Nzrq2wjqtIZSrqr8AaToPfn2GIIYz/Dr+Q9J1DK3WTJwmNpYOEf849c6FaPn
7DD77i9xg562vbdPJJIB0IY6sEL0EUhOz72nAhp3RUE0+HBJgKE3mkMvvJmMVDKT
Dw5S5UPsmY7/dbLDRqSRTuXQx0k+xNDd2w51JVpjANPcxp4tzAGeBU7YfneQVJ1L
Vr75qaCOwisJo1UuU02ao7vf1CJHe+ccMvugOsz4Nls2WGwp1D0w
-----END CERTIFICATE-----
Generated at Fri Mar 29 03:24:57 2024 by rpki-client on console-ams.rpki-client.org