Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/6AE7FF2E03B311EF903F510C017001B1.roa
File:                     6AE7FF2E03B311EF903F510C017001B1.roa (raw, json)
Hash identifier:          3kqijSi8P/0vf9KQNjB81BG7B4/nyk3Ow12xYdd94Dg=
Subject key identifier:   0E:B5:56:21:FF:C5:8C:4D:59:F0:6C:1D:07:C7:4B:96:9B:B9:11:37
Certificate issuer:       /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial:       01C5
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/6AE7FF2E03B311EF903F510C017001B1.roa
Signing time:             Fri 26 Apr 2024 09:57:40 +0000
ROA not before:           Fri 26 Apr 2024 09:57:37 +0000
ROA not after:            Thu 30 Apr 2043 09:57:37 +0000
asID:                     30988
IP address blocks:        196.200.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 May 2024 00:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
        Validity
            Not Before: Apr 26 09:57:37 2024 GMT
            Not After : Apr 30 09:57:37 2043 GMT
        Subject: CN=662b7a94-1214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dd:89:06:9e:74:6c:0d:06:e2:10:06:98:c5:
                    c8:8e:11:dc:b6:f9:a6:f8:a0:09:26:6d:7c:a2:0e:
                    ab:42:26:2d:4e:a6:99:9d:01:e3:73:4a:dd:bd:a2:
                    81:b5:e9:91:de:87:ea:9f:45:3f:11:fc:ff:c6:f1:
                    c2:cf:f3:c1:57:7d:f0:e1:a1:56:b7:1a:77:f3:31:
                    e5:76:81:6c:f8:f1:24:d8:8b:0d:34:b4:6c:d2:4d:
                    ca:10:8f:42:6f:af:76:f9:b8:b7:f5:08:c9:3a:e3:
                    64:2f:d0:ec:39:8c:fd:4f:cb:f4:e6:35:7b:63:c4:
                    e7:91:2d:71:12:72:f1:f8:7b:2a:22:aa:ae:e9:bd:
                    2b:58:99:ac:d2:23:9c:08:2f:b2:87:c3:cb:d2:f9:
                    c6:3c:38:9f:76:ba:f0:ad:55:8a:a7:8f:15:22:ae:
                    88:e7:1c:7b:ac:a8:f5:1f:32:e7:f8:ef:63:20:af:
                    d2:1a:4d:7a:d0:64:fa:ad:d4:b6:76:0d:39:0f:51:
                    18:82:c2:0f:9b:9d:fc:68:d8:67:bf:b8:c8:26:fa:
                    03:e4:d4:c1:07:64:91:6a:50:ad:24:38:81:25:2f:
                    c2:50:99:18:c4:eb:2a:9b:db:b7:10:55:93:83:73:
                    1d:15:08:09:b6:e5:d6:3a:16:66:1d:c3:3e:02:5a:
                    26:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B5:56:21:FF:C5:8C:4D:59:F0:6C:1D:07:C7:4B:96:9B:B9:11:37
            X509v3 Authority Key Identifier:
                keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/6AE7FF2E03B311EF903F510C017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.200.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:e3:6c:c5:af:d4:4c:6d:c1:c9:98:14:12:79:7c:fc:1c:d4:
         b5:97:c8:20:ff:70:a9:24:b4:26:b0:4d:e0:fc:51:1c:8b:ec:
         2f:ef:37:8c:93:f5:63:0f:e3:4b:25:52:24:12:b9:79:fb:b7:
         00:93:55:ee:9f:5d:05:fd:5e:0c:7c:fe:89:d4:68:9a:70:dd:
         80:f3:d5:0b:1f:92:d4:5a:af:8d:4e:68:86:d8:6b:d5:45:91:
         27:ff:24:f7:0e:9a:0b:23:88:7e:5d:91:40:e5:84:a2:f4:e7:
         df:85:65:a3:fd:9b:d4:91:9e:58:b8:9c:0c:83:81:9f:67:99:
         b9:78:07:d4:3c:03:58:74:8c:d9:1a:76:42:f3:42:2e:33:15:
         88:d4:30:08:57:6b:a4:44:07:b2:23:87:3f:d1:bf:2b:2c:ce:
         37:dd:35:3c:66:a6:0b:bf:1a:1f:aa:d3:83:52:50:a2:6e:75:
         b5:2b:aa:5d:1e:47:c4:cd:06:33:c1:77:f9:77:c0:c9:c4:36:
         14:1d:2f:11:63:8a:eb:5a:55:4a:1c:a1:36:3a:04:76:ae:e6:
         43:95:e9:37:d3:54:b2:84:1f:20:51:7f:92:f3:71:b1:12:8a:
         67:66:61:92:2f:d3:b7:d6:7c:d4:74:6c:dd:34:49:dd:4a:74:
         d8:e2:e6:f7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OURCNUVBRjExMC8GA1UEBRMoRDNFMkUwQkNFQjYxRkI5QzQ1Mjc4MjZFNjEwRDQ2
NzY5OUQ2M0UxNDAeFw0yNDA0MjYwOTU3MzdaFw00MzA0MzAwOTU3MzdaMBgxFjAU
BgNVBAMTDTY2MmI3YTk0LTEyMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCp3YkGnnRsDQbiEAaYxciOEdy2+ab4oAkmbXyiDqtCJi1OppmdAeNzSt29
ooG16ZHeh+qfRT8R/P/G8cLP88FXffDhoVa3GnfzMeV2gWz48STYiw00tGzSTcoQ
j0Jvr3b5uLf1CMk642Qv0Ow5jP1Py/TmNXtjxOeRLXEScvH4eyoiqq7pvStYmazS
I5wIL7KHw8vS+cY8OJ92uvCtVYqnjxUirojnHHusqPUfMuf472Mgr9IaTXrQZPqt
1LZ2DTkPURiCwg+bnfxo2Ge/uMgm+gPk1MEHZJFqUK0kOIElL8JQmRjE6yqb27cQ
VZODcx0VCAm25dY6FmYdwz4CWiZrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUDrVW
If/FjE1Z8GwdB8dLlpu5ETcwHwYDVR0jBBgwFoAU0+LgvOth+5xFJ4JuYQ1GdpnW
PhQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlEQjVFL0QxRUE1OTE0QkYzMTExRURBN0U3MTdEMEYxMjIyNDY4LzAtTGd2
T3RoLTV4Rko0SnVZUTFHZHBuV1BoUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzAtTGd2T3RoLTV4Rko0SnVZUTFHZHBuV1BoUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlEQjVFL0QxRUE1OTE0QkYzMTExRURBN0U3MTdEMEYx
MjIyNDY4LzZBRTdGRjJFMDNCMzExRUY5MDNGNTEwQzAxNzAwMUIxLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADEyHMwDQYJKoZIhvcNAQEL
BQADggEBAC3jbMWv1ExtwcmYFBJ5fPwc1LWXyCD/cKkktCawTeD8URyL7C/vN4yT
9WMP40slUiQSuXn7twCTVe6fXQX9Xgx8/onUaJpw3YDz1QsfktRar41OaIbYa9VF
kSf/JPcOmgsjiH5dkUDlhKL059+FZaP9m9SRnli4nAyDgZ9nmbl4B9Q8A1h0jNka
dkLzQi4zFYjUMAhXa6REB7Ijhz/RvysszjfdNTxmpgu/Gh+q04NSUKJudbUrql0e
R8TNBjPBd/l3wMnENhQdLxFjiutaVUocoTY6BHau5kOV6TfTVLKEHyBRf5LzcbES
imdmYZIv07fWfNR0bN00Sd1KdNji5vc=
-----END CERTIFICATE-----
Generated at Tue May 21 02:53:20 2024 by rpki-client on console-fra.rpki-client.org