Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/E469911A873811EF820368B1762E951A.roa
File:                     E469911A873811EF820368B1762E951A.roa (raw, json)
Hash identifier:          qS04r/6eawg5wkoo0hUF/y/Lc2S12pQmIndE2YUbUMw=
Subject key identifier:   FE:49:53:78:47:3E:FE:ED:D7:0E:EA:8E:D5:AF:80:15:0B:24:D0:2F
Certificate issuer:       /CN=F369E201AF/serialNumber=71C64F59BB6BE398D17F0FBE6C5C3C231C4E1578
Certificate serial:       02
Authority key identifier: 71:C6:4F:59:BB:6B:E3:98:D1:7F:0F:BE:6C:5C:3C:23:1C:4E:15:78
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ccZPWbtr45jRfw--bFw8IxxOFXg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/E469911A873811EF820368B1762E951A.roa
Signing time:             Thu 10 Oct 2024 18:53:09 +0000
ROA not before:           Thu 10 Oct 2024 18:53:05 +0000
ROA not after:            Sun 10 Oct 2049 18:53:05 +0000
asID:                     328544
IP address blocks:        102.36.156.0/22 maxlen: 24
                          2c0f:ea78::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ccZPWbtr45jRfw--bFw8IxxOFXg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E201AF/serialNumber=71C64F59BB6BE398D17F0FBE6C5C3C231C4E1578
        Validity
            Not Before: Oct 10 18:53:05 2024 GMT
            Not After : Oct 10 18:53:05 2049 GMT
        Subject: CN=67082295-fa64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:df:66:6f:6f:b2:82:ae:e3:e5:10:76:e4:89:
                    c2:e7:12:f5:83:e9:fb:5e:77:c1:82:74:ea:82:77:
                    68:f9:9b:1f:bf:d5:2c:81:49:50:2a:12:52:de:4a:
                    65:14:03:22:e9:08:0d:84:f2:a4:17:e1:c4:60:89:
                    1d:47:e5:8f:76:8a:89:cd:ec:de:f4:60:2f:c4:6d:
                    08:dc:a9:0d:88:7c:3a:c5:c6:3d:0f:79:48:04:6c:
                    5f:55:90:bd:23:56:43:af:ca:52:e4:e2:30:71:61:
                    22:3f:e6:bd:08:95:a4:9b:b8:83:08:2b:53:ef:3c:
                    65:91:6e:91:30:5a:be:21:a7:4b:c6:e9:23:94:10:
                    01:44:44:a9:28:e6:db:8a:6c:9e:b4:23:75:af:93:
                    41:e8:b6:53:e8:a4:fa:05:35:22:9c:eb:8e:42:ab:
                    68:69:95:13:51:f1:9a:16:ec:fd:6d:a9:24:75:fc:
                    40:0c:fa:73:b5:60:9f:11:93:db:01:17:19:91:3c:
                    0e:8a:99:6d:1d:7f:26:f9:ed:30:6a:45:5f:05:07:
                    db:41:60:0b:b9:cc:61:09:0f:44:23:5a:91:0f:5c:
                    b8:db:00:3b:41:44:58:ba:94:2e:15:31:1c:4f:63:
                    ef:8d:af:f0:9d:28:d0:9c:86:87:23:ae:40:b8:c6:
                    c4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:49:53:78:47:3E:FE:ED:D7:0E:EA:8E:D5:AF:80:15:0B:24:D0:2F
            X509v3 Authority Key Identifier:
                keyid:71:C6:4F:59:BB:6B:E3:98:D1:7F:0F:BE:6C:5C:3C:23:1C:4E:15:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ccZPWbtr45jRfw--bFw8IxxOFXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/E469911A873811EF820368B1762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.36.156.0/22
                IPv6:
                  2c0f:ea78::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:61:83:93:5e:d2:e7:00:26:ab:81:91:b4:92:c5:11:95:6e:
         d8:4e:10:99:f0:01:50:e7:20:b5:f2:66:30:00:a1:57:e1:26:
         3c:e6:89:2a:8d:08:bf:55:10:4d:de:88:da:32:94:d6:f5:ec:
         ba:ba:5f:ff:93:3c:0d:9f:3d:c6:00:45:f8:97:ff:93:82:25:
         f6:7c:69:e3:1e:7a:5b:33:36:17:3c:16:01:0f:b6:61:76:7a:
         02:14:67:1b:6b:be:02:67:7c:71:26:0a:01:41:18:9d:cd:54:
         27:78:57:cf:81:76:e0:4e:73:9c:2c:df:fb:e4:88:ed:35:30:
         18:e0:64:7b:cc:26:7b:6f:f5:6d:fa:c5:07:81:72:4b:da:a3:
         dd:3d:0c:52:2c:8d:b1:1d:58:a7:e1:78:31:00:ed:ab:c6:a1:
         f6:c7:82:88:70:18:c9:c1:a3:c8:bd:ac:e4:8f:d1:e4:e5:8b:
         b8:11:da:43:b2:e6:c3:71:15:5b:c3:be:32:3f:76:53:c6:0f:
         69:af:f7:63:2e:ba:82:ec:f3:be:78:b1:9e:e9:81:28:c3:34:
         c1:31:ff:a5:b5:69:ee:2a:97:94:16:39:c6:07:a2:b7:c4:d4:
         0b:03:df:8f:90:b6:90:de:06:d8:c6:83:22:23:f4:d0:8d:f2:
         10:04:95:c4
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
RTIwMUFGMTEwLwYDVQQFEyg3MUM2NEY1OUJCNkJFMzk4RDE3RjBGQkU2QzVDM0My
MzFDNEUxNTc4MB4XDTI0MTAxMDE4NTMwNVoXDTQ5MTAxMDE4NTMwNVowGDEWMBQG
A1UEAxMNNjcwODIyOTUtZmE2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK/fZm9vsoKu4+UQduSJwucS9YPp+153wYJ06oJ3aPmbH7/VLIFJUCoSUt5K
ZRQDIukIDYTypBfhxGCJHUflj3aKic3s3vRgL8RtCNypDYh8OsXGPQ95SARsX1WQ
vSNWQ6/KUuTiMHFhIj/mvQiVpJu4gwgrU+88ZZFukTBaviGnS8bpI5QQAUREqSjm
24psnrQjda+TQei2U+ik+gU1IpzrjkKraGmVE1Hxmhbs/W2pJHX8QAz6c7VgnxGT
2wEXGZE8DoqZbR1/JvntMGpFXwUH20FgC7nMYQkPRCNakQ9cuNsAO0FEWLqULhUx
HE9j742v8J0o0JyGhyOuQLjGxOkCAwEAAaOCArQwggKwMB0GA1UdDgQWBBT+SVN4
Rz7+7dcO6o7Vr4AVCyTQLzAfBgNVHSMEGDAWgBRxxk9Zu2vjmNF/D75sXDwjHE4V
eDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OUUyMDEvOEJFQzVFOTI4NzM3MTFFRjkxRkQxRkE5NzYyRTk1MUEvY2NaUFdi
dHI0NWpSZnctLWJGdzhJeHhPRlhnLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvY2NaUFdidHI0NWpSZnctLWJGdzhJeHhPRlhnLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUUyMDEvOEJFQzVFOTI4NzM3MTFFRjkxRkQxRkE5NzYy
RTk1MUEvRTQ2OTkxMUE4NzM4MTFFRjgyMDM2OEIxNzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmYknDANBAIAAjAHAwUALA/q
eDANBgkqhkiG9w0BAQsFAAOCAQEAomGDk17S5wAmq4GRtJLFEZVu2E4QmfABUOcg
tfJmMAChV+EmPOaJKo0Iv1UQTd6I2jKU1vXsurpf/5M8DZ89xgBF+Jf/k4Il9nxp
4x56WzM2FzwWAQ+2YXZ6AhRnG2u+Amd8cSYKAUEYnc1UJ3hXz4F24E5znCzf++SI
7TUwGOBke8wme2/1bfrFB4FyS9qj3T0MUiyNsR1Yp+F4MQDtq8ah9seCiHAYycGj
yL2s5I/R5OWLuBHaQ7Lmw3EVW8O+Mj92U8YPaa/3Yy66guzzvnixnumBKMM0wTH/
pbVp7iqXlBY5xgeit8TUCwPfj5C2kN4G2MaDIiP00I3yEASVxA==
-----END CERTIFICATE-----