Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/F17735F8193B11EFBB9B5707017001B1.roa
File:                     F17735F8193B11EFBB9B5707017001B1.roa (raw, json)
Hash identifier:          rP8+XOS2i6Wv+uX+uRO8DnePWvJsxmp6m/QIOOMttEU=
Subject key identifier:   01:2D:31:FC:0C:3C:12:13:32:0D:7E:84:33:AA:E2:F9:7D:45:3F:7C
Certificate issuer:       /CN=F36B9F4BAF/serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
Certificate serial:       076E
Authority key identifier: 98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/F17735F8193B11EFBB9B5707017001B1.roa
Signing time:             Thu 23 May 2024 19:37:52 +0000
ROA not before:           Thu 23 May 2024 19:37:48 +0000
ROA not after:            Sun 31 Dec 2034 19:37:48 +0000
asID:                     36982
IP address blocks:        196.24.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Jun 2024 00:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1902 (0x76e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9F4BAF/serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
        Validity
            Not Before: May 23 19:37:48 2024 GMT
            Not After : Dec 31 19:37:48 2034 GMT
        Subject: CN=664f9b10-49f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:19:3b:1d:56:a1:e3:29:49:d0:4a:28:80:04:
                    a9:c4:9e:18:b8:45:c3:c9:dc:96:cf:69:bf:88:a4:
                    56:1a:54:7b:63:44:16:9a:91:8d:5c:1f:72:72:83:
                    21:06:68:f6:72:48:25:af:8c:39:d4:c9:01:66:f4:
                    3b:c8:56:23:7f:24:73:78:cd:64:f1:79:0d:2b:8b:
                    c6:f7:e6:c4:db:ca:ab:67:66:7e:f7:80:2b:88:67:
                    27:08:11:09:07:53:4a:3f:b1:e9:96:ee:8b:5a:fa:
                    5f:f5:f9:05:f5:e8:f7:a2:d8:4c:da:fd:c1:08:1e:
                    17:c1:ff:10:b7:97:f8:70:c7:28:3f:44:90:d1:c4:
                    ba:21:b4:29:02:7d:5b:f5:5d:38:b9:c5:48:9c:67:
                    fc:ae:4e:9a:6e:7e:84:d2:fa:7b:51:53:d6:92:48:
                    8a:40:84:10:3f:f1:c3:d5:26:6d:ba:e6:60:a5:4e:
                    8c:dc:30:10:2f:13:0a:ee:5c:96:5d:21:dc:5c:ab:
                    32:10:fd:37:3d:8b:35:53:eb:2f:5d:5d:3e:c9:8e:
                    9e:54:2b:b7:80:09:03:b8:99:bc:2f:58:73:79:48:
                    41:c0:34:47:a8:2a:b9:62:19:2c:e7:2f:e2:0a:d9:
                    bb:2f:d4:66:60:6e:b6:fd:01:f4:9b:8a:7b:52:f1:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2D:31:FC:0C:3C:12:13:32:0D:7E:84:33:AA:E2:F9:7D:45:3F:7C
            X509v3 Authority Key Identifier:
                keyid:98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/F17735F8193B11EFBB9B5707017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.24.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0d:8e:fd:6b:11:1d:61:10:ae:53:78:ce:ae:0b:08:d0:40:5e:
         f0:ed:53:7e:9b:dd:a1:47:f1:ec:d7:61:06:79:b3:cc:30:5b:
         d2:a7:11:11:2f:27:03:79:89:40:6a:fc:4d:22:af:ef:9c:81:
         80:47:8a:3a:91:08:3d:68:30:12:8d:06:37:5b:fe:21:25:7b:
         ae:b3:a8:80:33:9b:44:71:0e:9c:3e:e0:21:b7:64:1b:33:00:
         fe:cb:61:c8:d0:7c:c1:4d:2d:12:2a:99:f6:4e:c6:b9:67:77:
         33:5b:12:c3:36:5e:5e:29:d4:18:46:8d:39:d3:45:8c:71:52:
         0b:28:56:83:e5:ae:f8:7e:30:99:20:8d:ae:8f:bc:17:9c:b8:
         c8:ea:22:40:41:4b:d3:58:7a:f8:1e:29:80:a9:27:5e:e3:70:
         68:86:79:45:ba:57:e1:fa:c6:ab:2a:be:55:7e:b1:b5:a9:1f:
         aa:02:47:d3:5c:29:6c:0c:3f:14:4b:0d:89:ef:c9:d6:e8:de:
         dc:d6:3d:29:8a:98:6b:03:73:4c:01:9f:4a:29:97:3c:28:24:
         8d:86:b5:4f:35:c8:92:7e:c4:83:ed:64:2c:72:ae:d3:0f:e3:
         c6:4f:9f:a5:dd:95:30:48:5c:5c:02:3c:b2:c6:21:44:4f:2a:
         da:88:27:be
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB24wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjlGNEJBRjExMC8GA1UEBRMoOTgyMUM4NzIyMUQyNzBCNDJGRjlERDgyNjA0OEI5
OTJDMEUwRTNGODAeFw0yNDA1MjMxOTM3NDhaFw0zNDEyMzExOTM3NDhaMBgxFjAU
BgNVBAMTDTY2NGY5YjEwLTQ5ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWGTsdVqHjKUnQSiiABKnEnhi4RcPJ3JbPab+IpFYaVHtjRBaakY1cH3Jy
gyEGaPZySCWvjDnUyQFm9DvIViN/JHN4zWTxeQ0ri8b35sTbyqtnZn73gCuIZycI
EQkHU0o/semW7ota+l/1+QX16Pei2Eza/cEIHhfB/xC3l/hwxyg/RJDRxLohtCkC
fVv1XTi5xUicZ/yuTppufoTS+ntRU9aSSIpAhBA/8cPVJm265mClTozcMBAvEwru
XJZdIdxcqzIQ/Tc9izVT6y9dXT7Jjp5UK7eACQO4mbwvWHN5SEHANEeoKrliGSzn
L+IK2bsv1GZgbrb9AfSbintS8fJpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUAS0x
/Aw8EhMyDX6EM6ri+X1FP3wwHwYDVR0jBBgwFoAUmCHIciHScLQv+d2CYEi5ksDg
4/gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI5RjRCLzYxQTJFMUEyOERFMDExRTlBQzE0RjYzMkY4QUVBMjI4L21DSElj
aUhTY0xRdi1kMkNZRWk1a3NEZzRfZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL21DSEljaUhTY0xRdi1kMkNZRWk1a3NEZzRfZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkI5RjRCLzYxQTJFMUEyOERFMDExRTlBQzE0RjYzMkY4
QUVBMjI4L0YxNzczNUY4MTkzQjExRUZCQjlCNTcwNzAxNzAwMUIxLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbEGIAwDQYJKoZIhvcNAQEL
BQADggEBAA2O/WsRHWEQrlN4zq4LCNBAXvDtU36b3aFH8ezXYQZ5s8wwW9KnEREv
JwN5iUBq/E0ir++cgYBHijqRCD1oMBKNBjdb/iEle66zqIAzm0RxDpw+4CG3ZBsz
AP7LYcjQfMFNLRIqmfZOxrlndzNbEsM2Xl4p1BhGjTnTRYxxUgsoVoPlrvh+MJkg
ja6PvBecuMjqIkBBS9NYevgeKYCpJ17jcGiGeUW6V+H6xqsqvlV+sbWpH6oCR9Nc
KWwMPxRLDYnvydbo3tzWPSmKmGsDc0wBn0oplzwoJI2GtU81yJJ+xIPtZCxyrtMP
48ZPn6XdlTBIXFwCPLLGIURPKtqIJ74=
-----END CERTIFICATE-----
Generated at Fri Jun 21 01:47:56 2024 by rpki-client on console-ams.rpki-client.org