Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/FBD8F91C315911ED857E3ED8F1222468.roa
File:                     FBD8F91C315911ED857E3ED8F1222468.roa (raw, json)
Hash identifier:          F3tjPa1GVDjVxl63DkFUkmny30YoZBaG3q0D655v1oc=
Subject key identifier:   C7:85:08:1B:12:BF:5B:C2:82:C8:82:FA:40:DD:5E:B8:56:26:43:B1
Certificate issuer:       /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial:       72
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/FBD8F91C315911ED857E3ED8F1222468.roa
Signing time:             Sat 10 Sep 2022 22:43:27 +0000
ROA not before:           Sat 10 Sep 2022 22:43:23 +0000
ROA not after:            Wed 30 Sep 2026 22:43:23 +0000
asID:                     59895
IP address blocks:        41.77.142.0/24 maxlen: 24
                          41.77.143.0/24 maxlen: 24
                          41.215.243.0/24 maxlen: 24
                          41.223.55.0/24 maxlen: 24
                          102.223.184.0/24 maxlen: 24
                          102.223.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 28 Jun 2024 00:05:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
        Validity
            Not Before: Sep 10 22:43:23 2022 GMT
            Not After : Sep 30 22:43:23 2026 GMT
        Subject: CN=631d130e-c95b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:33:19:ae:de:1e:d1:20:05:3e:3f:7c:4e:c1:
                    bc:6c:21:e5:b7:d4:37:ee:d2:5c:26:10:e8:f1:59:
                    ea:c8:1a:94:8a:01:c5:93:78:c9:4b:57:d7:65:24:
                    4b:5d:6d:fd:1a:9b:4e:d2:c2:cd:c1:47:47:af:26:
                    a2:0f:7d:12:7c:7b:d5:4a:23:88:6e:40:11:f6:f2:
                    be:71:91:2d:3c:c3:4e:66:39:97:e4:f8:6a:69:33:
                    4e:bb:47:eb:a1:7a:da:db:e9:10:26:0f:21:6f:41:
                    21:06:bf:64:d6:cc:fd:e6:11:c6:e3:bb:fe:ea:08:
                    4e:5e:88:2c:49:46:60:22:54:05:aa:c8:64:54:dc:
                    9c:1f:7e:5b:1b:0b:f2:93:5d:71:66:60:a9:38:00:
                    1a:4a:6b:c7:cd:0d:b7:f4:a1:a1:89:92:2e:8a:17:
                    e5:b5:9e:9b:c3:e4:56:41:da:02:9e:a3:b8:a4:8c:
                    40:cf:6b:b1:a0:92:9d:44:37:65:70:d7:68:08:90:
                    ce:ea:10:5b:63:8e:91:8e:8d:34:8e:c0:64:45:32:
                    58:e5:9d:cb:ee:27:54:df:e4:7c:68:2e:b6:9e:68:
                    a3:b2:e8:4c:db:42:33:10:d1:46:45:ce:92:d4:9a:
                    c0:19:5b:11:85:17:bc:1e:af:cd:1a:a8:23:7f:93:
                    c9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:85:08:1B:12:BF:5B:C2:82:C8:82:FA:40:DD:5E:B8:56:26:43:B1
            X509v3 Authority Key Identifier:
                keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/FBD8F91C315911ED857E3ED8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.77.142.0/23
                  41.215.243.0/24
                  41.223.55.0/24
                  102.223.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:a8:c2:2b:d1:b9:a6:9c:39:86:8f:b4:7a:2b:d7:b5:96:86:
         b9:67:b2:49:6f:e3:6f:72:16:47:8e:7a:f6:18:3a:cf:cf:11:
         e3:7b:a0:fa:1b:e7:13:22:3e:8b:9f:dc:55:f9:8f:09:24:70:
         97:c1:b9:bb:ad:aa:cc:71:be:6a:7d:b6:e4:13:ba:5c:40:ee:
         46:5a:65:b7:07:70:7a:4b:b0:38:54:df:79:31:44:8c:ca:ff:
         76:e5:5f:1f:21:73:1e:a9:df:b8:76:74:3e:c9:e2:ed:9f:fe:
         f2:f2:81:b5:1d:49:ca:33:41:b0:23:35:12:5b:01:16:5b:5f:
         0d:2b:20:6e:03:d8:28:f9:ab:cd:d3:9f:af:ce:6c:71:b3:1a:
         dd:2a:eb:c8:be:dc:11:46:6e:41:ae:ac:e9:8f:ad:3d:0b:45:
         25:6f:35:cf:e5:ea:67:c0:da:b3:ce:bb:f5:1e:0e:e1:da:81:
         5a:b9:10:8c:a4:4c:72:16:5a:f3:aa:55:a5:ef:40:47:51:89:
         cf:e2:a8:75:0d:25:31:0a:31:ff:d1:60:04:33:e5:fe:71:48:
         b0:30:99:cc:bb:66:67:f9:28:f1:9c:03:a2:00:28:07:38:9a:
         7b:3e:02:bd:7d:2e:f7:39:ec:8a:39:c7:41:9c:d4:33:26:ce:
         8a:88:15:50
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgIBcjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZC
QzgwQUFGMTEwLwYDVQQFEyg4QzhGOENFMkFENTVCOTM2NkJFQzZFREY0OTJDRDlD
MTQ5OEUwNjY0MB4XDTIyMDkxMDIyNDMyM1oXDTI2MDkzMDIyNDMyM1owGDEWMBQG
A1UEAwwNNjMxZDEzMGUtYzk1YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMYzGa7eHtEgBT4/fE7BvGwh5bfUN+7SXCYQ6PFZ6sgalIoBxZN4yUtX12Uk
S11t/RqbTtLCzcFHR68mog99Enx71UojiG5AEfbyvnGRLTzDTmY5l+T4amkzTrtH
66F62tvpECYPIW9BIQa/ZNbM/eYRxuO7/uoITl6ILElGYCJUBarIZFTcnB9+WxsL
8pNdcWZgqTgAGkprx80Nt/ShoYmSLooX5bWem8PkVkHaAp6juKSMQM9rsaCSnUQ3
ZXDXaAiQzuoQW2OOkY6NNI7AZEUyWOWdy+4nVN/kfGgutp5oo7LoTNtCMxDRRkXO
ktSawBlbEYUXvB6vzRqoI3+TyfsCAwEAAaOCArcwggKzMB0GA1UdDgQWBBTHhQgb
Er9bwoLIgvpA3V64ViZDsTAfBgNVHSMEGDAWgBSMj4zirVW5Nmvsbt9JLNnBSY4G
ZDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QkM4MEEvNDcyRUY1QjJFNzVDMTFFQzlEN0Y5MEQ4RjEyMjI0NjgvakktTTRx
MVZ1VFpyN0c3ZlNTelp3VW1PQm1RLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvakktTTRxMVZ1VFpyN0c3ZlNTelp3VW1PQm1RLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkM4MEEvNDcyRUY1QjJFNzVDMTFFQzlEN0Y5MEQ4RjEy
MjI0NjgvRkJEOEY5MUMzMTU5MTFFRDg1N0UzRUQ4RjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEASlNjgMEACnX8wMEACnfNwME
AWbfuDANBgkqhkiG9w0BAQsFAAOCAQEAkajCK9G5ppw5ho+0eivXtZaGuWeySW/j
b3IWR4569hg6z88R43ug+hvnEyI+i5/cVfmPCSRwl8G5u62qzHG+an225BO6XEDu
RlpltwdwekuwOFTfeTFEjMr/duVfHyFzHqnfuHZ0Psni7Z/+8vKBtR1JyjNBsCM1
ElsBFltfDSsgbgPYKPmrzdOfr85scbMa3SrryL7cEUZuQa6s6Y+tPQtFJW81z+Xq
Z8Das8679R4O4dqBWrkQjKRMchZa86pVpe9AR1GJz+KodQ0lMQox/9FgBDPl/nFI
sDCZzLtmZ/ko8ZwDogAoBziaez4CvX0u9znsijnHQZzUMybOiogVUA==
-----END CERTIFICATE-----
Generated at Wed Jun 26 06:21:12 2024 by rpki-client on console-fra.rpki-client.org