Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/B56502AE36B211EFAA421B5E762E951A.roa
File:                     B56502AE36B211EFAA421B5E762E951A.roa (raw, json)
Hash identifier:          pW3bMqz4FHfQnjso9ES+xBDe7OZbTMlRNhZcJvVAqsk=
Subject key identifier:   9C:52:8C:79:77:55:29:B9:6F:9B:96:8C:89:F7:59:2E:D8:FC:89:C6
Certificate issuer:       /CN=F36C1E88AF/serialNumber=D9D6E04DE3C3613BCE1DB29D77C6A1388AC4223D
Certificate serial:       0105
Authority key identifier: D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/B56502AE36B211EFAA421B5E762E951A.roa
Signing time:             Sun 30 Jun 2024 07:31:05 +0000
ROA not before:           Sun 30 Jun 2024 07:31:01 +0000
ROA not after:            Fri 30 Jun 2034 07:31:01 +0000
asID:                     328162
IP address blocks:        2001:43f8:d60::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C1E88AF/serialNumber=D9D6E04DE3C3613BCE1DB29D77C6A1388AC4223D
        Validity
            Not Before: Jun 30 07:31:01 2024 GMT
            Not After : Jun 30 07:31:01 2034 GMT
        Subject: CN=668109b9-9179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:98:dd:af:7d:de:36:01:a5:f3:fb:a5:e6:
                    52:d2:1c:13:e0:f0:b7:3c:0b:0e:a1:2e:77:68:54:
                    06:d8:e4:6f:7c:2a:ff:3a:2e:51:f4:6f:a2:05:24:
                    a0:33:04:b9:26:44:f3:8a:f9:d1:38:ab:b9:cd:1a:
                    33:b6:b9:71:97:f5:b2:71:62:11:20:ff:00:ba:37:
                    ab:b2:ee:82:d5:1d:17:66:43:65:6e:09:92:ed:82:
                    12:3f:e0:44:e9:83:ce:a7:ca:85:9a:ff:64:d1:db:
                    41:23:ab:d1:be:41:67:02:db:5f:3a:30:18:5b:84:
                    fd:a0:40:33:30:40:86:18:09:99:39:2a:7b:81:2b:
                    7f:78:a2:97:3e:24:4a:5d:4f:13:2f:e5:82:7d:f2:
                    da:3a:76:2e:b9:a6:94:f0:a9:1d:7a:26:d1:53:63:
                    b3:4a:78:f3:38:2a:d8:4c:f2:0e:54:f6:db:c8:12:
                    5c:7e:ee:86:fe:52:1d:af:4a:56:d7:01:7e:c3:4f:
                    6e:81:9e:88:d0:8a:9c:c9:57:94:ac:24:20:b2:d1:
                    e6:14:7e:78:b7:76:9c:aa:39:0f:69:38:c5:98:16:
                    8c:54:59:1d:7f:98:04:3e:75:09:ba:6d:f4:46:76:
                    8d:c5:b6:57:d5:99:e4:e3:96:dc:f1:84:db:81:8b:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:52:8C:79:77:55:29:B9:6F:9B:96:8C:89:F7:59:2E:D8:FC:89:C6
            X509v3 Authority Key Identifier:
                keyid:D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/B56502AE36B211EFAA421B5E762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:d60::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:55:33:3f:32:bf:32:46:9a:72:3b:68:4a:b8:a8:23:e2:7a:
         d8:60:d4:2a:c1:09:c8:aa:b1:e7:45:5b:d7:1e:8a:a6:63:a0:
         d5:f0:f9:18:7c:f7:72:36:ef:87:79:d2:bb:4c:fa:29:50:4b:
         5f:12:d4:00:d6:84:85:0d:ac:e3:6f:b4:95:f8:47:38:01:66:
         70:a9:6f:b6:f1:f1:8f:85:2b:f5:07:b5:e1:46:2e:91:30:aa:
         a3:94:c1:37:ab:03:08:44:65:e1:52:99:5b:13:63:bb:de:54:
         13:dc:22:ce:43:e3:86:62:5b:f8:00:0c:82:c3:33:f6:20:1c:
         d4:a4:32:37:b9:ad:32:8f:6d:10:70:c9:38:18:c1:e9:5a:b5:
         a3:a8:d1:af:cb:47:4c:26:c2:16:d3:20:dc:cd:99:0f:01:01:
         c7:50:2d:70:44:57:77:39:db:a6:c5:cc:5d:12:64:49:ac:fd:
         cf:ae:37:56:a6:bd:45:cc:29:c3:34:77:5d:2f:cb:b0:26:b8:
         b4:19:2b:95:72:2c:f4:bd:b9:f8:a2:8d:0e:7e:25:94:eb:9f:
         54:57:1a:8a:b3:52:26:8b:4e:09:af:53:c3:a1:8e:a8:95:d4:
         54:aa:49:34:6e:0b:e2:ca:f5:56:93:0f:85:ab:84:d2:2e:3f:
         70:00:3a:73
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzFFODhBRjExMC8GA1UEBRMoRDlENkUwNERFM0MzNjEzQkNFMURCMjlENzdDNkEx
Mzg4QUM0MjIzRDAeFw0yNDA2MzAwNzMxMDFaFw0zNDA2MzAwNzMxMDFaMBgxFjAU
BgNVBAMTDTY2ODEwOWI5LTkxNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBEpjdr33eNgGl8/ul5lLSHBPg8Lc8Cw6hLndoVAbY5G98Kv86LlH0b6IF
JKAzBLkmRPOK+dE4q7nNGjO2uXGX9bJxYhEg/wC6N6uy7oLVHRdmQ2VuCZLtghI/
4ETpg86nyoWa/2TR20Ejq9G+QWcC2186MBhbhP2gQDMwQIYYCZk5KnuBK394opc+
JEpdTxMv5YJ98to6di65ppTwqR16JtFTY7NKePM4KthM8g5U9tvIElx+7ob+Uh2v
SlbXAX7DT26BnojQipzJV5SsJCCy0eYUfni3dpyqOQ9pOMWYFoxUWR1/mAQ+dQm6
bfRGdo3FtlfVmeTjltzxhNuBi1txAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnFKM
eXdVKblvm5aMifdZLtj8icYwHwYDVR0jBBgwFoAU2dbgTePDYTvOHbKdd8ahOIrE
Ij0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMxRTg4LzIxM0FFQTgyNzhFNzExRUVCNDk1NTYzQzRBRDlFNkZDLzJkYmdU
ZVBEWVR2T0hiS2RkOGFoT0lyRUlqMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJkYmdUZVBEWVR2T0hiS2RkOGFoT0lyRUlqMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkMxRTg4LzIxM0FFQTgyNzhFNzExRUVCNDk1NTYzQzRB
RDlFNkZDL0I1NjUwMkFFMzZCMjExRUZBQTQyMUI1RTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DWAwDQYJKoZIhvcN
AQELBQADggEBADlVMz8yvzJGmnI7aEq4qCPiethg1CrBCciqsedFW9ceiqZjoNXw
+Rh893I274d50rtM+ilQS18S1ADWhIUNrONvtJX4RzgBZnCpb7bx8Y+FK/UHteFG
LpEwqqOUwTerAwhEZeFSmVsTY7veVBPcIs5D44ZiW/gADILDM/YgHNSkMje5rTKP
bRBwyTgYwelataOo0a/LR0wmwhbTINzNmQ8BAcdQLXBEV3c526bFzF0SZEms/c+u
N1amvUXMKcM0d10vy7AmuLQZK5VyLPS9ufiijQ5+JZTrn1RXGoqzUiaLTgmvU8Oh
jqiV1FSqSTRuC+LK9VaTD4WrhNIuP3AAOnM=
-----END CERTIFICATE-----