Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/74C0121C2E5B11EE867BBF604AD9E6FC.roa
File:                     74C0121C2E5B11EE867BBF604AD9E6FC.roa (raw, json)
Hash identifier:          c0/ioNpGWl5Q2FhocYVgiQ0IwWm66KxWokHQNfgxjOg=
Subject key identifier:   8B:94:D9:2C:37:7B:70:97:1F:7E:E6:FE:66:6C:E9:49:37:4F:B7:91
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       04E9
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/74C0121C2E5B11EE867BBF604AD9E6FC.roa
Signing time:             Sat 29 Jul 2023 22:01:23 +0000
ROA not before:           Sat 29 Jul 2023 22:01:19 +0000
ROA not after:            Sat 30 Jul 2033 22:01:19 +0000
asID:                     37119
IP address blocks:        105.174.32.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1257 (0x4e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 29 22:01:19 2023 GMT
            Not After : Jul 30 22:01:19 2033 GMT
        Subject: CN=64c58c33-f328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:67:b3:dd:28:92:9e:0c:6b:30:c0:7d:d1:5a:
                    d5:60:76:ad:ef:82:bd:a0:2f:53:8f:13:aa:09:83:
                    25:e7:4b:b5:67:ed:a0:9b:6d:d1:5e:bf:4b:9c:63:
                    0a:97:4e:b0:3f:2e:35:ad:ec:28:49:4b:1d:b1:aa:
                    0e:aa:9d:9e:f5:d9:44:39:fa:19:c8:9f:f6:09:f3:
                    3d:a1:cc:7e:74:da:48:54:0e:0a:c3:a9:7e:10:b1:
                    7d:5e:0d:b5:23:0d:5b:0d:48:78:9a:22:9d:73:2f:
                    af:fe:ec:3b:ee:5e:d0:35:9e:59:a8:04:82:fd:0e:
                    43:e5:ed:a3:17:bd:c5:f9:76:5b:bc:4b:6a:c4:34:
                    4b:cc:dd:99:69:17:33:b5:a5:b0:5a:8f:af:02:d5:
                    06:f1:c1:70:09:f6:5a:72:7a:ef:54:d2:fa:de:b2:
                    6b:17:3d:6c:e1:e4:c7:54:c2:2e:60:31:d4:0b:32:
                    97:ec:99:49:7a:4d:d0:97:54:8c:f3:ff:b6:57:b2:
                    17:68:4d:0b:3d:7f:bc:5f:ef:cd:c9:f2:0d:ae:40:
                    8f:75:8a:07:96:67:71:cd:1b:e0:d1:37:a1:bd:47:
                    53:2e:08:0c:84:f2:05:64:d3:b1:44:4c:df:07:4e:
                    38:94:07:5e:eb:48:77:67:e6:f3:4a:c3:69:b0:23:
                    2b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:94:D9:2C:37:7B:70:97:1F:7E:E6:FE:66:6C:E9:49:37:4F:B7:91
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/74C0121C2E5B11EE867BBF604AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.174.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:37:b8:3f:ff:a4:cd:7a:0a:39:38:d1:0a:ef:b8:a3:10:4a:
         66:ff:5a:60:cd:ca:98:00:e4:92:0d:cb:7d:11:09:18:3d:d3:
         81:03:f5:a4:d0:b0:0b:0b:4c:a0:78:58:cc:e7:40:f0:db:fe:
         ea:90:2a:28:06:06:85:42:8b:0d:65:80:c2:c9:bd:8e:f6:d5:
         9e:3e:8a:f6:d4:15:14:eb:4a:75:79:13:b2:bf:5f:c3:77:f8:
         b0:b4:29:f2:d1:bb:58:50:53:e9:36:a9:d0:ca:d7:76:10:77:
         84:af:1c:6b:41:1d:8f:56:83:71:ce:81:30:ed:1a:21:f2:2c:
         98:f9:cb:70:cc:8d:89:1c:aa:f1:3c:82:8a:cb:52:eb:e3:db:
         6b:f5:e0:4b:d4:f1:15:d1:58:b2:9d:6f:f5:49:27:41:c8:d9:
         ed:3d:38:c1:66:b4:f9:e1:3a:05:ad:ca:36:e2:9a:4f:27:0d:
         51:70:c1:fa:e9:e7:c9:66:d2:31:99:b8:7a:58:3f:24:5b:fd:
         f7:ae:a1:98:1c:dd:04:93:e9:15:64:bf:e9:74:ab:39:f1:5c:
         53:02:31:ee:2f:89:df:1b:b4:93:f3:4d:b1:be:13:e9:bc:7b:
         7d:e2:cd:78:d8:7c:21:f9:91:5e:49:c1:67:16:77:d0:75:c4:
         33:3f:15:19
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yMzA3MjkyMjAxMTlaFw0zMzA3MzAyMjAxMTlaMBgxFjAU
BgNVBAMTDTY0YzU4YzMzLWYzMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSZ7PdKJKeDGswwH3RWtVgdq3vgr2gL1OPE6oJgyXnS7Vn7aCbbdFev0uc
YwqXTrA/LjWt7ChJSx2xqg6qnZ712UQ5+hnIn/YJ8z2hzH502khUDgrDqX4QsX1e
DbUjDVsNSHiaIp1zL6/+7DvuXtA1nlmoBIL9DkPl7aMXvcX5dlu8S2rENEvM3Zlp
FzO1pbBaj68C1QbxwXAJ9lpyeu9U0vresmsXPWzh5MdUwi5gMdQLMpfsmUl6TdCX
VIzz/7ZXshdoTQs9f7xf783J8g2uQI91igeWZ3HNG+DRN6G9R1MuCAyE8gVk07FE
TN8HTjiUB17rSHdn5vNKw2mwIyvhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUi5TZ
LDd7cJcffub+ZmzpSTdPt5EwHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4Lzc0QzAxMjFDMkU1QjExRUU4NjdCQkY2MDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFpriAwDQYJKoZIhvcNAQEL
BQADggEBAIs3uD//pM16Cjk40QrvuKMQSmb/WmDNypgA5JINy30RCRg904ED9aTQ
sAsLTKB4WMznQPDb/uqQKigGBoVCiw1lgMLJvY721Z4+ivbUFRTrSnV5E7K/X8N3
+LC0KfLRu1hQU+k2qdDK13YQd4SvHGtBHY9Wg3HOgTDtGiHyLJj5y3DMjYkcqvE8
gorLUuvj22v14EvU8RXRWLKdb/VJJ0HI2e09OMFmtPnhOgWtyjbimk8nDVFwwfrp
58lm0jGZuHpYPyRb/feuoZgc3QST6RVkv+l0qznxXFMCMe4vid8btJPzTbG+E+m8
e33izXjYfCH5kV5JwWcWd9B1xDM/FRk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:18 2024 by rpki-client on console-fra.rpki-client.org