Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/158513F4518011EE8BDBCE164AD9E6FC.roa
File:                     158513F4518011EE8BDBCE164AD9E6FC.roa (raw, json)
Hash identifier:          sbl6JhnjaIL3BTU2+lQRNeSnxalVE/sMDYPWi7BO8vg=
Subject key identifier:   37:EB:9E:AD:B1:38:24:FF:A1:7A:19:0B:C6:8E:7A:16:FE:31:BD:C6
Certificate issuer:       /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial:       018E
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/158513F4518011EE8BDBCE164AD9E6FC.roa
Signing time:             Tue 12 Sep 2023 15:21:45 +0000
ROA not before:           Tue 12 Sep 2023 15:21:42 +0000
ROA not after:            Wed 13 Sep 2028 15:21:42 +0000
asID:                     23764
IP address blocks:        154.72.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 14 May 2024 00:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
        Validity
            Not Before: Sep 12 15:21:42 2023 GMT
            Not After : Sep 13 15:21:42 2028 GMT
        Subject: CN=65008209-b434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:cf:cb:ef:2a:6e:da:de:7e:e5:44:16:d6:
                    55:18:6f:00:4d:aa:7d:5a:db:cb:e5:fc:1b:65:a1:
                    09:06:91:5e:dc:e2:01:92:d2:3f:d4:2b:48:cc:1a:
                    f6:cb:5a:a9:24:33:c9:13:44:df:91:3b:ef:36:7f:
                    3c:11:4a:2b:0b:22:a5:42:f5:56:6c:45:a3:3d:f5:
                    20:75:41:65:4d:04:ca:63:ad:9d:bf:3a:c6:e8:d3:
                    3b:7a:b8:34:1f:3f:28:70:72:79:a1:71:60:2c:22:
                    49:d5:f3:b1:dd:22:53:ca:7c:03:13:ed:3d:10:1c:
                    08:47:18:d3:a2:5d:61:6c:a6:20:aa:33:b0:7d:53:
                    e5:e1:80:6e:18:56:ab:51:a2:93:e3:d7:2e:89:77:
                    33:74:bd:6a:2e:12:97:fe:7f:2f:54:dc:5c:f0:06:
                    9f:9b:35:63:16:9a:23:58:1e:84:3b:ef:9f:3f:64:
                    5c:ec:3c:27:84:34:d5:96:4d:94:d5:21:e4:9a:0a:
                    03:03:ff:c1:89:2f:40:8b:69:3f:f0:d8:c2:98:85:
                    2e:d6:52:19:8f:c5:ac:04:1e:fd:b2:52:03:11:25:
                    ee:b4:7a:cf:c6:03:83:a9:15:03:e4:a9:3d:58:c7:
                    80:fb:29:5b:a4:eb:18:46:c8:bc:2d:69:54:1a:6c:
                    c5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EB:9E:AD:B1:38:24:FF:A1:7A:19:0B:C6:8E:7A:16:FE:31:BD:C6
            X509v3 Authority Key Identifier:
                keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/158513F4518011EE8BDBCE164AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.72.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:1a:6f:27:ba:ed:ac:c9:cd:6f:bc:18:68:e2:b2:70:21:14:
         9f:51:5a:dc:4e:c6:6e:c5:43:53:e3:7a:ad:62:53:4b:c3:d4:
         71:23:84:eb:bc:c5:10:fc:f8:ad:b0:21:4c:78:8a:eb:f3:64:
         58:90:fd:e4:a1:0d:57:f9:e4:25:67:e9:8c:9e:61:28:d0:fb:
         dd:95:37:21:b8:42:c1:41:ed:6a:24:35:4a:5c:fd:70:d4:92:
         8f:c9:e3:5f:fb:e6:03:d4:1c:1f:c8:17:b7:80:ff:5e:0d:97:
         9c:d3:b4:c1:eb:d2:23:5f:bd:54:31:d5:67:61:ed:e1:d4:ae:
         8b:d2:3c:16:91:e7:f4:c3:f3:2a:d2:13:df:68:6c:b3:da:58:
         39:c9:db:9a:dc:d8:75:19:75:7c:80:6b:e2:e5:0a:6f:8c:69:
         4a:97:3e:4d:11:ae:01:cf:75:22:d4:90:0d:00:68:f8:6a:d6:
         4a:73:74:ba:e8:c8:27:b5:f4:f8:23:bc:f1:34:8e:f1:9a:14:
         1d:80:b6:fd:57:96:52:36:b5:e1:6a:ff:4a:50:b8:ea:8e:ff:
         b2:24:52:90:83:76:62:d7:6f:86:a4:76:60:08:fe:5b:a9:da:
         d5:ba:e4:9b:5b:f5:f9:f0:3d:8b:03:41:79:da:37:13:8a:fa:
         ce:9e:00:0e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
REI0OTJBRjExMC8GA1UEBRMoRjQzRTA2NjhFRjcyQkQ4N0ZBNTM2OEJFMkI2ODE1
QzBCQ0I0MDE0OTAeFw0yMzA5MTIxNTIxNDJaFw0yODA5MTMxNTIxNDJaMBgxFjAU
BgNVBAMTDTY1MDA4MjA5LWI0MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwNM/L7ypu2t5+5UQW1lUYbwBNqn1a28vl/BtloQkGkV7c4gGS0j/UK0jM
GvbLWqkkM8kTRN+RO+82fzwRSisLIqVC9VZsRaM99SB1QWVNBMpjrZ2/Osbo0zt6
uDQfPyhwcnmhcWAsIknV87HdIlPKfAMT7T0QHAhHGNOiXWFspiCqM7B9U+XhgG4Y
VqtRopPj1y6JdzN0vWouEpf+fy9U3FzwBp+bNWMWmiNYHoQ7758/ZFzsPCeENNWW
TZTVIeSaCgMD/8GJL0CLaT/w2MKYhS7WUhmPxawEHv2yUgMRJe60es/GA4OpFQPk
qT1Yx4D7KVuk6xhGyLwtaVQabMXpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUN+ue
rbE4JP+hehkLxo56Fv4xvcYwHwYDVR0jBBgwFoAU9D4GaO9yvYf6U2i+K2gVwLy0
AUkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCNDkyLzEwREE5OTc2NEEwMzExRUQ4RjU5RDg5RUYxMjIyNDY4LzlENEdh
Tzl5dllmNlUyaS1LMmdWd0x5MEFVay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlENEdhTzl5dllmNlUyaS1LMmdWd0x5MEFVay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkRCNDkyLzEwREE5OTc2NEEwMzExRUQ4RjU5RDg5RUYx
MjIyNDY4LzE1ODUxM0Y0NTE4MDExRUU4QkRCQ0UxNjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaSC0wDQYJKoZIhvcNAQEL
BQADggEBAHgabye67azJzW+8GGjisnAhFJ9RWtxOxm7FQ1Pjeq1iU0vD1HEjhOu8
xRD8+K2wIUx4iuvzZFiQ/eShDVf55CVn6YyeYSjQ+92VNyG4QsFB7WokNUpc/XDU
ko/J41/75gPUHB/IF7eA/14Nl5zTtMHr0iNfvVQx1Wdh7eHUrovSPBaR5/TD8yrS
E99obLPaWDnJ25rc2HUZdXyAa+LlCm+MaUqXPk0RrgHPdSLUkA0AaPhq1kpzdLro
yCe19PgjvPE0jvGaFB2Atv1XllI2teFq/0pQuOqO/7IkUpCDdmLXb4akdmAI/lup
2tW65Jtb9fnwPYsDQXnaNxOK+s6eAA4=
-----END CERTIFICATE-----
Generated at Sun May 12 03:24:48 2024 by rpki-client on console-fra.rpki-client.org