Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/80627120216A11EF980B8E0E7DDC24C2.roa
File:                     80627120216A11EF980B8E0E7DDC24C2.roa (raw, json)
Hash identifier:          iJq4XGcPgxPLrs5UWbDYKLBJP1q4j5+vrVCECQwMuoM=
Subject key identifier:   BE:B9:E5:D0:6F:64:3A:F8:BD:19:D2:E5:44:DE:13:5C:8A:83:3D:1E
Certificate issuer:       /CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
Certificate serial:       0183
Authority key identifier: 06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/80627120216A11EF980B8E0E7DDC24C2.roa
Signing time:             Mon 03 Jun 2024 05:31:18 +0000
ROA not before:           Mon 03 Jun 2024 05:31:14 +0000
ROA not after:            Tue 01 Jan 2030 05:31:14 +0000
asID:                     37684
IP address blocks:        62.12.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
                          rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 29 Jun 2024 00:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
        Validity
            Not Before: Jun  3 05:31:14 2024 GMT
            Not After : Jan  1 05:31:14 2030 GMT
        Subject: CN=665d5526-a0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:dc:70:96:2b:4a:88:ba:23:15:ce:01:ff:
                    a4:9f:ee:98:09:89:dd:3e:f7:d9:bf:16:54:94:4f:
                    76:a4:25:43:18:d9:b3:43:c5:95:5c:97:1b:1e:c7:
                    98:8c:1c:2a:5a:a2:27:c6:d5:b4:f2:b1:d9:a6:c7:
                    42:cf:eb:f7:5c:4f:1a:2f:79:51:77:33:46:1f:6a:
                    78:0b:ff:83:92:47:4c:84:7a:7d:21:57:b5:72:90:
                    5f:33:86:58:5c:46:57:6b:92:49:11:dd:da:2f:30:
                    92:ad:01:e7:a6:c9:16:43:1c:4e:a6:d8:61:b4:d5:
                    1a:5f:76:c0:d2:31:29:7a:93:13:fa:87:58:4c:d2:
                    07:04:a2:dc:ba:18:b4:da:f6:a7:4e:68:5e:6c:2b:
                    d7:d7:00:1d:5a:dc:40:a9:4f:f3:0a:25:93:e4:24:
                    c8:70:23:4e:61:69:e1:28:92:6e:4f:ee:3d:42:e8:
                    97:f7:24:23:4e:2d:01:68:66:37:29:78:e0:f0:71:
                    81:2a:b6:2e:88:4b:ef:c8:13:bc:46:d4:2b:44:2d:
                    01:4b:83:0e:17:32:c1:45:c7:ca:18:73:60:22:90:
                    38:6a:2f:88:56:9f:cb:07:60:81:cc:e1:54:dc:33:
                    27:35:01:c9:71:0c:c0:01:e0:1c:aa:8f:93:ed:3c:
                    9a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B9:E5:D0:6F:64:3A:F8:BD:19:D2:E5:44:DE:13:5C:8A:83:3D:1E
            X509v3 Authority Key Identifier:
                keyid:06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/80627120216A11EF980B8E0E7DDC24C2.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.12.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:5f:95:fd:5f:bb:1b:34:84:a3:f5:0c:d9:9d:9c:49:e9:cd:
         54:0e:0c:27:84:76:30:83:93:36:52:0e:53:ff:b7:2a:b0:f9:
         8f:97:11:91:ce:94:4a:5b:09:65:28:ec:bb:0d:7f:70:b5:dc:
         20:70:96:e0:de:6c:c4:e7:e1:58:5a:8f:a0:cd:25:ab:8a:39:
         16:9b:00:7b:1b:96:4e:3f:71:18:06:8a:e3:95:c4:99:c6:49:
         30:86:63:38:64:99:45:4a:ab:2d:3c:a0:1f:70:5d:73:e2:ec:
         69:e1:58:b4:61:57:36:7e:b3:1f:64:e2:6c:73:c4:95:08:30:
         b5:61:16:1a:fc:a2:2d:09:b9:d9:7e:16:39:55:26:1d:a7:bf:
         77:47:b2:92:df:0a:ae:30:7f:55:62:32:9e:ae:d4:ed:ae:ca:
         cc:cb:3b:06:b6:07:b7:3a:9b:3f:34:1e:9c:5c:4c:2b:b6:f5:
         a5:7b:5c:45:1b:6a:bb:c4:b4:9b:1f:73:8b:00:d3:11:73:21:
         67:40:0c:ae:32:62:c2:90:ff:05:f4:f3:2b:1d:ec:f2:c8:c0:
         53:c2:ac:b1:73:6d:8b:0e:89:db:2e:2c:ce:fe:d0:37:74:d7:
         8a:fc:6d:42:45:8b:42:21:70:a3:7d:f9:e9:36:93:b9:d3:a4:
         90:11:91:c5
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTJCOENSSTExMC8GA1UEBRMoMDYyOUM5OUQ0NzYwQzI4OUI4NENEQkVDRjFCNkMx
M0NGNTI1RUFBRjAeFw0yNDA2MDMwNTMxMTRaFw0zMDAxMDEwNTMxMTRaMBgxFjAU
BgNVBAMTDTY2NWQ1NTI2LWEwZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/mtxwlitKiLojFc4B/6Sf7pgJid0+99m/FlSUT3akJUMY2bNDxZVclxse
x5iMHCpaoifG1bTysdmmx0LP6/dcTxoveVF3M0YfangL/4OSR0yEen0hV7VykF8z
hlhcRldrkkkR3dovMJKtAeemyRZDHE6m2GG01RpfdsDSMSl6kxP6h1hM0gcEoty6
GLTa9qdOaF5sK9fXAB1a3ECpT/MKJZPkJMhwI05haeEokm5P7j1C6Jf3JCNOLQFo
ZjcpeODwcYEqti6IS+/IE7xG1CtELQFLgw4XMsFFx8oYc2AikDhqL4hWn8sHYIHM
4VTcMyc1AclxDMAB4Byqj5PtPJqXAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUvrnl
0G9kOvi9GdLlRN4TXIqDPR4wHwYDVR0jBBgwFoAUBinJnUdgwom4TNvs8bbBPPUl
6q8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUyQjhDL0I1MENBNEFBMEI2MjExRUVCMkQzNUU4QTRBRDlFNkZDL0Jpbkpu
VWRnd29tNFROdnM4YmJCUFBVbDZxOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L0JpbkpuVWRnd29tNFROdnM4YmJCUFBVbDZxOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkUyQjhDL0I1MENBNEFBMEI2MjExRUVCMkQzNUU4QTRBRDlF
NkZDLzgwNjI3MTIwMjE2QTExRUY5ODBCOEUwRTdEREMyNEMyLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA+DHEwDQYJKoZIhvcNAQELBQAD
ggEBAG9flf1fuxs0hKP1DNmdnEnpzVQODCeEdjCDkzZSDlP/tyqw+Y+XEZHOlEpb
CWUo7LsNf3C13CBwluDebMTn4Vhaj6DNJauKORabAHsblk4/cRgGiuOVxJnGSTCG
YzhkmUVKqy08oB9wXXPi7GnhWLRhVzZ+sx9k4mxzxJUIMLVhFhr8oi0Judl+FjlV
Jh2nv3dHspLfCq4wf1ViMp6u1O2uyszLOwa2B7c6mz80HpxcTCu29aV7XEUbarvE
tJsfc4sA0xFzIWdADK4yYsKQ/wX08ysd7PLIwFPCrLFzbYsOidsuLM7+0Dd014r8
bUJFi0IhcKN9+ek2k7nTpJARkcU=
-----END CERTIFICATE-----
Generated at Thu Jun 27 03:28:33 2024 by rpki-client on console-ams.rpki-client.org