Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/9A9301DE101511EEB030254C4AD9E6FC.roa
File:                     9A9301DE101511EEB030254C4AD9E6FC.roa (raw, json)
Hash identifier:          RMfgwMLkiAYYAKy0pSpxJKXLZ5NggtX42RB4bXfmtYk=
Subject key identifier:   D0:72:C9:9F:37:F6:88:D3:86:DE:D5:0E:9F:66:D8:3F:CC:F4:FA:9C
Certificate issuer:       /CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
Certificate serial:       0C
Authority key identifier: 06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/9A9301DE101511EEB030254C4AD9E6FC.roa
Signing time:             Wed 21 Jun 2023 09:25:47 +0000
ROA not before:           Wed 21 Jun 2023 09:25:43 +0000
ROA not after:            Fri 21 Jun 2024 09:25:43 +0000
asID:                     37684
IP address blocks:        62.12.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
                          rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 17 Jun 2024 00:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
        Validity
            Not Before: Jun 21 09:25:43 2023 GMT
            Not After : Jun 21 09:25:43 2024 GMT
        Subject: CN=6492c21b-e6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ef:0f:96:fb:99:17:f7:d0:36:78:97:95:40:
                    d7:15:65:0e:45:72:0a:66:84:b0:d6:0f:ba:ec:ca:
                    d5:3c:5a:cc:7e:d3:9c:39:ec:15:e1:45:59:b0:d1:
                    5c:0b:d7:42:d2:08:0f:8f:4c:35:39:97:59:c9:aa:
                    91:ad:1f:e3:60:4c:62:89:96:2e:c4:61:b4:7e:55:
                    f9:5a:49:27:ab:d5:0a:e8:06:fa:33:91:f2:5f:b2:
                    1e:53:01:d6:d1:0f:db:66:32:f8:60:20:96:70:9c:
                    61:e6:f1:93:96:c8:2f:90:8a:61:68:3e:d1:3a:3c:
                    b9:3b:45:72:91:08:6d:9c:81:93:7c:67:fb:49:32:
                    e0:b9:1c:55:48:35:bd:78:d7:70:1d:40:bf:98:b8:
                    99:cd:a1:68:f2:b5:55:ff:07:1c:3b:cf:43:ea:84:
                    c2:a0:f9:06:4f:50:0e:98:55:c3:e8:e3:7b:5a:7a:
                    09:f5:b0:71:47:18:73:23:49:20:4d:9f:de:d0:5f:
                    31:42:c2:ff:24:4e:a7:ff:c4:af:df:38:c6:9d:49:
                    6e:43:5d:ce:2d:e2:eb:5d:4e:f8:cc:db:10:6b:b1:
                    74:f4:60:61:e1:a7:b9:4e:49:08:33:d6:06:c1:0e:
                    cb:ff:90:6b:e1:3a:33:cb:a7:b8:33:2d:05:4a:38:
                    ca:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:72:C9:9F:37:F6:88:D3:86:DE:D5:0E:9F:66:D8:3F:CC:F4:FA:9C
            X509v3 Authority Key Identifier:
                keyid:06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/9A9301DE101511EEB030254C4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.12.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:c0:0c:dc:10:db:11:6e:e9:e9:da:db:ea:1d:e6:fa:e2:5f:
         77:9f:de:50:81:7f:70:56:5d:cf:85:e8:eb:a1:e4:e1:b8:c8:
         9c:97:28:e7:ca:f3:35:62:42:5c:62:c2:01:12:ff:a7:2b:9f:
         7c:70:1d:05:f1:de:ee:b0:4a:85:dd:34:03:91:a8:1c:aa:61:
         b0:75:d7:7b:b3:fa:7e:50:96:85:7c:ee:c4:53:61:31:2f:03:
         13:17:5e:ca:fb:89:09:7c:09:cb:61:13:05:9a:b7:16:e7:10:
         47:07:f3:41:b8:15:de:83:4a:9d:33:9d:63:ad:55:01:c8:a6:
         51:06:4c:cf:b5:c0:3a:8a:4f:c5:16:f2:59:6f:62:f4:64:43:
         21:c3:c0:42:09:bc:9b:a8:04:46:9c:76:73:de:a2:e3:3e:ed:
         32:53:47:e4:29:b0:18:91:42:db:47:c4:64:b0:b7:ae:87:f0:
         3e:6f:91:59:7f:56:f7:0a:ee:b8:4e:68:9d:1b:8a:72:b3:c7:
         f1:c0:fe:08:50:46:7b:53:3b:f9:9a:d1:79:5c:d3:2c:7b:a6:
         b8:06:33:a1:57:97:b2:11:8a:bb:dd:16:eb:f3:e2:9b:2b:40:
         58:28:b9:72:26:66:0d:6d:0a:03:cc:f2:4e:5c:6f:7e:8a:37:
         d1:d3:14:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 03:05:54 2024 by rpki-client on console-fra.rpki-client.org