Route Origin Authorization
Location:                 rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/43DCBB640EC911EBAC7E170FF8AEA228.roa (download)

Subject key identifier:   E8:EF:33:B9:DA:9A:38:06:0C:B7:44:23:AE:B9:1C:0A:3D:26:89:AF 
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
asID:                     AS3356
Prefixes:
    1: 154.16.188.0/22 (max: 22)

--
$ test-roa -p rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/43DCBB640EC911EBAC7E170FF8AEA228.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 989 (0x3dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct 15 09:31:49 2020 GMT
            Not After : Sep  2 09:31:49 2022 GMT
        Subject: CN=5f88170c-cc09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:03:c3:3c:6a:8d:60:ce:f5:dc:2b:07:c1:
                    db:04:5c:70:4b:b6:10:6f:60:be:26:d9:cd:72:7d:
                    d1:e6:c5:5c:56:d3:e4:94:9c:21:d5:99:5e:bc:a7:
                    ce:c4:09:ca:e9:ec:7c:ce:09:40:aa:62:c8:3c:67:
                    1c:1a:b5:9a:5d:05:db:7b:ae:90:45:b6:28:90:ab:
                    88:b3:5c:54:8d:73:01:6b:c2:c1:91:59:fa:76:4a:
                    d9:16:11:db:d2:89:8f:55:e2:82:ea:46:df:96:ea:
                    16:01:74:b6:59:10:67:49:8e:eb:74:d3:bf:10:13:
                    1b:4e:19:58:31:21:0e:45:77:2b:36:8b:96:49:e0:
                    8f:4b:9c:df:22:36:e4:5b:64:0f:c0:ad:83:bd:56:
                    02:01:33:15:39:ac:54:c9:8b:14:e6:90:66:fc:d0:
                    ff:53:7f:dd:34:47:74:ea:7d:49:75:a2:65:57:66:
                    54:22:91:30:f1:26:7b:7d:50:1e:fa:e4:63:88:3c:
                    b1:41:c8:43:08:a0:c0:e1:2b:ed:be:70:ec:c2:de:
                    d4:41:ff:13:38:96:49:69:cd:36:8b:68:fb:99:0f:
                    89:38:d0:fe:ca:e3:ca:df:9e:94:c3:68:c1:cb:72:
                    92:2f:a4:d7:c9:c9:20:d7:fa:9b:43:2f:72:54:79:
                    c5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E8:EF:33:B9:DA:9A:38:06:0C:B7:44:23:AE:B9:1C:0A:3D:26:89:AF
            X509v3 Authority Key Identifier: 
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/43DCBB640EC911EBAC7E170FF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                0.0.....0.......
    Signature Algorithm: sha256WithRSAEncryption
         a7:ea:d6:67:6d:48:57:79:10:b6:48:23:17:1b:4b:ce:04:7f:
         b2:cb:c6:90:9a:e9:87:06:ab:19:37:bc:70:20:f4:50:e5:33:
         26:a1:d1:32:b1:05:68:24:7f:2b:fd:7c:f9:06:7e:30:e9:56:
         1c:6a:fe:4d:8b:5d:ba:e9:70:3b:9e:61:f0:c2:a0:25:07:56:
         f0:55:f1:bb:aa:2b:42:45:55:7b:7b:18:0d:32:66:de:9d:0c:
         11:d5:c4:15:46:00:c1:0e:70:e1:02:29:33:c4:42:ae:c6:92:
         57:e3:38:d9:a2:4d:b5:59:c4:a0:88:e2:94:c1:9d:6f:ef:02:
         7e:a4:b5:12:97:1e:d3:21:fb:22:a7:cd:2d:00:bd:8e:6d:fd:
         5d:b7:a3:d5:7e:11:8d:5d:94:44:a8:71:b0:89:8c:e4:9a:bc:
         43:9a:8c:05:8c:7d:61:0f:e0:b9:a0:e3:99:24:83:10:da:54:
         be:45:fa:cb:fa:d0:dc:95:77:53:f0:51:b5:bd:e7:db:7f:d1:
         f4:01:6b:d6:5f:01:cc:22:e6:c3:8a:88:1e:c8:4d:91:f7:a0:
         bc:82:d0:61:df:8f:d4:39:3b:0f:87:70:42:82:7d:06:5e:bd:
         19:32:20:96:eb:02:4e:9e:ee:c9:b5:4c:dc:68:d6:fe:1a:ae:
         87:7d:57:39
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA90wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMDEwMTUwOTMxNDlaFw0yMjA5MDIwOTMxNDlaMBgxFjAU
BgNVBAMTDTVmODgxNzBjLWNjMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC81gPDPGqNYM713CsHwdsEXHBLthBvYL4m2c1yfdHmxVxW0+SUnCHVmV68
p87ECcrp7HzOCUCqYsg8ZxwatZpdBdt7rpBFtiiQq4izXFSNcwFrwsGRWfp2StkW
EdvSiY9V4oLqRt+W6hYBdLZZEGdJjut0078QExtOGVgxIQ5Fdys2i5ZJ4I9LnN8i
NuRbZA/ArYO9VgIBMxU5rFTJixTmkGb80P9Tf900R3TqfUl1omVXZlQikTDxJnt9
UB765GOIPLFByEMIoMDhK+2+cOzC3tRB/xM4lklpzTaLaPuZD4k40P7K48rfnpTD
aMHLcpIvpNfJySDX+ptDL3JUecUvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU6O8z
udqaOAYMt0QjrrkcCj0mia8wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzQzRENCQjY0MEVDOTExRUJBQzdFMTcwRkY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKaELwwDQYJKoZIhvcNAQEL
BQADggEBAKfq1mdtSFd5ELZIIxcbS84Ef7LLxpCa6YcGqxk3vHAg9FDlMyah0TKx
BWgkfyv9fPkGfjDpVhxq/k2LXbrpcDueYfDCoCUHVvBV8buqK0JFVXt7GA0yZt6d
DBHVxBVGAMEOcOECKTPEQq7GklfjONmiTbVZxKCI4pTBnW/vAn6ktRKXHtMh+yKn
zS0AvY5t/V23o9V+EY1dlESocbCJjOSavEOajAWMfWEP4Lmg45kkgxDaVL5F+sv6
0NyVd1PwUbW959t/0fQBa9ZfAcwi5sOKiB7ITZH3oLyC0GHfj9Q5Ow+HcEKCfQZe
vRkyIJbrAk6e7sm1TNxo1v4arod9Vzk=
-----END CERTIFICATE-----

Generated at Sat Jun 12 12:13:19 2021 by LibreSSL & rpki-client.