Route Origin Authorization
Location:                 rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25F345E0F0E711EBB982081DD8A014CE.roa (download)

Subject key identifier:   3C:C2:AB:38:E6:AA:B1:7C:97:A1:53:52:58:4B:18:52:F7:49:FB:2B 
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
asID:                     AS21859
Prefixes:
    1: 154.95.38.0/23 (max: 24)

--
$ test-roa -p rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25F345E0F0E711EBB982081DD8A014CE.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2149 (0x865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 30 03:35:31 2021 GMT
            Not After : Sep 15 03:35:31 2022 GMT
        Subject: CN=61037388-beb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6b:b8:a7:18:1c:34:5d:b6:6c:13:e7:91:e3:
                    86:af:1b:35:1b:11:3d:df:36:0b:db:b2:64:92:8e:
                    d5:e3:7a:cd:0b:6c:5b:f1:be:73:b1:a7:d0:99:39:
                    e5:3b:14:13:8d:46:9c:99:e9:8d:53:62:b5:70:af:
                    e3:b6:59:4f:e5:32:5c:94:5f:13:b2:80:78:b9:36:
                    06:c6:88:e0:ed:2f:e1:cb:0b:44:10:cf:8e:df:37:
                    29:87:44:79:f5:67:5a:24:a5:39:bf:8a:01:34:04:
                    ed:e0:21:77:d8:bd:6e:a6:a7:e2:02:90:53:d2:30:
                    23:4e:e2:8d:d2:7b:2e:e8:1b:b2:7f:7f:0b:ad:9a:
                    de:03:bf:8d:c9:5f:5c:6b:f6:84:d6:46:1c:bb:db:
                    ef:ad:b5:00:d0:2d:e9:15:b9:2f:9b:5c:52:d6:56:
                    e3:f3:94:46:9f:f1:ef:56:bc:11:54:41:13:e0:bb:
                    a4:59:db:d1:b7:46:a2:f2:c1:03:32:37:16:dc:b3:
                    2f:f2:7b:41:30:99:77:bc:bb:80:ad:b6:95:02:3b:
                    6a:d7:e4:d2:9e:75:d1:62:ca:dd:cd:62:1b:87:df:
                    57:f8:7c:31:34:d7:82:07:28:0b:c3:e7:04:ec:dc:
                    38:bf:48:bf:0a:e6:42:a7:9e:61:f3:82:3f:a2:37:
                    13:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3C:C2:AB:38:E6:AA:B1:7C:97:A1:53:52:58:4B:18:52:F7:49:FB:2B
            X509v3 Authority Key Identifier: 
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25F345E0F0E711EBB982081DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                0.0.....0....._&
    Signature Algorithm: sha256WithRSAEncryption
         d0:c8:8a:3f:f9:d6:7a:32:87:e6:af:ff:cf:6d:70:01:b1:fc:
         b5:2a:fd:3e:23:0e:55:c9:09:a6:97:84:d3:11:bc:b5:df:74:
         4e:56:df:16:53:64:a5:ca:68:bf:9c:0f:f3:78:bc:12:53:0d:
         20:05:40:a3:a7:4b:a3:8c:7f:bc:ed:78:8b:96:72:cc:0a:b6:
         45:b7:21:f5:eb:1e:ae:b9:6f:c4:03:62:35:53:08:88:27:f5:
         f8:09:88:08:83:52:cd:2b:37:e4:71:be:45:fd:ca:38:75:8c:
         4b:fc:77:7e:a5:2e:a1:38:58:cd:d1:a8:8a:fe:5f:f0:26:45:
         33:8e:83:bf:0c:61:2c:3c:49:c6:18:b4:94:7a:1b:8c:b7:50:
         63:45:0c:96:1e:79:40:94:25:30:e8:15:c9:7f:da:4e:15:16:
         eb:c5:70:ed:1c:2a:bb:5e:ed:99:ce:52:82:10:19:3f:ba:d0:
         00:fc:fa:bd:6f:63:64:5f:83:5a:4f:4b:d4:db:c2:e7:83:bd:
         7c:34:38:fa:39:a7:01:b9:a4:9e:a2:d9:37:88:96:94:10:88:
         99:09:ea:a4:9c:38:bd:76:55:af:6c:fe:c1:a6:4c:97:1b:ce:
         0c:19:71:f2:13:84:b5:06:50:f7:11:59:11:1f:04:f4:5e:43:
         6c:71:89:5c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTA3MzAwMzM1MzFaFw0yMjA5MTUwMzM1MzFaMBgxFjAU
BgNVBAMMDTYxMDM3Mzg4LWJlYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDja7inGBw0XbZsE+eR44avGzUbET3fNgvbsmSSjtXjes0LbFvxvnOxp9CZ
OeU7FBONRpyZ6Y1TYrVwr+O2WU/lMlyUXxOygHi5NgbGiODtL+HLC0QQz47fNymH
RHn1Z1okpTm/igE0BO3gIXfYvW6mp+ICkFPSMCNO4o3Sey7oG7J/fwutmt4Dv43J
X1xr9oTWRhy72++ttQDQLekVuS+bXFLWVuPzlEaf8e9WvBFUQRPgu6RZ29G3RqLy
wQMyNxbcsy/ye0EwmXe8u4CttpUCO2rX5NKeddFiyt3NYhuH31f4fDE014IHKAvD
5wTs3Di/SL8K5kKnnmHzgj+iNxNFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUPMKr
OOaqsXyXoVNSWEsYUvdJ+yswHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzI1RjM0NUUwRjBFNzExRUJCOTgyMDgxREQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGaXyYwDQYJKoZIhvcNAQEL
BQADggEBANDIij/51noyh+av/89tcAGx/LUq/T4jDlXJCaaXhNMRvLXfdE5W3xZT
ZKXKaL+cD/N4vBJTDSAFQKOnS6OMf7zteIuWcswKtkW3IfXrHq65b8QDYjVTCIgn
9fgJiAiDUs0rN+RxvkX9yjh1jEv8d36lLqE4WM3RqIr+X/AmRTOOg78MYSw8ScYY
tJR6G4y3UGNFDJYeeUCUJTDoFcl/2k4VFuvFcO0cKrte7ZnOUoIQGT+60AD8+r1v
Y2Rfg1pPS9TbwueDvXw0OPo5pwG5pJ6i2TeIlpQQiJkJ6qScOL12Va9s/sGmTJcb
zgwZcfIThLUGUPcRWREfBPReQ2xxiVw=
-----END CERTIFICATE-----

Generated at Tue Aug 10 11:47:14 2021 by LibreSSL & rpki-client.