Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B10BDD221E8D11F081E6A4DFDAE4EC9C.roa
File:                     B10BDD221E8D11F081E6A4DFDAE4EC9C.roa (raw, json)
Hash identifier:          pjE8GJ6xQR/uzh28D8t+d2Ho2XtoS1QgOPz2PKFF2io=
Subject key identifier:   1E:D8:9F:1F:EA:66:D1:50:35:AA:AB:35:0C:7F:90:75:41:51:EE:86
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       093C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B10BDD221E8D11F081E6A4DFDAE4EC9C.roa
Signing time:             Mon 21 Apr 2025 08:50:36 +0000
ROA not before:           Mon 21 Apr 2025 08:50:32 +0000
ROA not after:            Tue 21 Apr 2026 08:50:32 +0000
asID:                     18811
IP address blocks:        196.251.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2364 (0x93c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Apr 21 08:50:32 2025 GMT
            Not After : Apr 21 08:50:32 2026 GMT
        Subject: CN=680606dc-609b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1a:27:a0:4d:36:7a:64:40:6d:ad:37:47:0b:
                    d3:28:56:9e:61:84:7b:47:2a:10:47:86:5d:1d:ba:
                    77:c5:7b:a7:bf:23:3c:51:3a:6a:5d:b9:e0:2a:9d:
                    14:ff:da:d4:a1:7b:28:18:9e:82:2a:df:02:db:6a:
                    97:50:ab:6e:0a:b5:1e:ac:18:cc:f4:36:04:7c:a1:
                    96:26:bd:6d:95:bf:59:cc:40:5b:db:b4:8a:c5:56:
                    23:41:11:15:c7:41:36:be:79:17:31:ec:30:d1:33:
                    ed:e1:31:fd:9f:d1:b8:04:df:93:71:a6:48:32:5e:
                    63:49:89:42:75:48:8a:0d:55:af:f1:66:9a:7e:7c:
                    8d:42:20:02:78:49:5e:06:0b:c5:57:3f:9c:f9:dc:
                    e3:09:fb:8d:72:72:61:bc:f1:d3:08:44:3c:78:97:
                    32:b4:54:bf:2a:b9:b3:9e:37:90:8e:23:96:c6:84:
                    d1:87:25:65:e5:19:d2:e5:bf:0a:6a:86:7a:68:f7:
                    f0:da:f3:82:76:04:97:b7:00:7f:f1:0b:0c:13:c5:
                    7f:11:c2:c6:44:26:88:e9:9e:95:b3:b9:cd:d0:ee:
                    a1:2b:e3:41:bb:e7:d9:5b:60:0a:d4:57:dd:43:c0:
                    8f:d8:67:34:71:df:e2:4a:16:72:88:1b:35:d8:a9:
                    ce:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D8:9F:1F:EA:66:D1:50:35:AA:AB:35:0C:7F:90:75:41:51:EE:86
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B10BDD221E8D11F081E6A4DFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:b9:da:7f:19:1e:46:e5:d9:0b:d8:25:d4:83:02:fb:f4:4e:
         79:8f:ed:c5:5c:1d:24:f1:64:c2:c5:62:d3:62:4c:b6:be:97:
         ea:a1:d0:9e:46:29:bd:f8:36:07:ab:09:9e:50:75:ca:77:69:
         3e:ce:18:d2:52:eb:7d:7a:97:74:2b:1a:e1:f7:fd:d8:1f:d4:
         c8:44:50:ba:95:97:16:9c:5a:90:00:48:2d:4a:5f:55:fa:b8:
         e9:0a:a4:d8:d4:f0:ea:89:e8:60:03:67:33:4c:96:61:10:8f:
         1c:08:50:b1:2e:2d:bd:61:88:9a:ad:fc:99:49:15:1a:90:bc:
         92:7b:4a:c0:84:e3:14:d6:18:b8:96:1c:5e:f6:53:6b:87:d1:
         51:11:ed:06:27:7d:24:ee:80:30:9e:2e:38:17:98:66:c7:67:
         86:0b:d1:0b:74:a6:06:aa:90:0c:22:f4:ce:dd:73:4a:bb:ef:
         76:73:18:13:52:29:22:6d:7b:1d:9f:2c:dc:13:fa:58:65:81:
         9a:af:35:dd:00:38:9d:50:4e:23:9c:3d:4b:7c:1a:2b:d2:8e:
         af:1c:17:01:48:e0:45:77:3b:dd:f5:25:55:97:af:6c:d8:21:
         78:1c:8c:9b:46:ba:42:11:04:91:8d:f0:57:af:9f:26:60:97:
         6e:01:78:c2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCTwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA0MjEwODUwMzJaFw0yNjA0MjEwODUwMzJaMBgxFjAU
BgNVBAMTDTY4MDYwNmRjLTYwOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWGiegTTZ6ZEBtrTdHC9MoVp5hhHtHKhBHhl0dunfFe6e/IzxROmpdueAq
nRT/2tSheygYnoIq3wLbapdQq24KtR6sGMz0NgR8oZYmvW2Vv1nMQFvbtIrFViNB
ERXHQTa+eRcx7DDRM+3hMf2f0bgE35NxpkgyXmNJiUJ1SIoNVa/xZpp+fI1CIAJ4
SV4GC8VXP5z53OMJ+41ycmG88dMIRDx4lzK0VL8qubOeN5COI5bGhNGHJWXlGdLl
vwpqhnpo9/Da84J2BJe3AH/xCwwTxX8RwsZEJojpnpWzuc3Q7qEr40G759lbYArU
V91DwI/YZzRx3+JKFnKIGzXYqc4JAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUHtif
H+pm0VA1qqs1DH+QdUFR7oYwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0IxMEJERDIyMUU4RDExRjA4MUU2QTRERkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+2EwDQYJKoZIhvcNAQEL
BQADggEBAH+52n8ZHkbl2QvYJdSDAvv0TnmP7cVcHSTxZMLFYtNiTLa+l+qh0J5G
Kb34NgerCZ5Qdcp3aT7OGNJS6316l3QrGuH3/dgf1MhEULqVlxacWpAASC1KX1X6
uOkKpNjU8OqJ6GADZzNMlmEQjxwIULEuLb1hiJqt/JlJFRqQvJJ7SsCE4xTWGLiW
HF72U2uH0VER7QYnfSTugDCeLjgXmGbHZ4YL0Qt0pgaqkAwi9M7dc0q773ZzGBNS
KSJtex2fLNwT+lhlgZqvNd0AOJ1QTiOcPUt8GivSjq8cFwFI4EV3O931JVWXr2zY
IXgcjJtGukIRBJGN8FevnyZgl24BeMI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:07 2025 by rpki-client on console.sobornost.net