Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/65F83732BBBB11ECBA314DBF5A40D577.roa
File:                     65F83732BBBB11ECBA314DBF5A40D577.roa (raw, json)
Hash identifier:          epfrVy6+nCAcoslMf2R+9o/Ht5LEPr/5c9VUnDGzr4M=
Subject key identifier:   D9:26:CC:E2:79:11:08:17:5F:6D:03:D2:3D:3E:A5:C6:B2:BB:53:91
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0827
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/65F83732BBBB11ECBA314DBF5A40D577.roa
Signing time:             Thu 14 Apr 2022 06:23:29 +0000
ROA not before:           Thu 14 Apr 2022 06:23:25 +0000
ROA not after:            Wed 14 Apr 2027 06:23:25 +0000
asID:                     397373
IP address blocks:        154.16.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2087 (0x827)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Apr 14 06:23:25 2022 GMT
            Not After : Apr 14 06:23:25 2027 GMT
        Subject: CN=6257bde0-c5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:df:c7:b4:0d:60:39:e3:5c:bf:8e:05:2e:
                    17:ec:e6:f2:91:54:e5:33:45:fc:5e:d5:95:aa:e6:
                    9e:76:65:b5:8e:ba:20:73:d6:99:08:80:8d:74:c4:
                    79:59:36:1b:7b:8e:bb:d9:55:6f:90:47:43:e5:fc:
                    3f:95:c1:b9:05:e3:1e:8c:cd:c6:5a:a6:67:4a:fb:
                    d8:ab:81:71:f1:28:6a:1c:26:62:b3:17:3e:2f:db:
                    e1:96:2d:0d:93:53:f8:03:0a:15:45:dc:de:fd:c6:
                    2c:c5:57:08:ef:e0:14:e0:92:ce:5f:9c:ea:1a:ab:
                    a2:9e:f4:34:4e:44:dc:5d:15:d1:59:3f:3c:f9:50:
                    c4:1e:51:bf:e2:8c:1e:01:c4:80:0f:6d:59:ae:aa:
                    a8:76:8c:df:70:0f:45:7b:72:e9:ce:25:6d:3f:5c:
                    69:52:54:9b:c9:fe:97:8c:a6:4e:f5:6f:cd:ed:26:
                    38:f1:29:ea:fd:a0:06:35:54:89:4b:44:82:35:e9:
                    77:9e:33:d5:71:55:af:d4:4c:e5:a2:7b:21:0e:0c:
                    8c:aa:45:d8:65:d5:d3:a7:d8:f6:60:f6:b6:51:41:
                    96:eb:b7:2b:53:dd:b2:8d:30:1b:59:9e:54:3c:de:
                    09:26:ee:d7:17:af:bc:0c:8c:df:5e:ea:13:69:68:
                    d2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:26:CC:E2:79:11:08:17:5F:6D:03:D2:3D:3E:A5:C6:B2:BB:53:91
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/65F83732BBBB11ECBA314DBF5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:2c:d6:88:d0:3d:f6:95:34:97:e6:41:59:c0:9b:34:b8:8c:
         76:f5:24:b7:4e:ea:4d:78:ba:32:81:c4:db:16:5d:e8:00:69:
         15:ad:65:b1:8d:d9:ec:65:eb:0e:15:5b:68:ca:89:52:af:6e:
         0b:d7:e1:99:1f:8e:3e:30:57:05:39:d1:5b:95:47:22:2a:f5:
         84:22:d3:84:9a:d2:4f:ea:5e:30:7e:f7:d6:4a:af:a1:4c:82:
         ab:35:89:fd:1b:95:c6:01:96:fe:8b:47:30:6c:11:e3:c6:7d:
         d2:39:6d:d1:9b:98:61:29:1f:6f:55:fb:da:d4:ae:a6:9e:4c:
         32:2a:9f:e3:ae:d2:62:2e:f1:f9:e3:9d:a5:1f:1e:c1:f9:08:
         1f:3e:63:3b:6d:08:b6:2a:e6:6e:ce:b6:00:8e:3d:1e:91:0d:
         4e:1e:ec:23:96:7a:6f:03:9a:e7:49:27:10:a8:c6:4d:cf:2b:
         ac:76:ad:b0:de:fc:f9:e1:17:35:15:e7:c0:ac:31:e5:2c:6e:
         28:09:07:1a:26:69:ef:3d:17:be:6d:30:d5:c7:34:7e:61:bb:
         9c:8c:57:0f:83:73:64:ab:eb:4d:3c:31:10:94:ab:3f:9f:6f:
         e5:22:84:3d:08:3d:46:a2:2c:3c:60:8f:ab:48:98:3a:3d:ee:
         55:a6:8a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:58:07 2024 by rpki-client on console-ams.rpki-client.org