Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/747238C00E8211ED8FB047C1F1222468.roa
File:                     747238C00E8211ED8FB047C1F1222468.roa (raw, json)
Hash identifier:          /BmnJxvPljZxawxWR/cI1zHIIBrCMZW/Apy+gZuJlHU=
Subject key identifier:   7D:BF:6F:E9:67:26:1C:EF:A8:82:DF:2A:1D:0B:63:52:02:BD:B9:1C
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       090E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/747238C00E8211ED8FB047C1F1222468.roa
Signing time:             Thu 28 Jul 2022 14:34:58 +0000
ROA not before:           Thu 28 Jul 2022 14:34:54 +0000
ROA not after:            Sun 28 Jul 2024 14:34:54 +0000
asID:                     46337
IP address blocks:        154.16.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 May 2024 00:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2318 (0x90e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jul 28 14:34:54 2022 GMT
            Not After : Jul 28 14:34:54 2024 GMT
        Subject: CN=62e29e92-61a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8e:d2:60:9f:d1:23:a3:63:8c:2b:5f:83:fd:
                    06:5b:ca:0d:76:d4:3c:78:6d:7d:4b:cf:7b:dd:47:
                    65:e3:95:df:4f:ab:6a:30:63:26:b1:1d:3c:4a:9a:
                    62:96:c4:57:05:f8:e6:55:4e:fc:4d:45:c5:84:a6:
                    b3:90:cd:d1:62:4b:20:ca:78:be:ec:41:ec:06:3c:
                    42:26:27:55:27:15:28:19:77:17:79:d8:3f:77:06:
                    4d:c6:f4:ed:28:af:2d:ac:10:fb:c9:74:96:55:4f:
                    fb:a7:0f:70:b5:1a:ed:8d:c8:27:89:c3:fe:df:27:
                    d2:8e:f8:87:b1:32:d8:da:9d:ce:dc:78:c9:f9:6e:
                    aa:de:d0:14:4b:27:6c:05:2e:1a:c1:fa:44:0d:99:
                    90:69:b4:2b:e0:ca:1a:59:01:be:42:8a:42:84:35:
                    e2:ca:ad:a0:17:17:df:04:5d:02:e9:d8:8b:06:dc:
                    0d:bc:68:dd:01:b1:5c:ac:06:d1:50:d4:6e:9e:3f:
                    7b:6c:af:ac:d1:79:b1:c4:ad:f6:b6:ec:0f:5d:be:
                    6f:6b:4c:67:a3:6c:a3:2e:d3:aa:84:27:b2:a9:9f:
                    c8:24:ed:90:4b:45:00:b0:51:e0:34:2c:08:41:19:
                    5f:bf:6d:8f:b7:1b:99:4f:f5:83:94:47:b2:b5:0f:
                    4c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BF:6F:E9:67:26:1C:EF:A8:82:DF:2A:1D:0B:63:52:02:BD:B9:1C
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/747238C00E8211ED8FB047C1F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:bd:05:39:79:82:68:3c:e1:7b:4a:1d:35:c7:91:38:a9:b5:
         b5:55:07:e0:5b:1c:ee:29:84:12:93:78:22:f5:4c:fc:8a:ae:
         ac:7b:97:19:d6:bf:0f:fd:a7:fb:8c:c6:dc:2f:94:f4:52:7d:
         50:b5:c2:1c:dd:cf:0b:86:ce:db:0d:e8:32:5a:ef:c2:90:a8:
         1f:91:39:77:b4:ea:66:20:30:22:93:63:89:9d:a3:01:48:4a:
         0c:77:b0:ff:33:2b:64:47:d0:5d:b9:d7:5d:3e:bc:0e:f5:cb:
         18:92:0e:ff:89:a7:cb:48:27:d2:6d:83:21:b6:6a:80:a5:64:
         48:03:a1:e4:b0:f5:f5:94:80:a9:70:52:78:b8:18:7c:ae:2b:
         d6:a6:ba:38:c9:fe:a2:0e:9b:03:78:cd:f0:c2:42:ec:5a:55:
         79:15:96:9e:b5:ef:8c:ed:2b:e9:2d:1e:6f:4c:54:e5:3a:cc:
         1e:82:c3:05:f9:f2:c6:d9:ff:d1:bf:28:95:f3:1f:1e:e1:70:
         d3:24:d1:5d:41:a0:a0:39:fa:c5:6a:97:35:40:39:76:f1:97:
         81:0d:25:ee:fe:2b:6f:df:00:18:b0:8f:24:cd:7d:29:d6:cd:
         6d:63:6a:b1:61:72:c4:f3:59:94:3a:7e:db:1f:d2:ce:48:db:
         50:ee:d5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:46:36 2024 by rpki-client on console-fra.rpki-client.org