Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/548E133E5DE711EEB755B2324AD9E6FC.roa
File:                     548E133E5DE711EEB755B2324AD9E6FC.roa (raw, json)
Hash identifier:          r0J0z4hrW5cUl3NFRDuep19YNLEl5TwEn4FljlyynuU=
Subject key identifier:   1E:AF:FD:CB:18:E3:AB:69:7D:E9:F4:E7:04:F4:BA:9A:1A:D4:8B:DF
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0C2F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/548E133E5DE711EEB755B2324AD9E6FC.roa
Signing time:             Thu 28 Sep 2023 10:11:03 +0000
ROA not before:           Thu 28 Sep 2023 10:11:00 +0000
ROA not after:            Sat 28 Sep 2030 10:11:00 +0000
asID:                     203999
IP address blocks:        161.123.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 May 2024 00:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3119 (0xc2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 28 10:11:00 2023 GMT
            Not After : Sep 28 10:11:00 2030 GMT
        Subject: CN=65155137-25be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e0:83:12:7e:16:c1:4f:a5:14:67:5c:48:40:
                    f8:c5:47:3f:f4:05:5b:79:12:25:f8:ba:6b:f5:b9:
                    4a:54:12:cd:68:f2:c6:c4:3d:a8:43:22:90:73:63:
                    51:e2:6e:98:36:e0:e5:b9:03:82:00:b8:5d:a8:fd:
                    c3:79:20:f6:40:ba:62:a8:b1:93:5d:a8:c2:d5:f0:
                    8f:4a:84:8d:28:6c:51:91:d5:61:22:37:fc:0d:79:
                    56:a1:23:02:a6:4d:93:43:d4:c4:4c:eb:7b:3a:b7:
                    d4:33:6f:59:29:73:93:8c:9a:97:c4:39:40:0b:05:
                    da:4d:91:14:da:be:b2:68:5e:e1:89:b2:a9:a2:1f:
                    22:91:6c:a2:50:dc:42:bb:dc:2a:83:48:b5:8e:d1:
                    5c:ba:ba:c4:b9:bb:94:43:e8:4d:21:a4:95:c8:29:
                    3b:e7:8f:e3:b2:05:6b:71:40:a2:c6:b6:25:37:69:
                    0a:f5:fb:a0:04:f9:52:30:95:6d:92:22:5d:a2:1a:
                    9e:df:d0:f0:8f:7b:4e:06:cb:f2:e9:30:97:22:c9:
                    ff:d0:0b:89:19:d3:ee:b9:fc:a9:54:52:9b:44:11:
                    78:94:08:e7:55:4f:45:34:b3:ca:41:35:2f:f8:f3:
                    95:6e:e2:95:e8:f6:99:eb:2d:2b:cc:be:2c:a3:77:
                    24:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AF:FD:CB:18:E3:AB:69:7D:E9:F4:E7:04:F4:BA:9A:1A:D4:8B:DF
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/548E133E5DE711EEB755B2324AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:24:b2:ba:a9:17:a0:74:e1:39:82:2f:eb:2d:9b:b9:82:62:
         a4:a1:78:15:52:b0:30:fa:71:c5:8a:d8:f8:de:42:fd:95:f3:
         d9:55:d5:e9:7f:46:56:90:11:b7:3d:7c:aa:47:03:b8:93:1c:
         e8:c4:8a:8d:cb:61:d6:6d:21:cb:3c:81:50:6f:b6:56:59:b1:
         7d:9f:05:3d:57:e5:b7:30:73:8e:a1:9f:77:bf:a2:5d:64:15:
         de:cf:b6:3b:2b:d2:db:9e:17:bc:11:7e:51:44:c8:95:fd:33:
         02:01:36:51:4f:35:47:9e:6c:75:86:66:6c:c2:bf:1d:db:d9:
         f7:e8:10:4d:df:6d:1f:13:42:36:fd:3d:68:6a:8e:e7:db:3c:
         7e:11:82:d4:71:23:2a:7d:98:d5:29:b0:34:b3:60:16:6d:e6:
         4d:13:18:80:3e:8a:94:f7:1c:80:13:ab:23:ed:44:78:5f:30:
         d3:21:a7:2a:56:33:e1:1c:4d:60:71:9f:e6:f0:c0:40:0c:90:
         6f:71:68:e1:87:23:ce:d5:94:f3:ca:5c:42:ab:19:08:be:36:
         fa:79:75:f3:11:f5:57:96:9e:ce:58:d6:90:e1:1d:da:2c:90:
         68:f8:a9:90:47:f3:24:bf:a0:56:2e:3b:60:a1:b1:76:bb:72:
         3f:d5:a2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:04:07 2024 by rpki-client on console-ams.rpki-client.org