Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/F82216A4F3B111EC98A0EF8DF1222468.roa
File:                     F82216A4F3B111EC98A0EF8DF1222468.roa (raw, json)
Hash identifier:          SP8Vj8sn3yO1o3eqk7VLBWas1C5k2savNlZKYNuaOto=
Subject key identifier:   87:BD:B2:8C:C3:EB:99:00:19:BA:5E:10:64:9C:64:64:B2:5D:B7:D4
Certificate issuer:       /CN=F3617560AF/serialNumber=559608F1905C17B2C1EB888134CC383C8FD4EEF4
Certificate serial:       06
Authority key identifier: 55:96:08:F1:90:5C:17:B2:C1:EB:88:81:34:CC:38:3C:8F:D4:EE:F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/F82216A4F3B111EC98A0EF8DF1222468.roa
Signing time:             Fri 24 Jun 2022 11:37:04 +0000
ROA not before:           Fri 24 Jun 2022 11:36:54 +0000
ROA not after:            Wed 31 Dec 2042 11:36:54 +0000
asID:                     4755
IP address blocks:        41.136.0.0/16 maxlen: 24
                          41.212.128.0/17 maxlen: 24
                          196.27.64.0/19 maxlen: 24
                          196.192.96.0/20 maxlen: 24
                          197.224.0.0/14 maxlen: 24
                          2001:4290::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 24 May 2024 00:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3617560AF/serialNumber=559608F1905C17B2C1EB888134CC383C8FD4EEF4
        Validity
            Not Before: Jun 24 11:36:54 2022 GMT
            Not After : Dec 31 11:36:54 2042 GMT
        Subject: CN=62b5a1e0-190a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:88:bd:f6:d2:56:cb:a5:31:f2:a3:50:41:27:
                    a1:05:d6:d1:ad:ed:82:da:e1:14:a4:45:ab:00:48:
                    d4:87:74:72:67:b4:4e:2c:93:a6:c5:a7:06:1e:ed:
                    df:14:ec:8c:80:bd:fd:ba:0e:e2:43:f0:0e:63:f9:
                    3f:d6:13:12:c9:b5:68:a3:14:be:03:25:da:1f:12:
                    de:f7:90:81:4f:c3:fb:a9:19:3e:bc:91:b2:f5:4b:
                    49:d1:a4:9d:1b:07:0d:da:4f:38:35:26:cb:8d:9d:
                    93:c8:ec:f8:b5:5a:71:c2:72:3d:58:c6:32:97:bb:
                    ac:64:6f:69:31:14:a9:95:02:bb:16:31:48:5e:49:
                    61:e1:83:d9:18:61:d5:50:48:01:07:29:b2:03:5e:
                    2c:86:af:c8:32:84:25:dc:be:bd:2b:c4:d3:fe:6c:
                    de:ff:a7:ee:ba:35:5f:0a:7a:da:a1:49:71:6d:42:
                    b2:02:d9:4f:47:f2:af:4f:8b:46:bc:f1:b2:2e:08:
                    50:06:af:94:fb:be:b2:15:12:42:b3:d5:5c:a8:cc:
                    0c:0d:ca:54:8c:be:4b:c4:d2:13:29:ac:d6:b9:6e:
                    af:c4:ed:f0:69:c5:35:16:2a:f8:08:a6:d5:f6:29:
                    7b:c7:8a:ed:de:6d:fc:e5:e9:ee:1a:92:b9:8e:58:
                    2c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BD:B2:8C:C3:EB:99:00:19:BA:5E:10:64:9C:64:64:B2:5D:B7:D4
            X509v3 Authority Key Identifier:
                keyid:55:96:08:F1:90:5C:17:B2:C1:EB:88:81:34:CC:38:3C:8F:D4:EE:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/F82216A4F3B111EC98A0EF8DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.136.0.0/16
                  41.212.128.0/17
                  196.27.64.0/19
                  196.192.96.0/20
                  197.224.0.0/14
                IPv6:
                  2001:4290::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:f7:8d:1a:d7:49:92:6f:4b:97:82:c0:ab:a2:b5:a7:08:5f:
         91:c4:59:b5:b2:86:87:90:b5:03:12:7a:ae:46:77:29:da:74:
         83:a0:fc:d5:42:f0:db:83:6c:6f:ca:47:87:2e:00:89:52:13:
         7f:11:60:09:bf:7c:bd:49:5d:62:ef:a1:3d:0b:48:71:18:ab:
         3a:25:08:ca:d1:c3:cc:da:9a:d5:4c:dc:75:55:06:41:9a:4e:
         12:3b:a1:e4:40:82:86:6a:1d:b1:e9:e1:35:fb:20:73:7d:c2:
         b1:23:83:b3:54:d6:38:a5:31:dc:57:c2:ae:ac:4c:a1:c3:b7:
         cf:25:57:78:a4:07:be:05:dc:ed:b4:cb:23:69:09:e3:cf:57:
         31:08:a4:db:46:a4:6c:5b:04:fd:2b:18:02:4d:6b:64:8c:a9:
         d8:50:c5:c7:ac:4c:12:92:90:7a:36:f7:30:a4:64:46:f8:db:
         d8:fd:12:4a:cc:7b:5b:df:56:cb:46:39:45:92:4b:e8:7f:0d:
         7f:12:c6:01:46:de:0e:07:fe:ce:31:d9:97:e5:92:fa:f2:51:
         e7:81:ee:8a:34:e5:d8:ec:5c:a7:97:ac:39:6d:36:e0:fa:52:
         d4:aa:e3:8d:2f:fc:64:b3:7e:f8:62:50:1b:5d:52:ae:b6:0c:
         88:8e:90:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 02:55:18 2024 by rpki-client on console-ams.rpki-client.org