Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/025D78D4F66611EA914DBA42F8AEA228.roa
File:                     025D78D4F66611EA914DBA42F8AEA228.roa (raw, json)
Hash identifier:          akSHB/5SMuLQ6lBJAS2DTSq7GYWXcrmqS3/zmpZesBY=
Subject key identifier:   CA:C4:7F:52:7C:B7:8A:18:A5:BA:C7:EA:11:76:6F:43:0E:DC:23:A5
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       0296
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/025D78D4F66611EA914DBA42F8AEA228.roa
Signing time:             Mon 14 Sep 2020 08:40:58 +0000
ROA not before:           Mon 14 Sep 2020 08:40:53 +0000
ROA not after:            Sat 14 Sep 2030 08:40:53 +0000
asID:                     327687
IP address blocks:        196.43.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 May 2024 00:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662 (0x296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Sep 14 08:40:53 2020 GMT
            Not After : Sep 14 08:40:53 2030 GMT
        Subject: CN=5f5f2c9a-4ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b3:5b:f3:19:58:48:45:e7:9e:30:ba:e9:d9:
                    46:a5:a4:61:46:3d:f2:f4:47:e9:ce:be:1a:76:ef:
                    52:ff:ba:35:5f:16:fb:5a:6d:60:a5:87:7c:ee:94:
                    b1:66:e0:00:c4:0b:4e:94:95:68:d7:3f:9d:2c:67:
                    08:f5:02:f7:40:0c:13:0e:fc:a0:a6:8c:b1:bf:df:
                    cb:48:db:45:d5:7b:e6:b1:68:0b:3a:22:6b:4c:1c:
                    6a:3e:dc:f8:0e:3d:06:e2:a4:f9:fb:ef:9a:d1:96:
                    6a:05:c6:42:f5:91:29:43:ed:f3:27:b8:aa:56:cc:
                    1c:69:da:8c:3e:1d:49:4f:18:01:7c:0b:98:b7:c2:
                    9c:d0:b5:5e:55:34:02:3b:10:d5:17:e5:46:0d:06:
                    98:1e:28:88:f0:1f:7c:85:57:31:1b:c8:82:61:9f:
                    ca:54:8b:00:56:e9:2c:8d:b9:69:d8:c9:08:bc:15:
                    d5:49:b9:37:8b:7f:8e:3d:fd:db:16:3a:e3:2d:b1:
                    60:71:07:42:f1:89:98:f1:eb:cf:39:80:32:64:a4:
                    39:d5:ce:e7:94:51:09:f7:d7:d0:ab:63:e7:52:09:
                    40:31:76:75:7d:a6:87:39:69:f1:9a:56:0c:7d:16:
                    7d:a2:1e:81:68:f2:3c:9c:78:85:cf:b8:0c:0d:f2:
                    5f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C4:7F:52:7C:B7:8A:18:A5:BA:C7:EA:11:76:6F:43:0E:DC:23:A5
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/025D78D4F66611EA914DBA42F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:47:bd:87:d5:2d:fc:68:6b:8f:97:c8:d0:14:34:37:e1:55:
         0c:bc:6b:e8:f0:fd:d6:49:79:45:f3:9a:5e:84:55:2e:ae:a2:
         0f:ad:71:f0:c8:83:d0:94:1a:24:cf:1d:d8:9d:8e:79:39:7f:
         66:7c:66:f0:d1:d2:8b:88:0c:82:a4:ef:49:83:8e:70:36:a1:
         11:bd:64:b9:95:40:5a:1e:da:4d:45:de:df:f8:ee:6e:5d:1f:
         0f:30:59:66:9e:9e:41:d3:e7:a4:e8:7a:f1:29:4d:7c:5a:85:
         8a:9c:8b:af:d4:4c:3a:0e:68:15:3b:21:75:73:12:07:3b:47:
         dc:74:a6:6f:15:7d:05:85:a7:8c:c1:c1:61:ce:27:25:c9:d9:
         5e:c1:7d:30:a2:f0:33:4a:50:df:84:dd:3a:a4:c2:85:fb:9b:
         85:8d:3b:15:dc:77:64:32:34:4a:d9:bd:3f:11:3d:0a:49:78:
         dc:83:14:0d:29:f1:e6:b9:f1:e8:22:58:bb:7f:ae:9e:17:bb:
         9f:85:9b:95:d3:ca:38:1c:62:27:34:c4:9a:30:36:fa:15:39:
         c7:33:39:4d:80:b9:51:85:69:76:60:85:6e:50:6e:8e:8f:7b:
         e6:15:1f:86:05:01:e3:8d:5f:38:10:de:f1:d3:1b:2f:c5:fb:
         f4:9a:e6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:00:51 2024 by rpki-client on console-ams.rpki-client.org