Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/9B03ED744D8911EA891A8E19F8AEA228.roa
File:                     9B03ED744D8911EA891A8E19F8AEA228.roa (raw, json)
Hash identifier:          uTWwiWn04RyJiv5gTpWxSE7SlxQ+y8L3lHkksdILDSA=
Subject key identifier:   C9:85:2B:94:9F:1E:83:32:5B:16:CA:F6:3F:36:D1:46:5E:F2:DA:15
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       0159
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/9B03ED744D8911EA891A8E19F8AEA228.roa
Signing time:             Wed 12 Feb 2020 11:20:03 +0000
ROA not before:           Wed 12 Feb 2020 11:19:53 +0000
ROA not after:            Tue 12 Feb 2030 11:19:53 +0000
asID:                     327687
IP address blocks:        2c0f:f6d0:c1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Feb 12 11:19:53 2020 GMT
            Not After : Feb 12 11:19:53 2030 GMT
        Subject: CN=5e43df63-ba4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:df:74:8f:e3:35:d3:14:7a:94:5c:99:22:7e:
                    3e:03:02:31:04:c9:3c:b9:46:3f:81:30:ab:de:38:
                    98:e3:0a:fb:a8:91:1b:ac:37:f6:ec:10:63:0b:d6:
                    15:7b:54:04:87:29:9c:8f:ce:e6:1f:fa:e5:5c:28:
                    39:13:0e:71:3d:d6:01:9c:36:0a:50:95:75:91:d8:
                    8a:ad:f3:1a:93:7d:20:aa:ee:81:6b:2a:e5:7f:ef:
                    b9:ba:49:d3:20:a4:70:e6:d3:e4:67:5b:67:d4:53:
                    55:3a:7d:7b:7b:73:80:b4:ba:77:db:c2:bc:14:14:
                    c7:98:ba:01:24:82:e0:a4:7b:70:0a:fa:84:ce:77:
                    cc:a5:5c:c6:f3:9d:b8:27:49:1e:83:dd:1e:a1:c8:
                    b4:39:b6:ff:ea:dc:35:1e:dc:00:3d:29:d3:fd:dc:
                    9d:dd:e6:f8:88:57:09:40:26:cf:42:52:db:fd:b3:
                    8b:fa:76:d7:92:72:c3:24:db:4d:81:af:87:ac:72:
                    b7:6f:8e:f3:d0:f7:89:11:0a:ef:57:cf:79:ee:d9:
                    8c:aa:f2:c6:44:19:b7:ae:de:14:fa:a6:37:57:ae:
                    af:10:39:30:9d:85:64:a3:48:af:40:5a:8c:77:77:
                    e8:21:d1:16:fe:2e:d6:23:70:a6:9c:e9:2c:9c:64:
                    4f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:85:2B:94:9F:1E:83:32:5B:16:CA:F6:3F:36:D1:46:5E:F2:DA:15
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/9B03ED744D8911EA891A8E19F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f6d0:c1::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:ff:f3:eb:2a:bf:3e:af:25:8b:5d:35:aa:92:f9:4f:fd:be:
         ba:58:cf:2a:bf:2a:0f:5d:9c:81:74:50:26:8d:04:d5:d5:6b:
         1f:44:08:cb:23:26:e1:6e:80:d9:55:84:cc:34:01:ec:98:6c:
         86:af:8b:df:59:cf:67:09:70:93:af:c2:2a:b8:0a:4f:13:a0:
         78:9a:89:45:e5:88:ad:01:4a:83:f0:e5:fb:db:0e:46:b0:f0:
         21:e3:85:68:67:2a:81:52:5d:91:41:ab:94:7a:eb:7d:69:56:
         58:20:c2:3e:fb:17:9a:8a:3c:1e:ff:55:81:57:24:06:e4:09:
         55:ca:bd:20:21:54:57:2e:2a:96:12:ab:87:c3:5b:f6:2f:1e:
         df:88:27:59:8c:d8:39:95:51:dd:2c:6d:cb:44:cf:7a:8c:4a:
         75:03:de:f6:04:13:69:d6:a9:a4:0a:8d:f9:9a:cd:53:57:97:
         aa:72:d6:65:37:41:24:22:5f:f4:a7:c1:1e:bc:25:dd:d5:8b:
         06:52:aa:15:d8:a7:53:ea:76:c8:8b:ab:cb:3e:0a:02:90:07:
         3b:3f:d3:f3:e0:2a:9e:26:3b:21:30:80:f7:b8:de:f8:8c:1d:
         c4:21:22:da:a9:71:da:09:6a:ff:a9:ed:da:0b:78:d2:68:2d:
         63:82:b2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:46:45 2024 by rpki-client on console-fra.rpki-client.org