Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/0B623002CAC611EBA5FDE97DF8AEA228.roa
File:                     0B623002CAC611EBA5FDE97DF8AEA228.roa (raw, json)
Hash identifier:          7vqWPa/FVhwLVFvDKi4nljJ6iFh6Jfsi7spX+XnzJ70=
Subject key identifier:   CF:17:3A:55:73:F5:15:D4:26:83:63:8E:D6:3B:01:F1:A3:3E:8F:EA
Certificate issuer:       /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial:       0728
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/0B623002CAC611EBA5FDE97DF8AEA228.roa
Signing time:             Fri 11 Jun 2021 15:02:31 +0000
ROA not before:           Wed 23 Jun 2021 15:02:26 +0000
ROA not after:            Wed 25 Jun 2025 15:02:26 +0000
asID:                     11845
IP address blocks:        196.41.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1832 (0x728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
        Validity
            Not Before: Jun 23 15:02:26 2021 GMT
            Not After : Jun 25 15:02:26 2025 GMT
        Subject: CN=60c37b07-4e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:23:59:92:af:57:9b:de:a8:b4:39:3a:98:64:
                    f1:38:aa:96:ed:eb:55:e0:9b:fe:2c:e6:0a:f2:f8:
                    be:db:6d:38:70:b8:db:5c:41:41:03:ce:77:25:be:
                    79:a8:b3:9c:a3:ae:4a:19:d8:5c:7a:07:d6:ee:1b:
                    56:0b:82:2b:78:d9:59:4f:49:71:81:bc:ba:df:12:
                    5a:a8:7b:e2:8a:6d:b4:c1:29:2b:c3:b4:3e:d8:74:
                    b6:a8:f7:1d:aa:81:27:c6:af:ce:c0:e6:d1:82:cc:
                    87:83:2e:7d:17:ca:ab:90:a1:db:33:9c:6f:e1:88:
                    fe:2b:12:16:57:4d:33:18:1e:26:d1:99:01:d9:ff:
                    cf:68:54:10:d2:6f:9d:b6:bb:53:42:e6:a1:34:26:
                    1d:ea:9b:7b:37:e6:cf:24:8b:9d:6a:55:aa:ed:9d:
                    ef:37:79:dd:d0:af:86:3b:0d:da:c4:f7:ab:ba:92:
                    ef:fe:23:0e:1a:84:16:ed:2f:13:1d:8f:0e:b2:df:
                    7e:fa:e0:32:ee:38:4f:bd:78:2c:cf:ed:21:84:cc:
                    e6:5f:94:0d:ce:df:b5:9d:42:8f:52:dc:c6:d6:7c:
                    da:d3:a8:4e:77:4d:2d:dd:e5:26:a0:35:ab:5e:c0:
                    9a:32:3f:61:45:fd:f5:0a:6b:1c:7f:8e:1c:2d:1c:
                    4b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:17:3A:55:73:F5:15:D4:26:83:63:8E:D6:3B:01:F1:A3:3E:8F:EA
            X509v3 Authority Key Identifier:
                keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/0B623002CAC611EBA5FDE97DF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.41.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         35:6e:23:84:a5:b7:45:1b:19:5a:64:37:5e:78:82:38:e5:a7:
         da:8e:97:de:97:50:29:3c:c7:cb:f8:bc:a3:35:0a:8e:1d:05:
         8b:b0:3c:a6:f6:60:51:37:c7:82:29:d1:7e:79:40:bc:e8:ff:
         23:f0:43:d6:af:87:1c:ea:ce:3c:b3:5e:0a:d4:cc:ed:9e:fa:
         c0:e3:83:63:c5:d6:2b:7a:24:95:f2:3a:71:44:fc:37:1f:ee:
         e2:0d:cc:52:21:83:d8:92:de:aa:ae:3e:fb:0e:a6:88:33:a7:
         05:a8:32:fe:3d:3f:a5:09:cb:0a:a3:1f:83:4a:a2:36:c7:a6:
         37:b4:78:44:fa:d5:6f:0f:96:50:17:73:0f:cc:05:c3:b8:71:
         a7:57:8e:3e:80:8c:ce:24:03:c3:8f:44:e2:e2:c4:4e:f9:9d:
         df:a1:fa:95:9d:ca:77:9f:97:ea:6e:9e:12:4f:03:ce:d1:8d:
         ce:b7:3b:a1:7f:66:13:52:5c:1b:51:ae:e3:29:85:61:f5:b7:
         e0:a4:58:24:48:26:57:1e:c5:32:18:81:29:11:ff:31:91:00:
         46:48:3a:dc:95:28:39:46:df:48:82:db:3d:8f:a6:1e:5d:88:
         37:5d:b7:66:3c:17:78:78:de:7f:93:c3:4f:c2:4b:6a:3e:eb:
         b1:3b:c8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:13:16 2024 by rpki-client on console-ams.rpki-client.org