Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/0193F69A532F11EC9ACDB21DD8A014CE.roa
File:                     0193F69A532F11EC9ACDB21DD8A014CE.roa (raw, json)
Hash identifier:          iI3TqolSTdmVetsfOW0QQOug0jNNQHUuD4Xvi/Pq7D4=
Subject key identifier:   F5:A9:35:BA:B2:D4:CC:CB:54:AA:A2:82:DD:62:0D:2E:38:31:60:C0
Certificate issuer:       /CN=F363212DAF/serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Certificate serial:       0D
Authority key identifier: EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/0193F69A532F11EC9ACDB21DD8A014CE.roa
Signing time:             Thu 02 Dec 2021 05:16:30 +0000
ROA not before:           Thu 02 Dec 2021 05:16:26 +0000
ROA not after:            Thu 02 Dec 2049 05:16:26 +0000
asID:                     327979
IP address blocks:        154.66.196.0/24 maxlen: 24
                          154.66.197.0/24 maxlen: 24
                          154.66.198.0/24 maxlen: 24
                          154.66.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 30 Mar 2024 00:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363212DAF/serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
        Validity
            Not Before: Dec  2 05:16:26 2021 GMT
            Not After : Dec  2 05:16:26 2049 GMT
        Subject: CN=61a856ae-692b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c8:17:26:51:07:22:04:03:fe:6a:36:da:87:
                    35:f5:af:3d:13:73:9d:98:7e:93:ba:70:e7:f8:51:
                    37:72:79:fa:3b:d1:dc:ba:9d:82:d6:9e:77:f8:d8:
                    15:30:5d:0d:d1:06:a6:d6:85:bf:22:a2:a1:62:2f:
                    2f:7b:38:91:64:cc:b5:02:72:6e:97:60:49:81:0f:
                    42:0f:42:a6:03:20:97:44:3d:80:82:37:92:25:fb:
                    5a:65:6d:fb:6d:a7:9e:19:34:43:b6:d8:5d:6e:a5:
                    68:42:ea:2d:42:1b:83:a6:39:f7:e2:c7:8b:e1:01:
                    96:ae:b9:6d:68:40:4d:13:25:1e:87:6b:d2:49:da:
                    b1:74:a6:6c:5b:68:34:2e:01:b0:ae:2d:2f:2f:3f:
                    69:f1:55:86:a6:99:be:57:39:4a:14:91:6b:67:dd:
                    51:3c:8e:24:01:4f:22:f7:e8:98:9f:b8:3a:25:37:
                    48:bb:c0:8b:f3:e0:f8:ab:36:86:3c:4b:89:35:89:
                    62:c8:4e:a5:25:52:fa:4f:05:74:03:37:e3:4d:ad:
                    a9:73:1d:a3:3c:57:51:b5:fd:6d:7c:f7:15:98:5e:
                    34:b0:ab:55:ad:97:dc:94:9d:32:e7:c6:bb:05:b2:
                    60:2b:e4:0a:ea:d9:eb:58:73:8f:92:80:93:80:6f:
                    9e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A9:35:BA:B2:D4:CC:CB:54:AA:A2:82:DD:62:0D:2E:38:31:60:C0
            X509v3 Authority Key Identifier:
                keyid:EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/0193F69A532F11EC9ACDB21DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.66.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:78:9a:80:c7:e2:c0:a0:3c:c5:72:97:17:e4:2a:ec:9e:e6:
         80:26:93:04:a1:b9:55:b5:02:86:c8:9c:99:b7:17:d4:8d:69:
         39:80:51:12:dc:7b:db:fb:28:e5:70:20:13:82:52:23:c4:89:
         d4:ff:79:0d:99:c5:60:59:6a:7a:2e:83:f8:67:ec:16:b0:ef:
         4c:d9:f4:70:7b:2f:a6:15:a2:7c:d9:53:dd:63:4b:0b:5c:e1:
         57:c7:21:90:43:8d:e4:fe:45:5c:7d:17:ff:3e:a3:df:ec:83:
         96:f7:9f:55:93:87:45:09:32:29:9e:12:c4:90:32:97:40:55:
         f4:2f:cb:10:4e:48:fb:3e:7d:3c:a1:74:28:0c:d3:77:e7:ce:
         8d:7f:d4:d0:42:80:77:e3:53:5d:5d:12:b2:32:48:60:34:12:
         ad:55:01:35:69:72:62:e1:85:48:74:3b:d2:d3:d7:71:49:2a:
         d8:09:56:95:14:56:39:32:30:54:4c:bb:25:13:12:9e:a7:09:
         e1:dc:7b:ab:3b:57:d7:1a:5f:06:b2:a1:ac:73:7d:bb:e2:f0:
         fd:14:ef:62:eb:e0:fc:35:52:8b:f7:da:d6:7c:39:6b:e6:0c:
         dd:5f:e6:f3:b8:da:dd:ed:9f:b7:33:cd:b7:38:e6:bc:59:c6:
         e4:0e:45:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 03:27:10 2024 by rpki-client on console-ams.rpki-client.org