Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/0105C168D77311EC8E11C1ABF1222468.roa
File:                     0105C168D77311EC8E11C1ABF1222468.roa (raw, json)
Hash identifier:          mlzsIa1bpFLY6Huw2drkr9NkHqr6uv9NM5lYYAWa2Fs=
Subject key identifier:   06:CB:4F:53:48:54:E0:76:77:8A:71:C9:25:70:DF:D2:13:40:B0:97
Certificate issuer:       /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial:       55
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/0105C168D77311EC8E11C1ABF1222468.roa
Signing time:             Thu 19 May 2022 12:55:48 +0000
ROA not before:           Thu 19 May 2022 12:55:45 +0000
ROA not after:            Sun 19 May 2024 12:55:45 +0000
asID:                     61317
IP address blocks:        45.221.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
                          rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
        Validity
            Not Before: May 19 12:55:45 2022 GMT
            Not After : May 19 12:55:45 2024 GMT
        Subject: CN=62863e54-939c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:05:de:40:04:7b:6c:ec:4c:c9:7d:d7:24:b8:
                    89:be:33:c2:73:11:f4:b7:68:09:8e:9c:70:2c:00:
                    60:01:10:ff:2d:3e:f8:1d:96:0b:35:79:65:07:c5:
                    c8:2d:fb:f7:c4:22:bc:6f:bc:f2:1a:b7:cd:07:d5:
                    24:1a:16:a2:31:06:71:62:ad:1f:36:e5:27:3e:d0:
                    cb:fc:3b:1b:e9:69:81:6b:1f:d9:31:26:21:a8:4d:
                    a5:6b:70:00:b5:fb:a6:62:9d:7e:66:c9:b4:fc:8d:
                    60:af:75:95:f6:a2:27:18:41:c9:d2:41:d6:cf:d8:
                    2e:6c:4b:55:fc:58:5f:ad:bb:b8:27:63:a1:63:fc:
                    20:9a:2f:31:db:34:ab:a3:f7:37:28:cf:de:e9:d0:
                    b3:f4:5a:60:1a:c0:ed:b7:d8:34:85:b8:88:a1:7b:
                    77:45:f5:50:b1:97:7b:1e:78:b4:2e:a4:5d:b1:8e:
                    3d:7c:7c:89:71:8b:da:b6:1c:27:bc:ea:50:bf:7f:
                    a5:cc:5d:8c:a6:ba:cd:b1:26:60:c5:d5:b7:03:aa:
                    2a:b3:fe:58:ee:9a:69:d5:32:2e:6e:36:11:7e:6f:
                    a2:83:db:34:e6:db:aa:48:93:f9:15:70:11:23:02:
                    34:82:8d:78:ac:62:d4:6d:95:15:94:3c:20:fa:c4:
                    b3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CB:4F:53:48:54:E0:76:77:8A:71:C9:25:70:DF:D2:13:40:B0:97
            X509v3 Authority Key Identifier:
                keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/0105C168D77311EC8E11C1ABF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:85:11:a0:94:a0:c6:36:c2:2e:21:8e:95:91:7e:27:63:95:
         77:b9:e5:db:c1:77:04:0a:90:55:21:ac:54:3a:a8:0e:8f:2f:
         63:e5:5f:2c:3a:4d:5c:ca:a6:8c:50:b2:30:8b:f7:5b:c6:bd:
         5f:74:c1:85:a8:45:ff:0a:cf:c9:58:57:5b:f3:14:b4:81:a8:
         25:7c:69:40:8b:79:62:9d:7e:45:24:16:76:e7:71:59:07:20:
         4d:e2:eb:31:0c:a4:8a:4e:10:17:fc:51:c5:f2:73:aa:9c:ee:
         f3:5e:3c:f4:2a:88:75:c1:4f:d8:ac:ed:90:ff:76:c4:37:31:
         ae:45:2e:f3:19:a6:b2:78:32:5e:70:21:cb:5c:2f:2f:df:8b:
         50:bf:38:26:89:07:85:50:6e:21:3e:82:cd:b0:db:f9:59:80:
         ab:25:02:f8:e1:a6:d4:4b:96:5d:ba:ac:57:96:01:c4:3d:be:
         ca:b3:98:21:91:57:5c:f0:e7:90:32:c0:84:c0:67:eb:b1:22:
         80:a6:f3:4e:d4:46:d1:96:b6:a7:40:b3:6d:e3:22:af:13:36:
         65:9e:97:18:a3:6c:8b:76:b8:e3:99:e9:38:f4:a7:e3:a5:db:
         4c:1d:2a:57:d8:e4:78:a2:3d:5e:dc:c1:9a:de:02:34:c0:18:
         c4:9b:33:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:24:54 2024 by rpki-client on console-ams.rpki-client.org