Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/8665119A463911EC88B22A14D8A014CE.roa
File:                     8665119A463911EC88B22A14D8A014CE.roa (raw, json)
Hash identifier:          9v5B2xaH3Bc4zwDA3exaH6jQCediAk11PcOAPXe7o5k=
Subject key identifier:   DB:89:87:FD:12:13:70:F4:44:6D:4C:ED:2D:1E:50:BC:1B:BE:A3:83
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       F8
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/8665119A463911EC88B22A14D8A014CE.roa
Signing time:             Mon 15 Nov 2021 17:29:02 +0000
ROA not before:           Mon 15 Nov 2021 17:28:59 +0000
ROA not after:            Sat 15 Nov 2031 17:28:59 +0000
asID:                     36994
IP address blocks:        105.243.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 28 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Nov 15 17:28:59 2021 GMT
            Not After : Nov 15 17:28:59 2031 GMT
        Subject: CN=619298de-ee2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ea:76:de:34:47:ad:18:c6:27:78:aa:ba:e6:
                    9b:bb:ca:70:86:7a:56:47:88:c0:1a:af:ea:fa:6e:
                    56:1a:32:58:f3:9f:0d:87:70:da:87:8a:23:fb:15:
                    0a:48:ca:d1:0f:ce:e8:0e:d4:50:aa:98:e6:43:6a:
                    7e:4b:57:b0:9e:10:a8:0c:c4:f9:7f:6a:61:db:ba:
                    a9:1d:6f:ca:51:b8:cc:26:1c:8c:8f:48:d6:24:49:
                    4b:29:bd:48:44:3d:84:4b:8d:85:b7:ff:78:60:1d:
                    da:e6:a5:8b:2c:c3:8c:4e:4c:8b:e1:9c:60:e9:d3:
                    85:cb:34:e7:2b:2b:b5:46:69:3f:81:81:11:94:2d:
                    96:ee:d2:a2:ee:78:65:98:7f:a0:99:6a:f8:18:23:
                    fe:20:69:9b:19:46:bb:f5:f3:f6:bc:99:59:bc:93:
                    ca:fc:a8:99:8e:06:45:8c:42:3b:f8:b5:a1:20:9d:
                    53:16:ee:9f:cb:2e:ff:62:ae:a5:a5:51:ba:9c:70:
                    f8:63:b9:95:48:44:8f:47:9b:1c:6c:ac:3e:cd:72:
                    c2:74:ce:7d:34:fb:f2:e4:77:11:65:21:47:03:7a:
                    f8:bc:d7:72:ad:ce:51:85:75:85:54:00:3d:b3:59:
                    c8:8c:5f:de:2c:fe:c7:23:db:a8:b7:d0:c2:e6:bc:
                    b7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:89:87:FD:12:13:70:F4:44:6D:4C:ED:2D:1E:50:BC:1B:BE:A3:83
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/8665119A463911EC88B22A14D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.243.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         88:82:e9:a8:39:80:e8:3b:69:3d:60:5c:36:b0:df:4c:c1:1c:
         d6:28:a7:07:93:b4:aa:a8:60:ae:fd:01:9e:70:e2:27:3a:60:
         9e:d4:6b:bf:9f:77:be:bb:20:3a:ca:70:1d:9f:e0:bd:60:96:
         53:55:60:85:07:38:70:40:1a:b2:30:63:f6:6b:5f:d7:18:ce:
         18:e3:ca:09:f0:9c:35:58:69:b9:e3:6a:cd:6a:81:cb:e4:b0:
         c2:ea:14:9b:bc:ac:aa:08:39:a4:8a:a4:54:43:a4:cf:d6:ea:
         4a:83:ff:0a:76:a3:a0:aa:08:bc:97:6e:5c:21:b7:4b:b7:f4:
         f8:8d:39:3f:df:0f:d9:e4:ab:b8:93:92:3c:b1:7e:d4:a6:cf:
         79:9d:22:e4:1a:ed:71:6d:d6:b3:91:39:fd:ab:0c:27:4e:4b:
         fa:cf:e5:c8:61:58:b5:38:d2:55:1f:b9:9a:fa:0e:62:57:7b:
         24:8d:46:41:39:52:ad:37:e8:20:6e:a3:6a:32:a0:2f:11:f9:
         87:d6:6b:c3:3c:83:63:da:cc:c6:26:fa:b5:d7:96:7f:54:30:
         1a:52:fe:01:a6:40:a8:f8:41:0f:3d:ee:43:6c:51:7e:bb:6d:
         44:f0:99:6e:ea:37:1e:7a:3a:b0:41:2c:17:9a:b8:dd:6c:36:
         42:38:3f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 03:27:11 2024 by rpki-client on console-ams.rpki-client.org