Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/A081D0764BB711EC90B9B946D8A014CE.roa
File:                     A081D0764BB711EC90B9B946D8A014CE.roa (raw, json)
Hash identifier:          gyJOxBOesIDsoX+F0wCqdrw9sX0TpvZI+h6iVzCHXus=
Subject key identifier:   57:E6:A4:0A:D0:88:5B:AD:6D:94:DB:63:6F:FA:C2:2B:10:DB:7B:DA
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       010A
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/A081D0764BB711EC90B9B946D8A014CE.roa
Signing time:             Mon 22 Nov 2021 17:14:19 +0000
ROA not before:           Mon 22 Nov 2021 17:14:14 +0000
ROA not after:            Sat 22 Nov 2031 17:14:14 +0000
asID:                     36994
IP address blocks:        105.255.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Nov 22 17:14:14 2021 GMT
            Not After : Nov 22 17:14:14 2031 GMT
        Subject: CN=619bcfea-f718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a8:12:65:aa:d2:3a:e0:c5:03:5b:ee:87:5d:
                    32:71:cd:fa:ba:47:7e:9d:3a:fe:4b:82:95:10:ac:
                    f2:bc:d1:0b:b1:f2:f8:0c:37:b6:57:61:89:5b:0e:
                    3f:5b:59:e1:bb:a8:f6:51:9c:ec:c2:7f:78:d1:89:
                    51:7f:dd:76:7d:ce:1e:c5:92:84:7b:db:19:f6:2c:
                    4d:fb:21:63:62:f1:fe:ae:53:3b:8b:a2:f4:c3:fb:
                    95:cb:b4:c8:52:0d:27:51:0d:ac:68:21:d2:93:c7:
                    7b:48:8d:86:25:72:d9:e7:4d:ef:0c:c8:2d:ee:5f:
                    1b:5a:7d:93:43:f5:86:af:92:c7:02:e6:ce:f8:23:
                    a6:a5:5b:7d:da:37:67:9f:53:21:8a:73:02:07:51:
                    7c:a6:26:71:46:b8:d3:9a:37:ca:68:a8:3b:4a:eb:
                    c6:2e:c7:a4:9f:41:8b:c3:4d:5a:6d:fb:d7:0b:56:
                    79:4a:c5:f9:e9:16:bf:d5:2d:59:c4:57:1e:a0:fd:
                    59:e7:6e:a2:49:f4:ef:e7:ad:31:19:23:bc:5e:66:
                    a8:7a:96:8f:25:3e:cc:79:6d:de:6a:6d:4c:69:6e:
                    2f:8b:b9:81:d4:06:44:ec:cb:02:9f:60:8d:fe:8e:
                    78:82:85:b4:7e:0f:d0:df:47:31:c4:7e:0d:72:2e:
                    90:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E6:A4:0A:D0:88:5B:AD:6D:94:DB:63:6F:FA:C2:2B:10:DB:7B:DA
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/A081D0764BB711EC90B9B946D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.255.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         41:8d:22:39:10:d8:36:3c:5b:d0:74:07:bd:fb:4c:e6:fe:98:
         23:6a:18:a6:4e:d0:97:ee:0d:db:72:a0:c5:10:54:b7:e5:15:
         08:a1:a4:8a:ee:ca:f9:25:e7:31:c4:8b:48:ec:90:af:f6:4e:
         08:7f:c2:26:49:05:20:54:6d:1e:33:23:41:8c:c7:06:70:5d:
         0f:08:43:cd:b0:2d:1c:4e:d8:eb:e0:ec:0b:3c:6a:83:58:60:
         bc:23:73:c1:46:4f:6c:79:1c:4b:0e:a4:54:7e:55:c9:44:59:
         ed:fe:0e:ef:a9:10:22:7f:a0:0d:af:92:1c:16:bd:88:81:d0:
         85:40:c1:31:db:cb:b2:94:ca:97:4f:d9:a8:6f:d6:2e:b4:a9:
         38:c6:de:6d:27:f9:4f:4e:f1:5b:27:72:91:52:b6:8e:33:3f:
         aa:9b:2d:bc:86:2e:1f:fc:ca:9d:c5:1f:c3:73:6e:b8:b8:6f:
         be:f5:1a:c2:be:49:64:fe:c0:ba:bd:6e:93:46:78:fd:6f:68:
         01:a7:37:55:06:67:7b:1e:28:e4:8b:3b:8d:35:f3:45:41:71:
         fc:e5:68:d2:d2:f8:58:eb:3a:83:1d:ee:00:42:f3:e3:80:b7:
         91:67:db:bd:e9:f9:e1:a3:29:89:d3:7b:33:8f:65:dd:52:fa:
         73:49:1f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:30 2024 by rpki-client on console-fra.rpki-client.org