Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/C25BF862463911EC9C659114D8A014CE.roa
File:                     C25BF862463911EC9C659114D8A014CE.roa (raw, json)
Hash identifier:          TAmKKzQBDoLwr1xj5R0Z1MOOtgdIjMvjgf/j1EH6WSQ=
Subject key identifier:   7E:59:4A:8F:EC:69:5E:73:A9:B5:64:D7:44:FF:63:EB:18:EC:9C:CA
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       FA
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/C25BF862463911EC9C659114D8A014CE.roa
Signing time:             Mon 15 Nov 2021 17:30:43 +0000
ROA not before:           Mon 15 Nov 2021 17:30:36 +0000
ROA not after:            Sat 15 Nov 2031 17:30:36 +0000
asID:                     36994
IP address blocks:        105.242.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 27 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Nov 15 17:30:36 2021 GMT
            Not After : Nov 15 17:30:36 2031 GMT
        Subject: CN=61929943-ac41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:71:5e:8e:0a:31:eb:33:7f:0d:29:27:ec:16:
                    04:68:a3:f4:b7:0a:6c:80:75:1c:6f:fb:48:6e:a0:
                    34:b9:90:ff:61:cc:ad:3d:bb:3b:16:81:2f:1a:b2:
                    12:68:fa:ec:91:1e:ee:3a:e9:e5:97:4e:a9:71:75:
                    2d:ff:71:1e:ce:16:cc:aa:75:54:df:51:12:75:f8:
                    2e:22:a0:9f:b7:1c:4b:f5:2b:35:18:7c:6a:b7:1c:
                    b1:97:85:e1:8a:a7:21:0e:d4:76:c6:ff:74:7f:7b:
                    30:50:bc:22:b2:16:fe:ca:f2:dc:de:ea:ff:4c:13:
                    b3:89:fa:05:77:8e:92:15:c2:c9:1b:ce:3e:9d:22:
                    a8:cb:3b:21:0e:8f:f8:bb:77:34:a8:92:43:54:ba:
                    28:bc:51:b8:bc:c3:52:01:0e:07:ef:19:3f:fd:7c:
                    82:c5:05:d8:fc:38:85:e9:cf:39:25:d7:28:14:c4:
                    6c:3a:33:58:5a:dc:c9:2b:c3:44:0e:7f:41:65:61:
                    b9:cf:93:14:3e:6f:16:b3:c7:d6:a9:c1:7f:b4:d8:
                    8c:c7:c4:9b:7d:93:be:b0:c8:00:82:9b:f4:bf:a7:
                    d8:d2:e7:20:74:d8:97:d0:d6:50:94:05:3e:34:50:
                    f6:ff:c6:f4:fa:58:58:90:e9:18:67:9d:d0:e1:65:
                    ed:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:59:4A:8F:EC:69:5E:73:A9:B5:64:D7:44:FF:63:EB:18:EC:9C:CA
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/C25BF862463911EC9C659114D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.242.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a1:0d:a4:8a:45:bb:98:67:0f:13:32:24:7f:dc:73:61:ab:b9:
         9b:64:4f:1e:e6:78:54:25:3b:31:c6:bb:ae:3b:5d:56:ee:cf:
         bd:0a:9d:49:99:cf:c7:a2:75:13:fb:bf:a6:7f:5f:46:47:ea:
         83:98:53:d4:54:3d:34:b0:25:68:68:37:5e:2c:b1:b6:d8:3e:
         d5:86:e6:1e:3a:d6:e0:f4:fd:35:aa:ba:8e:19:05:1b:38:0e:
         5b:f2:6c:77:0d:fc:a2:b8:24:41:5c:fc:24:cc:a5:46:78:88:
         54:69:2f:31:69:a3:bb:98:c8:b1:3b:8e:44:a3:dc:2f:13:43:
         f2:19:3f:6c:13:b5:80:5b:55:99:7f:26:d4:64:5c:42:01:d7:
         51:45:48:6b:19:e7:d4:ba:71:ee:96:57:9b:c7:df:29:9b:60:
         7c:29:0a:0f:6d:3e:dc:bd:39:8a:0a:20:db:68:32:2b:ea:bf:
         65:7e:4b:e9:60:6b:b6:e3:08:34:30:a4:31:f1:bc:3e:6e:27:
         79:44:0b:dd:a5:3b:39:1b:91:60:b2:5a:a4:0f:43:1e:90:03:
         c9:79:d6:ba:fc:b4:39:d9:8b:35:71:1b:49:51:7d:ab:9e:99:
         36:7b:01:52:c7:24:4f:63:0f:d5:0a:6e:59:97:eb:c5:43:a7:
         b8:9b:2e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 04:33:25 2024 by rpki-client on console-ams.rpki-client.org