Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/09D379BC1A5B11EEACF0F06F4AD9E6FC.roa
File:                     09D379BC1A5B11EEACF0F06F4AD9E6FC.roa (raw, json)
Hash identifier:          XtwJZi03efMzPcuSCZQyZPuu9oEG2wFZ/I2Jmd50DHQ=
Subject key identifier:   D4:8C:5C:A6:5B:74:CB:8D:75:E4:CD:D7:0B:70:C3:28:6C:99:14:59
Certificate issuer:       /CN=F364814FAF/serialNumber=ABF9960C85BCF8938D58337F8CB7C5EB4DC4B3AE
Certificate serial:       0460
Authority key identifier: AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/q_mWDIW8-JONWDN_jLfF603Es64.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/09D379BC1A5B11EEACF0F06F4AD9E6FC.roa
Signing time:             Tue 04 Jul 2023 11:08:00 +0000
ROA not before:           Tue 04 Jul 2023 11:07:56 +0000
ROA not after:            Fri 03 Jul 2026 11:07:56 +0000
asID:                     36940
IP address blocks:        196.49.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.mft
                          rsync://rpki.afrinic.net/repository/afrinic/q_mWDIW8-JONWDN_jLfF603Es64.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 May 2024 00:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120 (0x460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364814FAF/serialNumber=ABF9960C85BCF8938D58337F8CB7C5EB4DC4B3AE
        Validity
            Not Before: Jul  4 11:07:56 2023 GMT
            Not After : Jul  3 11:07:56 2026 GMT
        Subject: CN=64a3fd90-7c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:93:a5:34:a6:aa:ff:cb:fc:93:a1:77:04:05:
                    3b:2d:e7:ef:61:82:6e:e0:e6:ff:3a:ec:e6:09:6a:
                    34:c9:83:e8:51:21:0d:08:fb:15:f1:d7:41:1a:e2:
                    df:e7:2d:e3:fc:2d:c7:2f:e6:d2:ef:76:56:9d:37:
                    fb:ba:19:47:f9:c4:0b:8d:20:1b:3a:ad:db:a5:e2:
                    12:02:e8:08:5d:9c:8c:5d:70:35:55:6e:d2:ac:5f:
                    15:00:0c:4f:9e:a1:df:3f:b8:71:e1:e2:2e:6e:57:
                    e7:a6:ca:0f:11:05:da:74:14:f7:60:08:8d:6f:da:
                    ac:75:ef:b2:4a:38:c8:7b:9e:c4:78:25:84:6c:e9:
                    f8:56:71:c0:28:67:44:00:ce:82:a5:5f:88:e7:81:
                    b7:4d:df:e5:f6:93:50:96:3d:d4:df:a3:0c:18:65:
                    88:ba:ad:e7:65:e3:89:ab:2a:44:9b:54:73:a7:8a:
                    74:f6:c9:1f:a6:1b:7c:1e:48:b0:89:3e:52:d9:2c:
                    2f:57:17:ec:22:05:7f:52:0d:f3:8c:d9:95:5d:d3:
                    28:32:6a:76:89:16:db:41:db:ec:63:7d:db:bd:0b:
                    fe:11:67:26:ea:15:6a:c6:45:7c:73:98:19:32:02:
                    74:4b:4e:bf:4e:cb:56:65:43:7e:86:4d:31:a9:5e:
                    e5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8C:5C:A6:5B:74:CB:8D:75:E4:CD:D7:0B:70:C3:28:6C:99:14:59
            X509v3 Authority Key Identifier:
                keyid:AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/q_mWDIW8-JONWDN_jLfF603Es64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/09D379BC1A5B11EEACF0F06F4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.49.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:62:67:de:55:ad:8d:c4:bb:85:a6:30:47:b2:79:34:80:93:
         a9:64:d4:f3:46:a3:6d:ca:9e:5d:ea:e1:f2:c2:5a:b3:d6:0d:
         eb:9e:bb:4a:ac:67:b1:f4:d5:82:97:d6:08:c6:40:db:74:6e:
         a2:0e:87:d8:ea:fd:53:d3:b7:93:82:a7:df:c4:42:3c:17:3a:
         89:d5:c0:6a:fb:6b:e3:72:05:76:da:44:14:9c:bd:ec:54:19:
         b6:49:6e:43:d8:5b:1d:9d:9a:73:83:09:b4:ff:28:3f:f6:69:
         c2:7c:a0:7c:40:ce:16:cc:84:ee:c3:e4:aa:10:db:ad:8e:cc:
         84:37:7f:62:0a:ef:24:6f:8b:da:7f:96:f5:a2:c4:0c:5b:8c:
         59:84:01:54:43:be:7d:4d:69:8e:9b:c5:03:69:78:46:68:83:
         83:44:be:f0:3c:e9:fa:97:86:07:49:e0:9b:5c:e0:25:ec:1a:
         d1:4b:ee:bc:09:63:05:22:d0:cd:58:85:19:3a:86:1c:9a:e2:
         88:6a:d9:f8:f0:30:bb:84:63:32:15:ed:99:7a:0f:16:28:36:
         8f:05:49:12:22:b9:97:f4:3e:b4:6a:15:c5:dd:09:7a:96:d9:
         44:cf:34:eb:e9:3b:4c:7b:09:28:1b:ee:f1:6f:56:15:5c:a7:
         db:73:05:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:46:42 2024 by rpki-client on console-fra.rpki-client.org