Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/4F0D1A0A973511EDA4035291F1222468.roa
File:                     4F0D1A0A973511EDA4035291F1222468.roa (raw, json)
Hash identifier:          xEg4iGAuENtA9IbYS5pduMonn7uchLX1PSlnoNz8FQs=
Subject key identifier:   38:98:BA:B2:4B:CB:9C:9C:A3:BD:5B:31:8C:21:DC:00:DC:4E:19:F7
Certificate issuer:       /CN=F365F31BAF/serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
Certificate serial:       04
Authority key identifier: 3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/4F0D1A0A973511EDA4035291F1222468.roa
Signing time:             Wed 18 Jan 2023 13:37:53 +0000
ROA not before:           Wed 18 Jan 2023 13:37:50 +0000
ROA not after:            Tue 31 Dec 2024 13:37:50 +0000
asID:                     37718
IP address blocks:        196.60.6.0/24 maxlen: 25
                          2001:43f8:d70::/48 maxlen: 49

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F31BAF/serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
        Validity
            Not Before: Jan 18 13:37:50 2023 GMT
            Not After : Dec 31 13:37:50 2024 GMT
        Subject: CN=63c7f631-fa5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:f5:36:e3:f4:c5:08:b1:f7:9b:fe:24:7a:
                    b2:3c:df:3f:15:7c:15:e9:59:e4:ac:f4:30:43:de:
                    66:12:61:ef:5f:ce:f1:f4:35:83:5a:0b:1f:4d:1e:
                    62:3c:86:ec:a9:c5:b7:9a:d5:dd:3e:3a:13:2b:d3:
                    80:7c:5a:64:3b:e3:38:e3:08:b9:72:8e:d2:0a:c2:
                    41:4d:bf:f9:2c:3c:3a:4e:4d:07:10:41:80:a5:e7:
                    64:69:66:29:19:8b:e8:fc:f9:72:f2:c1:df:3b:64:
                    d6:e1:84:a4:89:d7:75:65:4e:5f:b3:85:51:8b:e5:
                    14:62:8b:ec:fb:b0:46:e4:51:d6:14:74:e3:8e:65:
                    16:46:df:fb:94:49:f0:1c:ba:a1:18:0b:68:05:ec:
                    45:c4:bb:8a:73:b1:ce:8c:7a:72:e6:69:18:bd:68:
                    86:3a:fb:df:f1:a5:89:92:0a:1d:2e:86:36:9d:75:
                    e2:45:81:7b:45:97:81:f2:e1:2c:cd:ec:e1:4f:34:
                    bb:2d:0a:2b:94:11:f9:0f:b6:63:1e:98:a7:e3:1f:
                    b5:e7:85:b0:45:3d:7e:5e:ab:b7:8f:9f:8c:5d:fd:
                    e7:6a:70:68:fc:16:88:ad:9e:df:6c:9b:52:03:9b:
                    32:a9:e6:53:7b:e2:1c:69:96:73:2b:e3:fa:65:96:
                    4c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:98:BA:B2:4B:CB:9C:9C:A3:BD:5B:31:8C:21:DC:00:DC:4E:19:F7
            X509v3 Authority Key Identifier:
                keyid:3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/4F0D1A0A973511EDA4035291F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.60.6.0/24
                IPv6:
                  2001:43f8:d70::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:72:34:34:ca:b2:76:b1:62:0e:53:48:b7:12:d0:63:46:79:
         f8:4e:dd:37:09:ae:8f:3d:6f:24:69:b7:6c:bf:d9:8b:f8:21:
         15:ab:ba:a4:e0:85:c8:62:e6:e6:39:d0:68:3a:63:de:b5:14:
         a3:a2:89:d7:8b:93:ad:4e:91:4f:ec:37:17:e5:2e:c5:e0:92:
         17:85:9d:46:63:01:9e:48:78:f0:4b:89:c0:91:07:7f:b1:eb:
         6e:d6:d5:73:dd:aa:cf:ab:86:43:db:21:c1:2d:ed:ef:cd:fd:
         51:11:fe:a3:de:b9:6a:e4:46:8c:2a:36:31:37:6b:2f:fa:40:
         5b:35:58:6c:01:62:58:78:69:cd:46:bf:8a:89:c6:70:cf:62:
         11:56:41:4c:d0:ba:7d:dc:25:b4:9c:77:e7:ee:b1:ff:f1:b0:
         bf:21:06:86:fd:0f:9d:d6:be:74:76:fe:11:7d:72:15:92:2f:
         03:4e:09:dc:08:79:9b:5e:7b:26:a8:94:6e:d5:3d:c1:1d:7e:
         3a:78:d7:db:bb:79:90:a8:23:a3:26:47:74:cd:d3:d7:cf:ce:
         78:1d:5c:81:9b:db:d1:3e:40:32:ff:c9:99:56:aa:a2:d0:e3:
         81:00:62:80:12:cc:b2:56:4c:d5:62:be:ca:c9:47:be:57:88:
         42:22:6d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----