Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3461F456F3BA11EC9C6593A7F1222468.roa
File:                     3461F456F3BA11EC9C6593A7F1222468.roa (raw, json)
Hash identifier:          3ogquCMmUnslXu0KBz5axHRHdtFcEifRanGDPYrfElc=
Subject key identifier:   9F:B3:61:33:ED:CE:E1:B0:50:43:6A:93:D0:F4:DD:5C:2F:E4:1B:77
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0519
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3461F456F3BA11EC9C6593A7F1222468.roa
Signing time:             Fri 24 Jun 2022 12:36:01 +0000
ROA not before:           Fri 24 Jun 2022 12:35:57 +0000
ROA not after:            Wed 12 Jun 2030 12:35:57 +0000
asID:                     36916
IP address blocks:        41.180.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 04 Jun 2024 00:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1305 (0x519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jun 24 12:35:57 2022 GMT
            Not After : Jun 12 12:35:57 2030 GMT
        Subject: CN=62b5afb1-e262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:64:de:f3:71:b9:16:38:45:e3:52:15:c8:4f:
                    eb:4a:c7:74:5b:ed:b9:62:64:a0:b6:d7:c7:bf:dc:
                    0a:96:0f:2d:62:56:0b:1e:ed:4a:d9:be:dc:8c:e2:
                    73:89:d8:d4:7e:66:34:1b:72:9f:d8:c9:66:4f:22:
                    7c:a0:03:72:3f:b1:b1:78:10:c5:9a:58:bb:a5:ad:
                    b2:ed:5c:e7:3d:67:54:8f:00:c3:58:9d:a7:9b:28:
                    f3:5b:bc:c6:d8:f1:61:a8:7d:ab:12:bf:47:b7:0b:
                    12:60:8b:96:6b:bf:09:25:2f:5d:76:9a:47:86:38:
                    49:99:af:3d:72:cc:76:70:7a:4e:84:fc:42:e0:a7:
                    d3:04:51:bc:15:83:c4:d7:fd:c9:f6:d6:ae:a4:ee:
                    db:5f:11:b5:45:c6:07:1c:9e:ed:6c:1b:00:4a:d3:
                    52:51:99:e7:ed:de:7f:65:29:8a:f8:c9:51:72:6c:
                    67:d5:4c:29:0f:6c:9b:13:ea:07:11:73:70:70:56:
                    9b:20:3e:10:9a:ad:03:b5:15:27:fa:19:1b:20:5d:
                    41:89:f5:ae:3a:c0:3a:78:a4:5d:65:80:52:b1:4c:
                    07:33:6b:b0:6d:41:1c:ab:d9:f3:e2:6b:41:41:72:
                    82:12:c1:80:18:44:c0:36:92:30:9e:36:08:60:e5:
                    8b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B3:61:33:ED:CE:E1:B0:50:43:6A:93:D0:F4:DD:5C:2F:E4:1B:77
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3461F456F3BA11EC9C6593A7F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:58:0d:84:1b:8e:48:10:be:3a:95:1b:e0:53:be:3d:49:3f:
         1f:13:f5:cd:f8:ac:30:0b:99:10:58:93:bc:6b:23:88:61:00:
         14:cb:f3:e9:a1:5e:50:d3:44:cb:b0:c1:ca:1f:9a:22:6d:c9:
         47:3d:b5:a7:e1:42:9a:1b:29:29:68:6d:8d:f5:99:a1:2e:29:
         c7:cc:de:4a:e2:c3:fb:2f:e2:67:4e:af:87:e2:c6:6e:61:d4:
         34:f2:46:01:67:d3:a1:82:b0:9e:85:7a:a1:bc:04:04:f3:e6:
         1c:9e:62:d9:8c:cd:01:80:cd:25:6f:a2:7c:9a:82:b6:6f:8f:
         b2:7b:5d:2b:2f:71:d1:86:92:1a:2b:b5:34:5d:31:0f:83:12:
         52:a1:e6:df:e6:fc:00:2d:56:08:46:ef:a9:d7:ce:28:34:d7:
         ac:ab:46:7d:cc:99:93:47:67:28:44:2c:e3:d7:ee:1e:75:a4:
         8b:d7:57:2f:d7:f2:a7:30:24:70:61:8c:dd:6e:c4:0b:54:66:
         d2:15:7a:75:47:95:e6:f8:06:df:b1:98:f3:85:6b:f9:41:04:
         5c:68:3f:4b:e6:b4:fb:dc:9e:8e:24:ea:7e:2f:cf:96:f9:20:
         50:26:f4:17:0f:8a:97:db:60:c0:82:3a:95:9b:89:2a:5b:61:
         55:9d:ff:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:16 2024 by rpki-client on console-fra.rpki-client.org