Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/53F046CA05FA11EF84A28F25017001B1.roa
File:                     53F046CA05FA11EF84A28F25017001B1.roa (raw, json)
Hash identifier:          K+yBq0tr8CkiD17XoxP5VOR1kxHQyOXWIrmSUgyY27s=
Subject key identifier:   8B:A5:ED:4B:EE:C4:40:AE:3A:79:1E:54:8E:1A:A2:F0:12:45:29:9B
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       086C
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/53F046CA05FA11EF84A28F25017001B1.roa
Signing time:             Mon 29 Apr 2024 07:30:18 +0000
ROA not before:           Mon 29 Apr 2024 07:30:15 +0000
ROA not after:            Wed 19 Apr 2034 07:30:15 +0000
asID:                     36916
IP address blocks:        41.180.254.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2156 (0x86c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Apr 29 07:30:15 2024 GMT
            Not After : Apr 19 07:30:15 2034 GMT
        Subject: CN=662f4c8a-90d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:57:74:71:46:8e:ff:f3:69:45:c3:26:05:a2:
                    27:2a:f4:4e:96:ea:62:b2:58:54:92:d6:65:7f:14:
                    17:f9:0f:e7:f1:71:db:09:ea:c9:b2:9a:35:bb:c2:
                    d5:86:02:20:94:3a:ef:fb:b0:a4:ea:c0:b8:b2:2f:
                    75:bb:8a:30:0c:b5:2b:fb:ea:44:c1:2a:f2:f7:0a:
                    d8:ad:31:a6:e7:c0:b9:57:ff:f6:2c:4c:0d:8d:f6:
                    e5:8c:4e:9c:dc:a3:8a:71:1d:0c:76:94:84:dc:e9:
                    db:e4:5f:4e:21:b8:9d:7c:2e:8e:c3:90:b0:1d:7b:
                    2d:04:8c:4a:16:8d:e2:9b:a0:fe:2f:dd:a7:49:28:
                    ae:19:3d:1d:de:fd:01:f9:70:b4:07:a3:e7:1f:af:
                    cc:1e:c2:21:26:b5:84:40:4e:ea:cd:09:35:00:a2:
                    43:a8:4b:09:04:43:61:db:9a:c6:9a:f5:75:d2:da:
                    da:40:fc:22:fc:df:25:39:92:b3:5b:c2:6d:23:ca:
                    fa:54:33:e9:24:21:89:8c:fe:e0:b8:5b:74:2f:f9:
                    bb:12:a8:bd:11:ef:70:b4:c8:96:6f:f4:08:80:2b:
                    53:45:72:0b:33:24:02:c8:bb:3b:9f:9f:9f:61:ee:
                    d0:5f:0e:3c:c5:cf:21:5d:c0:0a:55:dc:c8:e1:6a:
                    60:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A5:ED:4B:EE:C4:40:AE:3A:79:1E:54:8E:1A:A2:F0:12:45:29:9B
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/53F046CA05FA11EF84A28F25017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:16:d2:a6:fd:b6:62:4f:6a:92:4b:34:ed:eb:00:5a:b6:a1:
         ef:f6:8c:f2:eb:ce:61:5e:a5:8b:26:cb:1d:b2:c2:be:61:f9:
         b3:b3:88:05:a0:1a:7e:1a:d3:c6:12:25:ed:45:8c:5b:5c:1e:
         57:8c:73:85:d7:dd:ce:99:f8:69:f2:52:97:8a:1b:66:d4:2e:
         f1:02:52:77:08:7a:2d:64:eb:39:29:27:5b:95:a4:00:c3:5d:
         a5:0f:ad:73:22:0c:58:1a:fc:95:38:ed:35:b0:10:0d:ef:78:
         79:cd:b5:d0:fa:e6:98:47:9f:be:77:43:3a:c9:3f:75:3a:75:
         de:87:3c:c0:49:18:11:b0:83:8e:ca:3e:1b:6f:91:e3:1b:70:
         c6:cd:74:f2:3e:b7:ab:10:a9:6d:ea:dc:fe:91:fb:96:44:8e:
         9f:51:d7:bc:35:7f:2c:3b:5c:4d:07:e7:a3:fb:69:3c:7a:88:
         67:0d:e5:fb:ad:13:9f:a6:7f:97:5e:b3:8b:13:13:ee:60:ad:
         82:69:af:23:38:3c:47:87:1d:f3:b4:0c:bb:43:19:87:bc:e6:
         40:5e:fc:2a:aa:6b:78:11:2c:3b:44:e1:b7:f7:33:c1:60:2e:
         5c:8a:f3:c5:cb:7c:a5:2b:c0:22:0d:0e:e8:ea:72:b1:80:e6:
         86:2f:b0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:41 2024 by rpki-client on console-ams.rpki-client.org