Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/586573B40BF211EDB4E2EEA0F1222468.roa
File:                     586573B40BF211EDB4E2EEA0F1222468.roa (raw, json)
Hash identifier:          bb1A6T2rrXymYjB/l5u0NeaslEUzbIRYEy0NJVVzOmE=
Subject key identifier:   9E:B8:13:9B:D6:A6:A1:AD:2C:66:1C:53:D4:42:C0:A1:F4:53:5E:F9
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       056C
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/586573B40BF211EDB4E2EEA0F1222468.roa
Signing time:             Mon 25 Jul 2022 08:18:21 +0000
ROA not before:           Mon 25 Jul 2022 08:18:17 +0000
ROA not after:            Wed 07 Jul 2032 08:18:17 +0000
asID:                     36916
IP address blocks:        41.180.80.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 04 Jun 2024 00:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1388 (0x56c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 25 08:18:17 2022 GMT
            Not After : Jul  7 08:18:17 2032 GMT
        Subject: CN=62de51cd-53f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:c2:f5:b9:a3:c9:cb:47:dc:63:69:07:0b:
                    a8:8d:a2:b5:3b:56:5b:2f:6b:56:d2:36:72:bb:c8:
                    3d:b9:74:f1:2e:78:e6:1a:79:40:00:5d:76:ad:96:
                    43:38:38:02:1f:1b:db:5f:bb:12:db:21:cc:27:a3:
                    39:25:81:5c:97:d4:f1:d0:0c:67:1d:09:c6:11:12:
                    db:e4:db:c4:54:ec:00:f4:2c:fe:be:bf:0a:ca:04:
                    80:53:85:96:c9:9e:b7:a2:c1:fa:36:d1:0d:45:a5:
                    50:38:82:11:08:d8:de:ca:1c:b0:29:5a:0a:bd:8a:
                    9d:c6:46:c4:9a:5d:74:3c:3f:ed:7b:9b:e1:1d:32:
                    b3:55:44:15:f4:b5:ac:e9:a7:df:45:8c:bd:57:d2:
                    68:64:b5:00:14:51:03:8a:ed:82:cf:31:1e:8b:91:
                    2d:e5:31:b9:17:a1:79:33:1f:0f:2d:4e:46:11:a4:
                    38:d9:7f:44:6e:24:c3:c7:42:0b:45:45:69:8b:1b:
                    66:ae:01:87:fe:8e:78:14:9a:33:1a:f0:8d:73:4e:
                    2e:75:d9:71:a4:c0:68:69:55:7f:aa:7e:b8:7d:79:
                    62:76:6f:ca:37:8c:53:a6:cd:28:a0:7e:57:50:10:
                    90:0d:7a:b9:e7:1c:de:e3:b4:3a:54:79:ca:90:55:
                    b3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B8:13:9B:D6:A6:A1:AD:2C:66:1C:53:D4:42:C0:A1:F4:53:5E:F9
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/586573B40BF211EDB4E2EEA0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:c9:c0:20:a9:36:a6:98:aa:42:c6:cc:c0:ce:72:23:55:13:
         7a:cc:31:34:2b:64:bc:aa:6e:4d:7e:db:7f:ee:18:7e:90:f9:
         4d:d2:ba:73:e7:ab:97:ed:2b:13:0e:f0:a8:aa:ae:35:51:51:
         09:ee:cc:e8:cc:29:20:95:37:49:1d:77:d0:72:e2:c5:9f:a2:
         cd:6c:19:79:b1:67:1c:fc:94:ba:15:37:9f:00:75:6d:e1:a9:
         17:a8:fe:69:63:1b:1c:eb:52:e9:aa:f7:ba:eb:ed:24:eb:18:
         f7:dc:67:46:79:c4:87:ca:87:d3:20:fe:fa:40:04:23:e3:6c:
         9e:c4:d1:51:90:79:4d:6e:c3:7b:22:2b:ce:21:75:2e:7f:f5:
         89:1c:ba:45:b6:88:1b:af:31:b2:64:93:a8:cf:2e:88:60:cc:
         06:5a:40:2a:c2:d9:15:2e:fc:4c:30:b3:3c:65:d2:00:b1:f0:
         c1:6a:cf:18:aa:00:2c:d0:21:a3:77:e9:b5:1a:6e:3b:2b:52:
         61:7a:0f:cf:b5:1f:29:d4:ca:fc:c7:7a:b8:08:eb:0f:18:62:
         21:3e:3b:80:98:c6:d4:a8:33:a0:6f:1f:13:9a:2f:4f:1b:d5:
         8f:fa:ac:bb:8e:60:c7:2d:82:88:2b:e0:74:ca:d4:05:65:f6:
         d6:bd:eb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:40 2024 by rpki-client on console-ams.rpki-client.org