Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/AEA66C80F3B811ECA91DD8A2F1222468.roa
File:                     AEA66C80F3B811ECA91DD8A2F1222468.roa (raw, json)
Hash identifier:          a6WEtDVrR+9ajEDegxBvul2Xf9squU/Z4QuhZE+gSYA=
Subject key identifier:   19:6E:51:1D:EF:D3:73:E4:A0:25:4C:62:44:51:44:4A:4D:90:71:59
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0503
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/AEA66C80F3B811ECA91DD8A2F1222468.roa
Signing time:             Fri 24 Jun 2022 12:25:07 +0000
ROA not before:           Fri 24 Jun 2022 12:25:04 +0000
ROA not after:            Wed 12 Jun 2030 12:25:04 +0000
asID:                     36916
IP address blocks:        41.138.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 04 Jun 2024 00:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1283 (0x503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jun 24 12:25:04 2022 GMT
            Not After : Jun 12 12:25:04 2030 GMT
        Subject: CN=62b5ad23-4ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:10:8a:39:38:ba:0f:25:b6:b2:12:0b:d8:69:
                    1d:a0:10:e3:c1:c7:3d:49:22:37:10:21:6a:2c:e6:
                    a5:eb:f3:c0:d5:23:eb:56:c7:16:df:16:f8:71:39:
                    5b:51:bb:4f:ab:7d:0d:ea:7a:e3:5a:eb:ab:21:92:
                    74:99:2c:c9:5d:79:9b:b8:61:7f:8e:27:3e:b7:f7:
                    0f:de:7f:47:64:73:ca:ab:04:33:e7:b0:45:2d:0f:
                    d2:d7:51:5e:6e:ef:c7:45:ee:a3:10:f9:e1:f3:d1:
                    bc:83:ca:d9:fe:00:b9:ab:bd:5c:aa:c6:50:15:e8:
                    ad:bf:21:ba:8c:bc:cb:d5:7f:02:40:27:93:92:5f:
                    1a:84:7f:29:fc:ca:6e:12:fa:49:20:bc:48:62:78:
                    c8:2a:74:3b:81:e9:47:7e:45:1a:d6:e1:7d:d4:dd:
                    08:55:5d:42:f5:ae:64:cd:1b:99:0b:84:08:be:79:
                    a4:5e:ef:22:4b:cf:00:6f:77:a2:3a:b4:53:f7:be:
                    ee:14:9f:89:7b:19:4e:53:d2:99:3e:10:b4:a2:50:
                    11:a3:f9:b6:41:76:61:ac:28:01:b8:13:96:35:d6:
                    d2:30:18:e0:19:9c:b2:3a:d7:27:95:76:68:a8:ff:
                    3a:71:19:bd:45:e6:51:9a:1c:69:d7:b7:31:ed:12:
                    51:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6E:51:1D:EF:D3:73:E4:A0:25:4C:62:44:51:44:4A:4D:90:71:59
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/AEA66C80F3B811ECA91DD8A2F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.138.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:b0:19:d8:6b:98:30:32:4e:2e:e7:74:f2:fa:f0:49:de:a1:
         15:61:cb:7d:6f:6e:df:2c:af:13:e7:33:0c:87:5c:6c:13:9a:
         e9:ca:2d:83:fd:3e:81:67:4d:cf:7e:c3:4f:52:3a:38:73:f1:
         d9:71:44:7a:ca:18:01:19:bf:2c:83:84:fa:50:f3:21:5c:bb:
         99:12:1c:b2:e3:69:c2:94:ed:23:84:db:ab:e0:60:c3:7e:10:
         a5:66:6b:2e:92:64:b8:82:05:da:46:86:d7:e8:94:b6:81:04:
         81:dd:d9:14:c3:bc:ee:86:cc:3d:91:50:26:5a:84:98:a2:f1:
         ea:70:bb:5d:cb:5e:b7:f1:9c:9a:b9:de:83:9d:43:c7:d7:88:
         c8:9b:06:4b:b6:aa:a9:d2:29:1e:0c:6a:0e:b4:7f:d8:ad:24:
         f3:e4:9e:ac:8f:fb:93:69:64:49:b8:22:c7:af:e3:b4:97:f6:
         ac:b4:f9:05:d1:77:16:29:e8:5f:1e:fa:c3:ba:1a:5c:67:2f:
         17:ee:6f:0d:60:19:29:92:03:e7:70:d3:29:80:ea:9b:e5:7b:
         1c:ea:4a:a8:c2:ca:65:08:53:ca:c6:cd:d7:5b:86:33:4f:9d:
         b3:97:34:41:a3:3c:2a:fa:74:f2:8a:b0:17:4b:08:2e:1b:f7:
         19:95:95:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:40 2024 by rpki-client on console-ams.rpki-client.org