Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/DA5727E2F3B911ECA19B77A6F1222468.roa
File:                     DA5727E2F3B911ECA19B77A6F1222468.roa (raw, json)
Hash identifier:          FFlRwNG2QzMxaKgp3i9+3sbQKR3QXK9kAZnotcZAUqk=
Subject key identifier:   56:B1:FE:AF:02:CA:F1:28:EB:98:E2:F5:48:9C:2C:D6:78:3C:9E:7B
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0513
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/DA5727E2F3B911ECA19B77A6F1222468.roa
Signing time:             Fri 24 Jun 2022 12:33:30 +0000
ROA not before:           Fri 24 Jun 2022 12:33:26 +0000
ROA not after:            Wed 12 Jun 2030 12:33:26 +0000
asID:                     36916
IP address blocks:        41.180.56.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 04 Jun 2024 00:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1299 (0x513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jun 24 12:33:26 2022 GMT
            Not After : Jun 12 12:33:26 2030 GMT
        Subject: CN=62b5af1a-14ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a2:af:33:89:b3:a7:51:d2:e3:48:cc:e6:38:
                    e4:9c:3b:b6:0b:fe:b4:3d:fd:13:a2:2a:ea:66:e4:
                    45:b2:f5:ad:89:67:1a:41:c4:0d:f6:a7:7e:4b:00:
                    65:6b:d4:ba:84:6a:a2:61:46:0b:ce:5e:c4:11:b5:
                    92:c9:a7:d5:f9:05:f1:08:2b:0d:7c:8b:ce:d6:96:
                    6a:51:20:06:37:29:2f:ca:da:cd:cd:0e:c1:cf:d8:
                    6a:bd:ee:2f:0f:d0:60:3e:28:59:19:39:3f:66:10:
                    b9:62:d6:71:53:e8:0c:04:e1:8a:a8:19:30:ac:0c:
                    df:c2:72:68:22:2d:3f:f7:e5:c7:d9:a5:0e:c8:61:
                    bd:29:b4:09:f0:38:49:18:a9:fb:a1:18:a6:de:d4:
                    cc:86:65:9b:81:75:3a:04:0e:59:61:57:7a:13:6e:
                    10:7c:2f:66:ed:ec:e6:72:ad:62:59:c6:b4:09:e6:
                    e1:55:ed:e5:a2:3f:23:b0:13:97:64:53:51:66:0f:
                    d8:e2:05:ac:c8:18:d7:83:eb:44:9b:5f:37:cc:24:
                    22:73:e8:08:62:6c:07:f7:a3:21:cd:22:72:b7:b9:
                    51:aa:b2:c2:39:ac:89:d8:02:52:6f:b6:e1:1e:6e:
                    51:15:cb:4b:7d:9c:f3:f5:8a:9f:ac:a4:fc:be:80:
                    b5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B1:FE:AF:02:CA:F1:28:EB:98:E2:F5:48:9C:2C:D6:78:3C:9E:7B
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/DA5727E2F3B911ECA19B77A6F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         44:00:bb:0f:33:c5:d2:77:aa:c1:0a:f0:61:db:7b:9c:61:e9:
         36:72:ff:dc:e5:b1:6a:11:a6:3d:8e:a9:1c:d1:f4:6f:90:c5:
         93:a5:c8:8f:21:fd:58:e8:41:1e:33:9f:95:04:25:95:d1:da:
         9f:30:31:51:fd:eb:81:87:8c:c7:9c:b5:1e:dc:e8:7d:b0:fc:
         03:98:6b:c1:50:bb:79:48:29:d9:65:12:85:0f:78:fc:97:c9:
         8a:0c:b1:1c:b7:16:ec:c6:0a:ed:db:80:c6:5c:5f:e8:ae:61:
         08:e0:7f:70:3f:a8:76:a2:72:b7:59:ec:e7:15:ea:89:7f:07:
         61:06:39:a1:d1:cb:bf:b6:ff:a0:f0:a4:b0:7f:f8:72:37:f0:
         61:da:ca:0a:8d:d5:3b:0e:52:8e:53:1a:78:ad:5b:5c:43:79:
         c3:33:59:55:a5:6c:d2:3b:b5:34:74:5c:36:c2:9d:e9:45:5e:
         92:1e:9d:e6:1f:a6:6b:70:fe:1f:08:9c:9e:07:89:8f:4c:25:
         00:34:e4:b3:ce:64:28:29:27:b8:02:48:a5:b2:a4:a3:7c:46:
         c0:58:4b:52:2e:e5:09:0e:f9:35:80:fd:85:a3:c9:52:12:fe:
         41:71:63:71:4b:6e:97:73:e2:9b:1d:b6:5d:71:3c:84:da:8f:
         96:af:a2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:16 2024 by rpki-client on console-fra.rpki-client.org