Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/474A0C00BF2711ED866BCDB1F1222468.roa
File:                     474A0C00BF2711ED866BCDB1F1222468.roa (raw, json)
Hash identifier:          vWhe+qpX7yO3zSQDfZFmM1NAveobUhjW5jaNbI8jeio=
Subject key identifier:   86:B0:0D:9C:4A:4F:05:30:17:C5:06:59:EF:7A:A0:35:40:CE:B8:9F
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       51
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/474A0C00BF2711ED866BCDB1F1222468.roa
Signing time:             Fri 10 Mar 2023 09:38:14 +0000
ROA not before:           Fri 10 Mar 2023 09:38:10 +0000
ROA not after:            Thu 31 Mar 2033 09:38:10 +0000
asID:                     37182
IP address blocks:        41.93.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 15 May 2024 00:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Mar 10 09:38:10 2023 GMT
            Not After : Mar 31 09:38:10 2033 GMT
        Subject: CN=640afa86-edb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:72:20:f9:61:5c:72:dd:13:f5:34:fe:04:
                    d4:e0:f7:39:3f:6e:12:4f:a7:d3:10:84:d8:9d:98:
                    02:de:cf:8f:71:ea:fb:a0:6f:4d:a8:fb:b6:de:23:
                    26:c4:1d:28:ff:95:d5:9e:f0:9f:f5:4c:46:87:db:
                    04:a4:bc:ac:98:36:af:06:08:dd:81:dd:04:72:dc:
                    40:f1:e1:28:0a:75:a9:0a:05:de:42:18:5d:4b:4d:
                    f7:38:3d:cf:08:e1:76:43:5b:28:0b:24:8d:7c:b8:
                    d6:26:e7:9f:8c:8e:34:65:f2:c4:6c:95:ba:bd:0c:
                    39:29:a2:54:e4:71:74:ea:a3:58:4d:01:25:df:da:
                    b4:e7:72:33:68:17:2c:f8:8e:30:32:cc:02:3c:a0:
                    42:b2:5c:57:c4:0f:89:27:36:04:52:ad:92:fe:a3:
                    8a:50:f7:63:4c:47:60:21:60:61:56:12:3e:ea:b7:
                    a4:d9:df:a6:18:a7:3d:6f:ec:9e:43:67:51:ac:53:
                    62:75:25:8a:1f:3f:b4:28:3c:f1:df:21:46:3f:e7:
                    3d:a7:3e:3b:20:13:df:b1:0b:98:e2:93:f5:9b:af:
                    6c:c7:37:4f:89:ee:4e:a9:1b:9b:b9:63:d5:2c:65:
                    e0:59:ce:fa:11:af:0c:47:a2:fe:c5:88:1b:7e:8d:
                    c0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B0:0D:9C:4A:4F:05:30:17:C5:06:59:EF:7A:A0:35:40:CE:B8:9F
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/474A0C00BF2711ED866BCDB1F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.93.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:27:7b:6d:b2:78:e1:5b:13:a2:f1:99:f6:0e:32:74:6a:e4:
         d3:93:ab:d8:78:91:09:44:61:6f:d9:a2:56:dd:8a:5c:99:7d:
         7e:fe:82:7a:69:41:b2:4d:4b:b1:c7:d0:a8:38:90:34:3f:da:
         eb:61:d7:36:a1:57:3a:1c:b5:8e:b4:9f:3f:db:78:fe:f9:0e:
         53:70:fd:59:ca:86:0d:1b:e6:15:f8:b3:0e:9c:3f:b3:9c:d2:
         68:a5:d9:d3:a6:43:38:61:4c:9e:72:12:9e:13:81:c5:02:88:
         37:8f:19:27:82:bb:d6:2e:34:60:4d:e5:cf:93:9f:5d:51:9e:
         80:70:d1:32:69:a5:8c:e8:50:fd:8c:c6:07:e2:fd:f6:38:4f:
         fe:54:96:0d:33:fa:39:c7:66:99:27:35:ed:c5:b0:59:4c:6b:
         83:99:4c:c2:6a:96:ca:ed:54:28:4f:b1:91:86:5a:de:65:e4:
         6e:7e:ec:c5:66:c7:ce:0f:de:b0:ce:67:6f:a2:c0:31:d9:a0:
         2d:d9:9a:5b:81:da:a8:23:24:e4:22:16:ba:48:60:d1:44:dd:
         76:c4:b1:a8:50:ff:4f:94:27:7a:11:d8:ab:57:e9:67:b4:99:
         34:f9:9b:0a:a3:50:bd:63:ae:9d:3f:a1:28:3e:96:56:a4:ad:
         a1:f5:91:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:51:16 2024 by rpki-client on console-fra.rpki-client.org