Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/01B62ACEF64F11EEA7BF4372775412E6.roa
File:                     01B62ACEF64F11EEA7BF4372775412E6.roa (raw, json)
Hash identifier:          JFeLgbzAfmQPQNmjnlZv5H8jcPctU6ppJiDbWstuUUU=
Subject key identifier:   08:1B:03:43:E1:39:B9:C2:3E:3D:58:12:B3:09:9A:DB:C8:18:17:17
Certificate issuer:       /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial:       10
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/01B62ACEF64F11EEA7BF4372775412E6.roa
Signing time:             Tue 09 Apr 2024 08:56:09 +0000
ROA not before:           Tue 09 Apr 2024 08:56:05 +0000
ROA not after:            Sun 09 Apr 2034 08:56:05 +0000
asID:                     328866
IP address blocks:        41.92.128.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Jun 2024 00:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
        Validity
            Not Before: Apr  9 08:56:05 2024 GMT
            Not After : Apr  9 08:56:05 2034 GMT
        Subject: CN=661502a9-325b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:49:a9:8b:9c:8a:f2:e4:81:b2:03:60:28:bb:
                    18:ec:66:e0:08:41:4f:e7:67:0d:5e:58:fa:9f:e0:
                    72:cd:ce:09:c7:a4:ee:d5:cc:c4:66:5a:63:a2:54:
                    66:48:13:b6:ab:1c:65:25:a6:7e:66:e5:39:57:2c:
                    69:76:b1:39:61:37:07:e1:a1:fb:5d:61:1e:c0:7f:
                    fd:1e:c5:80:34:42:24:52:b7:e4:95:6d:af:7b:6d:
                    8f:cc:b4:85:f5:38:b3:b7:14:4a:48:03:63:76:75:
                    a8:c7:a5:14:44:c5:8c:28:80:7b:aa:a6:63:70:75:
                    e5:1e:22:82:97:d5:62:3c:d4:dd:0e:8c:0e:7c:55:
                    c5:07:eb:91:f0:fb:23:2f:fc:bc:27:bd:bb:f6:40:
                    91:7c:36:65:ea:00:59:ad:43:46:98:79:41:35:46:
                    9f:72:5b:2b:a8:07:4a:5b:52:e0:86:e6:28:02:f4:
                    a6:71:b2:df:85:79:e4:62:29:22:16:1e:4d:bd:14:
                    ce:37:07:bb:a1:11:a1:8e:9c:ce:e4:d3:88:ba:17:
                    d9:f5:af:54:d1:a4:54:9e:05:ad:1e:61:eb:25:21:
                    4e:67:89:c8:f0:20:4d:51:be:64:ed:67:45:b4:10:
                    c5:c2:d6:e8:91:83:41:78:17:af:24:f6:5d:dc:d5:
                    0c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1B:03:43:E1:39:B9:C2:3E:3D:58:12:B3:09:9A:DB:C8:18:17:17
            X509v3 Authority Key Identifier:
                keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/01B62ACEF64F11EEA7BF4372775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.92.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:27:46:5e:61:46:3c:c7:f0:cb:c7:17:00:50:a0:a1:f7:55:
         63:af:fc:9d:aa:d1:07:e9:2f:c1:ac:d1:dd:75:dc:bc:39:e4:
         f3:46:d4:96:83:dc:9b:7f:12:9a:bf:1a:6e:a4:4f:2d:63:22:
         e5:83:5a:74:7a:48:13:ba:f1:37:db:a5:eb:1a:17:1c:7a:83:
         e2:b2:76:eb:9d:9e:ef:04:c1:3e:27:dd:56:f0:88:ec:16:ab:
         f7:71:94:64:cf:02:9e:3e:bd:2c:eb:02:3f:6b:b3:c9:29:03:
         76:a1:05:0b:cd:5c:a2:5b:1e:b7:21:fa:b4:47:63:0e:49:18:
         4b:f9:69:71:7d:5b:c5:51:84:ed:44:87:1e:36:d1:09:5f:d0:
         14:f9:3c:5e:b5:d6:38:21:3b:c0:f3:c0:50:01:a3:0f:de:56:
         83:97:d3:cd:8c:c8:fd:42:59:43:f7:c8:74:58:08:30:cf:df:
         8c:9b:74:79:5a:4d:bc:2d:c6:8b:e7:8b:64:92:e7:c2:93:99:
         b4:c2:35:9a:0d:be:e1:20:c8:7a:a7:ae:a1:9a:c3:a9:e8:09:
         c4:92:1e:01:ba:32:a9:24:95:3b:0f:6d:47:80:62:78:d0:f3:
         d2:a6:b5:f1:0c:09:45:0f:5d:e1:cb:89:d8:ce:7e:27:be:ab:
         fc:e7:f7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:31:05 2024 by rpki-client on console-ams.rpki-client.org