Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/14D64DEC2F8E11EEADEF630E4AD9E6FC.roa
File:                     14D64DEC2F8E11EEADEF630E4AD9E6FC.roa (raw, json)
Hash identifier:          rBVKfBnpXS85m3ETw75aRyH+TK0t3D9ORSjQx2faoL8=
Subject key identifier:   84:E9:27:AE:63:CB:60:92:5A:56:D3:DA:AD:99:2C:39:7B:A8:FB:40
Certificate issuer:       /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial:       04F7
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/14D64DEC2F8E11EEADEF630E4AD9E6FC.roa
Signing time:             Mon 31 Jul 2023 10:36:18 +0000
ROA not before:           Mon 31 Jul 2023 10:36:14 +0000
ROA not after:            Fri 31 Jul 2043 10:36:14 +0000
asID:                     198949
IP address blocks:        41.203.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1271 (0x4f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
        Validity
            Not Before: Jul 31 10:36:14 2023 GMT
            Not After : Jul 31 10:36:14 2043 GMT
        Subject: CN=64c78ea2-2694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:9a:5f:3e:58:f8:93:16:b3:65:c6:39:1b:89:
                    c4:67:9f:e4:e1:0d:6b:58:47:e7:a1:7e:39:bb:14:
                    84:1a:ca:55:1a:bd:b1:8f:44:74:b1:05:46:50:3f:
                    4c:c9:c8:ff:1d:ef:93:e1:cc:bc:51:b8:3b:80:54:
                    68:69:76:ea:04:da:64:37:cc:ae:6d:87:70:21:19:
                    43:3d:26:3d:48:da:7e:95:4f:76:63:21:36:7f:58:
                    a5:59:0c:d7:2b:7e:b5:17:58:59:bf:fc:35:2c:10:
                    49:98:47:a0:9d:1f:1e:b5:9a:3e:5d:89:bb:8b:8a:
                    d8:f8:4c:67:98:cc:22:a4:f2:62:d9:8c:04:09:8d:
                    6d:61:7c:5a:6b:e8:b5:2d:64:9f:96:a4:58:95:6d:
                    fe:70:17:ef:ba:90:e9:01:b2:d5:25:f3:80:72:e4:
                    46:69:73:9e:9a:36:0c:f8:cd:01:89:31:ef:0d:b7:
                    af:4c:89:03:0f:26:01:fb:db:b2:aa:cc:01:32:25:
                    98:3d:13:ee:ae:53:2a:87:37:f2:f5:86:ef:25:66:
                    84:21:b1:0b:7c:8e:f6:02:72:20:75:c0:23:8e:e0:
                    48:bd:b8:33:9d:be:df:a0:97:c3:a5:bd:bd:fb:fa:
                    31:7d:18:f8:e6:49:e2:0d:15:58:0b:cb:c0:4e:f1:
                    b4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E9:27:AE:63:CB:60:92:5A:56:D3:DA:AD:99:2C:39:7B:A8:FB:40
            X509v3 Authority Key Identifier:
                keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/14D64DEC2F8E11EEADEF630E4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.203.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c7:d1:a1:59:b3:8a:7f:64:b5:7e:21:15:69:ca:13:5d:26:31:
         0f:db:64:90:11:b6:d5:4e:2c:13:a0:c3:27:3d:74:0b:7f:7f:
         a8:2d:e7:ba:c1:5c:bc:e3:90:2d:e8:3a:34:44:2a:05:27:05:
         ea:08:c3:0d:28:73:e2:1f:77:ac:7b:f3:e5:15:3e:9e:93:f4:
         99:c3:c1:60:df:1c:2b:75:2b:b7:32:f8:bf:ea:a5:1b:52:5a:
         fc:c4:78:16:d7:ac:74:73:e4:7d:5c:9f:ab:06:8d:2e:d2:f9:
         bb:5f:84:47:5c:e9:98:02:48:e7:b4:61:55:12:40:c9:ef:30:
         68:58:1f:19:fb:16:6a:d5:26:18:82:4a:a2:05:47:dd:69:44:
         38:58:24:f0:ef:12:a1:95:2c:36:0e:0b:b1:01:4d:a4:ea:b0:
         f1:af:d0:b6:06:40:14:b3:af:2a:8e:2f:0f:82:d5:e3:60:49:
         82:7f:03:4a:c5:a8:b1:5e:f5:6c:dd:5d:9e:cc:55:68:fc:21:
         ce:63:00:ec:d3:e6:f0:2c:75:d7:51:b1:d7:10:c0:37:8f:8b:
         4d:91:c0:d3:d8:29:5a:ee:a0:80:c6:9c:57:f3:67:74:58:9b:
         a0:7c:12:85:c9:9d:ed:4b:ce:09:d4:ad:18:0c:8c:96:8d:a9:
         be:c7:60:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:12:20 2024 by rpki-client on console-ams.rpki-client.org