Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/340CE78262F511EC88FB8BA35A40D577.roa
File:                     340CE78262F511EC88FB8BA35A40D577.roa (raw, json)
Hash identifier:          BiKTohKXsACKdCTjuPmJ3W8yxYPF+HL0j5L9QHiSFZI=
Subject key identifier:   4F:34:29:8B:71:F7:5C:3C:64:14:0E:48:BE:FA:AE:DC:06:A8:17:18
Certificate issuer:       /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial:       0272
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/340CE78262F511EC88FB8BA35A40D577.roa
Signing time:             Wed 22 Dec 2021 07:03:02 +0000
ROA not before:           Wed 22 Dec 2021 07:02:59 +0000
ROA not after:            Wed 31 Dec 2031 07:02:59 +0000
asID:                     19905
IP address blocks:        105.160.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 626 (0x272)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
        Validity
            Not Before: Dec 22 07:02:59 2021 GMT
            Not After : Dec 31 07:02:59 2031 GMT
        Subject: CN=61c2cda6-ae03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f0:ce:3a:c9:e9:1f:9b:93:cb:b1:18:08:60:
                    7e:de:25:d2:a7:fc:15:a2:b0:d3:a2:8e:30:a1:71:
                    ee:8c:14:66:fa:af:2d:f9:c0:1b:56:0a:56:f5:73:
                    cb:af:bc:61:15:a2:67:83:cc:e8:34:37:b5:c0:e7:
                    fb:bf:bd:e8:d7:55:d3:08:12:80:ba:87:8d:d2:05:
                    b5:72:63:51:b8:5a:68:08:49:af:07:56:93:fb:6a:
                    06:42:d7:92:1f:97:19:f5:48:be:1a:1b:2e:c5:99:
                    09:ff:ed:e0:0e:ec:57:82:b2:4d:76:73:0e:8e:be:
                    f6:50:73:5a:52:e3:70:96:cc:72:ad:fd:d0:5b:df:
                    a4:0c:65:41:64:f7:ee:33:a4:8a:39:78:45:24:15:
                    81:00:4d:81:b7:00:eb:89:d1:a8:5e:d4:b7:4a:f2:
                    44:d7:d4:95:ff:52:79:fb:7c:fb:e7:76:ae:38:29:
                    40:45:b5:7c:df:d2:eb:07:6c:f3:54:59:aa:be:a7:
                    0e:07:5c:52:c3:fc:1d:8f:36:8e:17:67:c4:81:7b:
                    cb:81:a0:f0:4a:be:9a:35:95:c8:4d:0f:4f:8e:b8:
                    21:93:ca:41:5d:14:97:d0:d1:50:a8:b8:67:c8:7a:
                    5e:9d:8a:86:1a:59:c4:04:18:04:2c:83:05:4e:a8:
                    23:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:34:29:8B:71:F7:5C:3C:64:14:0E:48:BE:FA:AE:DC:06:A8:17:18
            X509v3 Authority Key Identifier:
                keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/340CE78262F511EC88FB8BA35A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.160.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         22:85:a6:82:c6:c5:47:33:79:e8:a7:01:ef:d4:d8:76:9a:ce:
         1a:bc:3c:38:32:1d:6b:17:4d:d2:b3:52:e9:1d:2f:42:07:36:
         00:48:06:1c:37:f6:dd:de:cd:54:c0:2a:bb:ff:b7:e4:0a:2a:
         da:21:62:62:0b:14:df:dd:b0:7b:21:b6:0d:29:2f:12:93:83:
         f0:46:38:81:4b:dd:8b:35:b5:ca:b6:28:b0:95:43:2f:03:d4:
         6d:56:95:6a:67:34:62:b2:f1:18:88:12:a3:ee:93:30:05:93:
         07:8d:40:4b:9a:64:0b:c5:03:5a:9a:04:4c:98:59:1b:55:47:
         4e:8a:4e:18:0c:36:fa:d2:9b:a4:41:75:4c:16:5e:b1:73:59:
         dd:36:ec:ee:4d:f5:8b:3f:8c:59:ec:15:d5:01:f6:0f:f6:59:
         98:1e:49:2f:aa:7e:c7:af:bc:04:3e:f7:ac:20:11:8c:74:b3:
         93:7f:0c:22:61:e9:11:c8:94:17:1a:40:45:2a:c3:14:98:16:
         a3:a2:d4:b9:be:c5:de:94:d0:bb:5c:26:55:ed:75:50:3f:66:
         fc:1c:e8:7d:bd:c5:87:ad:58:51:e2:4b:55:dd:46:2c:28:1b:
         0a:42:e4:78:60:04:4e:6d:7a:06:b2:64:7a:46:6d:a7:ed:f2:
         b6:81:21:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:12:16 2024 by rpki-client on console-ams.rpki-client.org