Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/BA11D35262F411EC899A13A25A40D577.roa
File:                     BA11D35262F411EC899A13A25A40D577.roa (raw, json)
Hash identifier:          PYbb8O1H6qiese78i05z5CDHud1OXuJCXJztegbeKe8=
Subject key identifier:   C9:D8:E2:53:5A:4C:5C:EC:69:67:E0:6C:48:7A:32:31:86:E2:D4:9B
Certificate issuer:       /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial:       026D
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/BA11D35262F411EC899A13A25A40D577.roa
Signing time:             Wed 22 Dec 2021 06:59:38 +0000
ROA not before:           Wed 22 Dec 2021 06:59:34 +0000
ROA not after:            Wed 31 Dec 2031 06:59:34 +0000
asID:                     19905
IP address blocks:        105.48.0.0/12 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
        Validity
            Not Before: Dec 22 06:59:34 2021 GMT
            Not After : Dec 31 06:59:34 2031 GMT
        Subject: CN=61c2ccd9-c7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:46:1e:9b:f7:10:f7:6f:1a:5a:e5:66:6e:75:
                    bb:2e:4d:97:76:6b:6d:bc:e6:07:48:13:08:5b:81:
                    92:ae:e4:5c:21:2d:a9:ca:81:6e:a1:c8:00:46:af:
                    1c:9a:48:0c:06:dc:47:0b:46:f5:be:95:08:7f:f3:
                    04:da:5e:2b:7d:b6:6b:c1:c9:13:aa:8b:41:4d:66:
                    1e:aa:60:a5:d3:d0:ac:df:e6:41:41:f0:b1:f2:82:
                    79:d2:9a:27:c3:2e:95:99:96:90:be:7b:50:bb:be:
                    c9:ef:c6:2e:48:3e:c0:40:9f:e2:13:b4:15:a5:f4:
                    c6:4d:68:66:a6:ea:eb:4e:06:b1:4e:79:e6:8a:0e:
                    e5:09:d7:41:fe:6c:a9:4c:2f:02:c3:2e:44:1b:ad:
                    ce:b8:b9:55:71:2b:05:1a:f2:2d:7d:d0:77:38:be:
                    94:da:4c:4f:f0:d1:ac:2b:a7:6c:88:fe:ba:6a:56:
                    ed:a4:95:56:d6:5e:8b:f7:15:f9:cd:b0:dd:5d:02:
                    6d:98:2d:47:0a:71:3f:d0:7e:d8:9a:c3:43:a2:90:
                    d8:4f:e0:03:5e:a6:02:74:3c:56:52:7a:3e:63:60:
                    03:0e:10:c3:13:19:29:9d:0c:4b:84:dc:7f:1c:8e:
                    8d:2c:6b:6a:a4:f2:64:e5:0e:13:ab:e6:80:05:2d:
                    6b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D8:E2:53:5A:4C:5C:EC:69:67:E0:6C:48:7A:32:31:86:E2:D4:9B
            X509v3 Authority Key Identifier:
                keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/BA11D35262F411EC899A13A25A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.48.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         c9:11:8f:9d:e7:70:b3:6c:6f:d1:bf:b9:02:9c:6d:93:b1:34:
         01:a0:b0:74:58:4b:f1:7b:43:b3:7a:5c:4a:69:9f:61:5f:9c:
         68:c8:d2:cc:43:f8:eb:c5:38:75:6b:4c:38:74:62:ab:86:e8:
         da:c5:a0:8f:87:06:a4:bc:d0:6d:ed:d5:c3:c4:68:f1:16:f1:
         ef:75:6c:08:72:8d:b1:3a:82:18:ed:44:03:ff:7a:82:48:be:
         a2:85:fa:88:21:a9:ad:f1:97:9a:24:8c:e3:8f:93:40:aa:6b:
         32:f4:25:2e:f9:b0:cf:c4:c5:a4:fa:3c:a3:99:f0:98:55:f9:
         8e:1e:73:3e:eb:6e:6d:7f:79:78:02:1a:69:36:5a:44:18:1e:
         41:e9:86:38:b3:c1:dc:89:26:bc:92:c4:1e:0b:bf:bd:3a:b6:
         f5:25:f3:f8:bb:f7:b1:2d:b6:52:74:93:27:b7:f5:3a:fc:5e:
         10:80:ea:3a:ad:ee:21:1e:13:0e:c8:69:57:45:9c:b6:d2:77:
         71:ac:5b:0b:65:38:72:24:f6:67:11:ea:da:be:3a:f3:0a:00:
         d3:dc:33:33:fc:b4:de:ba:e4:cf:fe:6a:d2:ca:b5:3c:25:52:
         31:81:61:3a:46:a9:97:31:0d:58:52:b4:be:e9:92:e9:cd:0e:
         c6:17:00:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:12:16 2024 by rpki-client on console-ams.rpki-client.org