Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0774A32C759411EFB25A2BA6762E951A.roa
File:                     0774A32C759411EFB25A2BA6762E951A.roa (raw, json)
Hash identifier:          GbiobaHUTKlMg4N4WyzJ4yYSkmzGo0SUCmrMA1xvC1A=
Subject key identifier:   6E:2D:F3:85:18:E6:91:C3:A1:D6:59:EE:69:9D:E4:42:E1:0B:AF:4A
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       180D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0774A32C759411EFB25A2BA6762E951A.roa
Signing time:             Wed 18 Sep 2024 08:00:11 +0000
ROA not before:           Wed 18 Sep 2024 08:00:06 +0000
ROA not after:            Fri 18 Sep 2026 08:00:06 +0000
asID:                     212238
IP address blocks:        154.16.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6157 (0x180d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 18 08:00:06 2024 GMT
            Not After : Sep 18 08:00:06 2026 GMT
        Subject: CN=66ea888b-b345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f5:e0:3f:07:a2:bb:c4:f8:c9:03:66:86:ec:
                    5f:a7:a1:71:20:23:f0:b2:65:9c:55:1d:0e:38:93:
                    19:02:0a:65:37:31:b7:b4:ef:9c:3c:f4:30:a1:e0:
                    6f:e1:d2:56:fb:7c:6b:45:a7:7d:13:0a:36:3d:d4:
                    35:c2:e2:9c:d0:98:e9:21:44:01:6a:f3:f6:1f:2b:
                    d4:b6:af:8b:29:86:2d:14:89:3c:31:20:74:5d:af:
                    93:22:ee:72:6a:56:8b:af:3e:12:82:4a:87:bf:50:
                    47:56:8f:41:b7:93:61:3e:b0:cb:57:c8:9b:a6:1d:
                    17:a4:1b:80:aa:7d:ed:21:68:f3:bc:4e:16:5d:9d:
                    8e:e6:b9:65:dd:83:dd:a0:22:85:f4:60:6e:f9:17:
                    51:d7:fb:0b:b3:23:8a:38:ea:7c:de:d6:7f:36:0f:
                    b3:11:e0:aa:c8:e5:b9:90:61:78:4e:f0:9e:47:97:
                    99:36:17:52:30:47:29:04:5d:0e:06:2b:fb:be:8c:
                    17:19:ef:cd:43:74:d4:4e:70:57:55:a1:43:13:a2:
                    4b:8c:f0:d7:00:f2:bb:07:11:26:06:7c:0f:8f:73:
                    82:a1:1b:05:60:d1:b1:d1:e7:a1:f2:5b:ad:81:36:
                    b3:eb:29:3c:85:0f:ab:ff:9c:95:28:ca:94:19:bd:
                    dc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2D:F3:85:18:E6:91:C3:A1:D6:59:EE:69:9D:E4:42:E1:0B:AF:4A
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0774A32C759411EFB25A2BA6762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:4e:3d:c0:01:7f:8a:20:1f:cb:8a:a8:8f:5b:15:08:ea:dd:
         42:3e:4e:b4:27:56:92:8b:47:75:ce:16:d0:b1:6e:b0:d8:fa:
         e8:78:0d:7e:b1:19:df:d5:b2:ac:9c:34:dd:dc:b9:3d:51:bb:
         40:f7:77:37:35:ca:c5:f8:7e:e6:bc:65:1f:fe:d2:74:4c:91:
         61:59:f2:01:dd:01:ab:32:94:d3:8d:9c:60:32:a7:3a:4a:1e:
         db:74:86:5b:8e:07:3f:9c:a1:ea:01:bc:3a:a3:22:4e:44:6a:
         85:4f:bb:fc:c0:2c:ab:5b:36:9c:d5:98:3f:2a:b2:c8:cd:b7:
         e9:f8:e5:09:56:79:1b:50:ae:2e:c2:65:c9:1a:c8:8c:3e:bb:
         ea:76:bc:36:1f:e8:ab:93:66:13:4b:89:88:ba:76:fd:ce:e4:
         5e:80:f4:d3:3c:4c:4e:8d:39:c8:e8:1a:ae:2b:bb:ba:eb:97:
         90:03:52:74:4d:b8:0c:68:8e:89:84:90:07:65:7c:da:be:9a:
         95:50:df:b9:3b:80:98:8f:21:86:a6:90:ba:19:4b:31:40:76:
         8b:e0:74:18:b5:f6:6f:a3:ab:9a:ef:34:46:08:fe:4a:d3:98:
         1e:4f:1e:30:cf:67:07:57:c2:32:fc:59:69:6a:4a:3e:e7:6b:
         d8:9b:01:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:55 2024 by rpki-client on console-fra.rpki-client.org