Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0B424A80296E11EFB52DB60C7DDC24C2.roa
File:                     0B424A80296E11EFB52DB60C7DDC24C2.roa (raw, json)
Hash identifier:          yDiOP0Za74K2HHTD+etCHkKdoiIIFdjMlXK2IVECeNo=
Subject key identifier:   C5:EF:67:34:09:C7:F6:55:6B:DE:D6:9C:E9:42:D8:CB:37:8C:B5:DB
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       16E6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0B424A80296E11EFB52DB60C7DDC24C2.roa
Signing time:             Thu 13 Jun 2024 10:16:49 +0000
ROA not before:           Thu 13 Jun 2024 10:16:45 +0000
ROA not after:            Sat 13 Jun 2026 10:16:45 +0000
asID:                     834
IP address blocks:        154.16.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Jul 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5862 (0x16e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun 13 10:16:45 2024 GMT
            Not After : Jun 13 10:16:45 2026 GMT
        Subject: CN=666ac710-bc9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0b:73:f4:53:1d:21:59:b3:95:45:f6:e8:9c:
                    fb:c4:38:12:86:05:1e:43:3c:e1:8f:b7:d6:13:36:
                    b0:3b:86:89:6d:1a:ad:20:7a:60:93:e7:e3:f7:36:
                    6e:1e:c9:f5:83:65:94:21:aa:2d:44:05:dc:45:bf:
                    e6:2a:84:39:8e:f7:b7:c0:62:b4:b1:37:97:8c:be:
                    a9:c8:37:5d:9b:50:88:ed:44:cf:78:69:b0:7e:36:
                    e9:58:0c:2c:ee:df:8a:e1:f3:42:7f:c6:d2:67:80:
                    12:6d:79:b3:e7:ae:6f:50:ce:39:f0:46:7b:98:a6:
                    13:1c:16:46:0f:56:e2:e6:54:26:30:53:b7:28:6e:
                    3f:05:d5:61:15:0b:17:c9:31:fb:c9:af:96:c5:6c:
                    bf:26:61:8c:92:99:3e:89:bf:5d:30:12:45:f5:c5:
                    2f:87:3e:4e:8f:96:00:a7:53:b7:bb:84:c2:4d:e1:
                    a7:e3:e1:bc:34:30:bd:3c:1f:b7:1f:f0:ec:57:2b:
                    7c:cc:9c:1d:31:f1:00:71:16:eb:99:eb:48:b2:3a:
                    ea:12:9f:d9:cd:39:eb:a9:ae:77:7b:89:bd:ff:b0:
                    ef:7c:39:49:00:0d:04:49:80:48:28:57:37:d7:85:
                    96:4c:41:74:66:a3:29:a3:c5:8b:31:ed:43:64:c5:
                    29:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EF:67:34:09:C7:F6:55:6B:DE:D6:9C:E9:42:D8:CB:37:8C:B5:DB
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0B424A80296E11EFB52DB60C7DDC24C2.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:90:95:f7:60:c9:96:7e:f9:82:c0:0a:b6:06:28:fd:d8:40:
         19:04:47:26:c8:7c:5e:9d:de:78:65:b1:e6:9c:1e:c5:90:3e:
         36:08:73:89:ea:78:7a:58:96:08:a2:43:10:41:f6:99:20:4e:
         31:27:53:f5:dd:aa:c0:66:67:b6:82:b5:3c:72:ac:32:a4:8d:
         a2:37:07:17:4d:63:aa:b1:ba:1e:61:26:6c:ae:4d:e2:99:9a:
         88:ad:36:90:2d:0f:c0:8c:f9:71:1d:66:20:12:c1:d6:1b:86:
         b9:df:53:60:79:bc:75:48:24:c0:f2:49:c6:64:09:c8:e6:00:
         59:0a:14:41:18:9f:80:01:6c:5b:bc:cd:50:62:60:09:33:bd:
         2b:8c:25:47:93:d7:9f:12:42:22:ea:13:8e:9f:1e:8d:67:d4:
         cb:69:75:26:12:fa:e3:5c:78:27:9c:c7:a7:17:1d:7f:e0:13:
         0a:39:7f:3d:98:6b:35:09:7a:9c:6c:89:2b:5e:2d:be:c4:6f:
         af:03:9e:a2:bb:fe:53:60:21:f9:70:6b:56:e1:64:d2:4d:8e:
         95:f5:1d:2b:31:b7:ba:73:9a:d0:8e:b3:a0:7b:62:4b:bf:c8:
         1a:0d:b5:9c:00:d3:a6:b1:27:5d:80:e1:bb:bb:d9:3a:5e:b9:
         7b:80:84:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 02:13:03 2024 by rpki-client on console-fra.rpki-client.org