Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/242674E4552211EDA972BE89F1222468.roa
File:                     242674E4552211EDA972BE89F1222468.roa (raw, json)
Hash identifier:          mgXQcjr/BMdelBEFlsA4Ey9jmpTGIg4YBGb4lByjDt8=
Subject key identifier:   60:71:8F:93:F4:FD:11:BA:02:6F:D1:5B:B7:14:E6:C8:F2:71:5F:91
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0A6C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/242674E4552211EDA972BE89F1222468.roa
Signing time:             Wed 26 Oct 2022 11:34:24 +0000
ROA not before:           Wed 26 Oct 2022 11:34:21 +0000
ROA not after:            Sun 27 Oct 2024 11:34:21 +0000
asID:                     36352
IP address blocks:        154.16.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 00:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2668 (0xa6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct 26 11:34:21 2022 GMT
            Not After : Oct 27 11:34:21 2024 GMT
        Subject: CN=63591b40-745b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:1c:f1:80:28:ee:16:fb:8e:f6:0f:59:4f:
                    d6:bf:bd:6c:8e:8d:f9:7c:9e:78:66:dd:78:b8:fc:
                    09:34:f8:c2:2d:ed:3f:ff:f2:f6:55:74:00:c8:b1:
                    55:19:a4:cc:76:18:69:8d:b3:2e:6d:e7:30:a2:08:
                    67:38:25:5a:8b:f0:b9:a4:ed:d2:b3:a6:56:00:c0:
                    c2:fb:80:c7:c2:e8:40:f9:0d:9c:d6:6b:b7:b0:c5:
                    54:bf:25:39:ae:d7:61:9b:63:85:c4:fe:d2:57:73:
                    12:8f:75:44:70:a3:94:37:34:66:16:fd:aa:88:a3:
                    f7:96:f4:a2:47:8b:a6:9b:4c:47:9f:9e:d2:c6:2a:
                    d7:a9:92:60:7f:9b:70:8d:2e:02:99:60:48:18:98:
                    7a:8b:c5:22:ac:5c:34:ec:b3:d0:49:03:45:22:44:
                    48:e7:85:aa:8a:bb:e1:2b:1e:54:d9:37:d1:b5:e8:
                    0b:22:20:23:a2:db:2c:39:ce:39:6a:c0:31:98:05:
                    0f:d8:22:fe:0f:3f:fc:0b:08:10:8e:c6:fc:22:13:
                    07:fb:10:6b:63:52:a4:60:ad:47:14:60:95:7c:b2:
                    73:39:2e:30:d6:3b:7d:f6:75:42:e9:28:03:bf:6f:
                    10:c4:6a:a0:c6:df:46:3c:b7:3b:99:fe:8f:bf:65:
                    2d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:71:8F:93:F4:FD:11:BA:02:6F:D1:5B:B7:14:E6:C8:F2:71:5F:91
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/242674E4552211EDA972BE89F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:d5:a1:88:dd:36:2f:13:91:76:28:38:46:05:9a:b3:4d:5f:
         10:9c:37:cf:4f:5c:f7:74:85:aa:22:fe:2a:ea:ab:f6:e3:c9:
         0e:47:b7:ae:56:e7:a2:05:40:04:13:0a:1c:a9:78:ca:0a:89:
         5d:a9:91:e1:4f:54:7b:cb:4f:97:f2:cf:cc:d5:69:17:af:69:
         09:4d:5a:d9:e6:c0:35:b2:bd:dc:c6:1a:5b:75:04:8f:4e:9b:
         d6:bf:d5:ba:45:37:e5:c9:c2:71:41:e3:d7:e8:1f:c7:b7:cd:
         a0:54:b3:75:7f:01:f4:a5:9c:44:50:5c:b1:90:13:60:6c:e2:
         95:e0:b9:00:ae:a3:7b:bc:65:bd:f9:71:d0:b7:d8:d5:42:30:
         e2:38:30:d6:dc:0f:d7:d5:54:db:46:12:3a:4e:e6:a3:88:2f:
         8a:bd:cb:c8:97:c2:98:4d:7b:7a:9d:25:67:c8:e2:c3:c5:b1:
         97:06:93:93:d2:fe:bb:bf:54:0c:bd:f9:60:5d:b6:1a:ad:30:
         a4:42:ce:ce:ee:a8:05:ed:09:d3:03:c0:07:18:26:69:65:76:
         1d:0d:80:b7:8f:03:1a:a9:84:65:88:df:c2:98:e1:df:60:06:
         a2:f0:d2:65:d8:b5:51:23:c7:3d:26:f6:aa:61:4b:59:77:8e:
         a3:69:fb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:11 2024 by rpki-client on console-ams.rpki-client.org