Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5561670E8B8511EEB733CA174AD9E6FC.roa
File:                     5561670E8B8511EEB733CA174AD9E6FC.roa (raw, json)
Hash identifier:          w8l/OjxCZZkqibhiu0X31i3n2JAhsc1BBMRvWLUSnHk=
Subject key identifier:   B5:89:D1:D0:F6:39:82:EB:34:99:0A:C4:2E:E8:5D:44:1E:3F:90:D1
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1361
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5561670E8B8511EEB733CA174AD9E6FC.roa
Signing time:             Sat 25 Nov 2023 11:25:27 +0000
ROA not before:           Sat 25 Nov 2023 11:25:24 +0000
ROA not after:            Tue 25 Nov 2025 11:25:24 +0000
asID:                     212238
IP address blocks:        154.16.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 16 Jul 2024 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4961 (0x1361)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Nov 25 11:25:24 2023 GMT
            Not After : Nov 25 11:25:24 2025 GMT
        Subject: CN=6561d9a7-2b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:73:ea:8a:74:bf:46:d0:61:4a:06:49:d0:
                    5a:35:32:62:87:ac:ba:45:a3:61:cf:bd:4f:1c:36:
                    3d:2f:39:38:cf:a9:e7:e5:6e:79:2a:64:53:f2:69:
                    eb:29:ca:d5:45:99:ce:55:66:5f:a9:18:0d:3d:fa:
                    f1:a7:64:f4:f8:16:18:d9:77:c5:a1:62:75:5c:c5:
                    17:d6:c2:b3:70:9b:9d:a2:4d:eb:b0:5b:45:1c:da:
                    7e:8c:b2:47:d2:62:0b:2e:19:b8:6d:d5:be:97:e6:
                    93:d2:f6:bb:4b:c3:a7:f0:9a:3d:06:ce:82:91:40:
                    5d:a4:69:80:0b:ed:19:e1:b8:d3:c8:a3:0a:be:6e:
                    01:12:5c:41:8f:5e:b7:32:f6:e9:bd:8e:9c:e3:aa:
                    c5:9e:0e:d2:70:f6:68:5f:e0:a1:96:ef:6a:f6:36:
                    4b:5c:76:cf:54:b2:96:bc:79:33:d4:6b:a5:41:86:
                    1f:55:7a:24:3c:aa:bc:39:bf:3a:78:e0:9a:de:07:
                    f7:07:78:ba:8c:5f:96:34:c7:54:4f:43:31:80:30:
                    55:60:6d:67:fe:97:5e:6b:b2:27:cf:cc:09:a2:bd:
                    6b:9e:6d:f6:3c:70:7a:6a:35:a7:c2:b4:67:b4:fb:
                    58:ca:62:36:d6:5e:e2:9f:93:40:66:72:78:94:3c:
                    6a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:89:D1:D0:F6:39:82:EB:34:99:0A:C4:2E:E8:5D:44:1E:3F:90:D1
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5561670E8B8511EEB733CA174AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:43:e2:12:84:ce:05:ca:24:d2:a5:93:37:08:81:e8:94:3d:
         e9:8e:4b:54:7b:6f:1e:09:61:23:32:30:f7:d1:2c:53:47:99:
         90:46:98:8c:9f:8c:60:2d:cc:5e:f4:29:79:fd:9a:38:fc:21:
         2f:7e:43:ac:60:e3:25:8f:84:e5:68:89:d9:dd:d9:93:c4:d3:
         e7:8d:fa:52:62:f1:1a:6a:fa:a6:ee:2a:d8:7e:67:83:34:a2:
         37:ad:50:42:4f:e0:b2:08:62:04:ac:a2:5a:bb:86:80:10:88:
         12:a6:be:3c:dc:69:69:c6:96:0d:e3:34:c6:75:42:8b:e3:8c:
         24:d9:44:0e:3d:38:9c:92:63:ef:cb:1e:cf:47:f1:be:25:64:
         ff:f2:1e:cb:ed:00:37:b5:ea:c4:39:9d:e4:51:b6:ea:21:57:
         03:68:64:4a:00:ff:75:43:6a:8b:22:b4:f2:c5:ea:8d:d1:34:
         62:d8:85:5b:f0:aa:c5:da:3d:a9:1c:49:2b:36:aa:b9:3a:a7:
         77:65:c5:c4:73:1e:60:89:36:19:8b:ed:53:b3:5a:d7:61:17:
         71:09:8c:62:13:99:8b:5b:34:db:cc:6e:a6:86:f5:e3:58:ef:
         ef:44:5b:d4:aa:23:2f:a3:cf:56:e6:78:ab:9d:c0:52:8b:ed:
         1c:42:af:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 02:50:28 2024 by rpki-client on console-ams.rpki-client.org