Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/60740FF0903B11EF929C479B762E951A.roa
File:                     60740FF0903B11EF929C479B762E951A.roa (raw, json)
Hash identifier:          64peXRLNa8+TczvoyuevNKOtK9ieeXdcBYPMbhgJYaY=
Subject key identifier:   70:05:46:68:F4:7E:D1:8A:58:34:9D:36:EC:2D:D8:BB:8F:D1:F4:7A
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       189F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/60740FF0903B11EF929C479B762E951A.roa
Signing time:             Tue 22 Oct 2024 06:03:37 +0000
ROA not before:           Tue 22 Oct 2024 06:03:33 +0000
ROA not after:            Thu 22 Oct 2026 06:03:33 +0000
asID:                     212238
IP address blocks:        154.16.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6303 (0x189f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct 22 06:03:33 2024 GMT
            Not After : Oct 22 06:03:33 2026 GMT
        Subject: CN=67174039-3447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3c:54:44:db:32:0f:4c:9b:44:9a:34:bc:2b:
                    2b:53:44:72:05:b4:7b:78:e5:b4:cd:94:ad:48:42:
                    90:1b:8e:3a:ab:e8:48:15:3d:46:24:a4:1d:a8:8b:
                    10:a2:55:69:c6:97:e8:c7:19:e6:84:41:f9:98:62:
                    1c:ef:14:f2:e4:65:28:d7:0f:23:9a:cb:9a:76:3c:
                    5d:5f:77:57:01:35:32:18:31:0d:76:df:02:89:f5:
                    3d:30:0b:9f:8b:60:81:6f:c2:69:36:11:84:b7:ec:
                    07:63:26:2e:b8:7b:bf:af:2d:fa:9a:1c:15:95:c0:
                    ac:76:e1:fc:18:db:8f:92:91:2d:9b:1f:e6:c1:e0:
                    c6:2c:35:90:68:1f:e4:8a:29:0d:fc:bf:a2:a8:85:
                    66:7e:13:37:2d:89:53:68:ca:c5:57:3f:68:67:0a:
                    b9:85:d2:88:be:a4:3d:af:d1:40:84:ae:aa:a5:9a:
                    23:9a:d0:50:50:95:0e:79:ed:04:a1:a2:eb:64:65:
                    b1:33:16:55:29:7d:71:a2:12:5d:b9:ad:3d:c1:47:
                    8a:d1:4f:36:89:81:b4:2b:a3:a6:24:48:06:3a:0c:
                    7d:42:88:5c:21:58:3b:52:75:a2:42:b5:8f:40:17:
                    f3:5d:f9:78:59:95:06:2b:53:b7:f4:19:af:8d:46:
                    14:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:05:46:68:F4:7E:D1:8A:58:34:9D:36:EC:2D:D8:BB:8F:D1:F4:7A
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/60740FF0903B11EF929C479B762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:fa:85:d6:19:8e:37:37:26:75:12:fe:95:3e:73:02:dc:b0:
         51:37:c4:4c:28:ea:7e:da:db:d4:45:b7:e8:a1:2a:14:42:fe:
         c5:88:5f:18:2e:83:2e:dd:29:82:85:f5:2a:c3:6a:aa:9d:4d:
         ec:50:21:83:d5:31:67:fa:d5:81:a9:7d:7e:19:f2:10:72:42:
         da:bb:9b:fa:50:55:ce:05:05:b6:c9:56:f0:16:b9:e6:cb:c7:
         e6:1d:dd:d9:e9:92:12:62:c2:03:a9:31:ed:b5:c4:51:d2:67:
         60:9d:fe:f6:e1:26:95:9a:0b:73:7f:c0:f8:2a:e8:e4:49:d8:
         8a:9e:51:56:70:c8:da:51:4e:7b:24:08:ad:57:95:84:c2:de:
         1e:5e:94:3d:d1:ec:af:1c:c4:b7:cc:f2:a8:7e:6e:e3:20:ef:
         5b:33:04:b6:1b:b2:a7:0c:40:48:88:79:2a:67:34:0f:00:12:
         16:22:14:c6:df:52:ee:8b:63:b3:a7:b0:de:12:b8:25:df:eb:
         14:bc:46:f1:99:ab:16:50:11:93:72:e8:5c:46:bd:5e:de:a5:
         76:00:74:72:44:be:5b:d6:3e:3f:57:ea:33:fa:13:77:91:aa:
         99:e4:98:70:90:ed:16:6e:b1:7b:a0:80:30:7c:50:77:ce:18:
         25:7b:31:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:46 2024 by rpki-client on console-ams.rpki-client.org