Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/62F50EDC8B8711EEAF50431E4AD9E6FC.roa
File:                     62F50EDC8B8711EEAF50431E4AD9E6FC.roa (raw, json)
Hash identifier:          yB+F32J2Gx2RehZonwsWMR6r8L/KUY7RkqCIiSqzulA=
Subject key identifier:   AF:CE:C3:98:9E:72:99:0E:8E:71:66:8E:4B:E7:CE:14:0F:0F:79:B0
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1377
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/62F50EDC8B8711EEAF50431E4AD9E6FC.roa
Signing time:             Sat 25 Nov 2023 11:40:09 +0000
ROA not before:           Sat 25 Nov 2023 11:40:06 +0000
ROA not after:            Tue 25 Nov 2025 11:40:06 +0000
asID:                     212238
IP address blocks:        154.16.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 16 Jul 2024 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4983 (0x1377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Nov 25 11:40:06 2023 GMT
            Not After : Nov 25 11:40:06 2025 GMT
        Subject: CN=6561dd19-bbd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5c:2c:8f:7f:85:3e:e3:db:b4:1a:36:87:fa:
                    27:e5:b7:a4:5f:c1:53:d7:f7:45:02:06:da:f9:80:
                    81:47:8e:95:ec:ef:38:6d:be:bd:fc:3a:c4:c2:b3:
                    8c:7f:91:40:d4:b5:8b:e0:b6:48:cc:4c:c6:ee:ce:
                    e6:f5:d9:18:7c:af:16:55:cd:0d:2e:a9:80:0e:78:
                    3e:4b:ca:bf:80:3a:4b:cb:a7:62:8a:bb:7c:5e:ac:
                    f9:9a:16:e8:34:88:f2:6a:28:a6:eb:c2:c9:c1:ae:
                    1f:4e:d3:24:77:01:0c:b9:64:85:f3:9a:85:81:cf:
                    80:18:f5:19:c6:65:06:6a:4b:2b:1c:63:0d:34:f3:
                    a7:78:e8:17:08:bb:a9:a4:06:5d:f6:df:1f:65:0c:
                    f9:36:73:bd:13:fb:f5:69:ae:85:31:bd:63:25:20:
                    04:3a:39:c6:9e:1c:9c:84:1e:8f:a2:bd:71:b1:ca:
                    7c:96:f5:4b:3f:e7:c5:39:26:1b:d1:e7:6e:cb:c2:
                    84:b9:71:ab:cd:79:98:ad:15:6c:43:74:49:0c:39:
                    65:a7:92:95:35:e8:23:f7:05:cd:d6:6c:c7:24:09:
                    35:cf:47:12:b0:4e:c2:27:1e:1a:35:96:39:83:cc:
                    e1:49:ef:74:93:58:eb:d0:f0:28:84:97:e8:6f:d1:
                    eb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CE:C3:98:9E:72:99:0E:8E:71:66:8E:4B:E7:CE:14:0F:0F:79:B0
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/62F50EDC8B8711EEAF50431E4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:3c:4f:b7:a8:7b:ad:fb:a9:67:d0:dc:31:64:d7:02:54:0e:
         38:14:8c:0c:f6:e9:72:76:c3:07:5f:9a:7f:c4:47:3a:d9:8b:
         7a:00:20:47:c7:fe:08:05:02:09:ee:45:43:42:cb:0c:56:94:
         fe:c6:f2:c0:bd:c0:c9:0d:05:fe:f5:36:f4:31:0b:4e:a1:e5:
         ff:53:ca:6c:86:f2:e8:ef:50:29:da:70:45:05:38:b7:ec:fc:
         92:db:fe:f1:d5:8d:dd:b1:26:bd:37:4c:39:01:87:44:f8:0f:
         38:16:26:b2:6a:88:1b:04:7b:1b:dd:6a:3d:a8:e7:e0:26:e2:
         fa:34:18:c7:bd:db:6c:53:c4:54:f2:53:0c:d5:03:6d:b8:2b:
         2e:20:df:d7:5a:3c:9f:a8:bb:73:42:d1:7e:50:44:a3:c9:64:
         2b:30:e1:b4:29:f7:fe:70:18:cc:f9:f6:64:2f:77:8d:d1:e6:
         07:98:b9:93:db:83:b8:b2:55:54:0f:70:8e:d7:13:6a:e7:f3:
         44:f8:4f:e8:48:a1:02:c6:3b:20:cc:d0:01:bd:77:20:ef:73:
         90:a0:3c:d5:59:9e:16:51:ce:41:7f:9e:ec:82:ec:bb:bf:8b:
         bd:f6:be:6d:5b:81:51:af:4d:ab:3e:15:74:d0:fc:be:cf:ac:
         24:4b:91:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 02:50:28 2024 by rpki-client on console-ams.rpki-client.org