Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6AD0D82EFF7E11EDA08833864AD9E6FC.roa
File:                     6AD0D82EFF7E11EDA08833864AD9E6FC.roa (raw, json)
Hash identifier:          ywsqfP3SADSZ/bfmfp1Kz7t7AvtHVHqFb3Ye9OGwIRY=
Subject key identifier:   B1:FB:B9:7A:8E:D8:D4:33:B9:71:28:DB:65:B3:8B:D6:5E:33:F5:A2
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0E03
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6AD0D82EFF7E11EDA08833864AD9E6FC.roa
Signing time:             Wed 31 May 2023 06:43:14 +0000
ROA not before:           Wed 31 May 2023 06:43:10 +0000
ROA not after:            Fri 30 May 2025 06:43:10 +0000
asID:                     38001
IP address blocks:        154.16.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3587 (0xe03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: May 31 06:43:10 2023 GMT
            Not After : May 30 06:43:10 2025 GMT
        Subject: CN=6476ec82-49e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fe:f9:f7:a8:e9:d8:d7:5a:93:b6:28:47:91:
                    f0:45:26:1b:4a:46:4f:39:50:5b:41:28:b5:89:62:
                    c3:7c:c9:62:2d:56:8e:c4:5e:fa:1b:71:f7:1a:ca:
                    af:ba:18:d5:d7:60:0c:ca:a0:85:85:a7:7a:e3:7c:
                    8e:40:ba:b5:4f:bb:44:83:81:25:fe:39:56:c5:58:
                    d7:3b:53:08:12:6e:a5:00:a6:34:34:c4:f6:78:02:
                    9e:c9:62:0f:cb:9a:c9:8f:71:73:82:05:ed:74:5b:
                    02:65:40:ec:ba:85:84:1a:cb:07:fc:8b:88:9a:d0:
                    0d:cf:a7:b3:9d:b3:14:04:c5:6d:ff:7a:93:dc:ac:
                    32:90:7d:d2:1e:af:82:6f:b6:c7:2e:fb:23:fd:bb:
                    a3:a6:1d:cc:e0:07:ea:43:fb:7d:e2:70:50:2e:94:
                    5b:b9:26:9e:b7:9c:f5:d5:56:bf:b4:da:47:d2:1a:
                    3c:27:bb:6f:29:8d:a5:37:dd:e6:b4:d1:48:07:59:
                    e8:a0:cf:4e:91:08:d2:cc:5b:7e:00:27:c9:f4:e6:
                    cc:2f:d6:86:2b:8c:af:de:3a:f5:c2:cd:74:85:58:
                    41:0c:d8:27:b1:a6:7d:47:87:7b:53:2b:f6:46:4c:
                    96:da:04:bb:4e:02:56:4d:07:85:b5:67:94:24:e2:
                    8b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FB:B9:7A:8E:D8:D4:33:B9:71:28:DB:65:B3:8B:D6:5E:33:F5:A2
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6AD0D82EFF7E11EDA08833864AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:29:4e:8c:f3:01:f9:98:c2:d3:1a:c8:47:95:4b:d9:e9:b0:
         3b:83:b5:f0:30:c2:74:88:b3:b1:c3:e7:ab:29:4c:73:44:30:
         a1:06:5f:c8:ef:ad:25:a5:d7:18:d5:c8:76:08:3f:ca:df:7e:
         39:ce:1a:2c:86:38:41:ef:ba:30:3a:a2:4c:09:8f:72:e6:f5:
         72:e5:bc:5f:52:d4:4c:4b:cc:4c:8a:ae:e4:09:a9:52:8d:f9:
         35:3e:9c:ad:2a:f8:3b:0a:23:ed:f9:4c:79:8e:6c:fa:24:4d:
         c0:88:52:33:91:67:ec:70:42:42:55:0f:04:32:89:45:97:0b:
         be:bb:9d:2e:94:4c:cf:1a:92:18:bb:17:99:64:b9:5d:b4:80:
         a6:3f:f1:a3:4f:24:e4:9d:fb:7b:19:86:22:82:b1:7c:8a:d7:
         71:81:87:e7:d3:75:a2:55:4e:fa:31:96:ce:db:c9:56:f5:39:
         99:39:53:38:e2:c6:0d:62:a7:cc:4b:9d:ab:37:71:70:e2:96:
         c2:82:3e:f8:09:16:3d:ff:e8:b2:d1:c5:5e:5a:54:f3:8b:2c:
         26:68:66:f3:e3:07:67:5b:74:b7:46:85:5c:cc:69:dd:54:9b:
         22:bf:7a:09:3b:a9:a7:11:54:fb:9d:e8:7b:52:ab:cf:15:10:
         bc:10:3d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:38:54 2024 by rpki-client on console-fra.rpki-client.org