Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/73AD2168B43E11EDADD89FADF1222468.roa
File:                     73AD2168B43E11EDADD89FADF1222468.roa (raw, json)
Hash identifier:          hrmpeovfn/AP1ifmws7R+Tg6do4AWChC8sE0gp9Ivzc=
Subject key identifier:   2D:EF:20:42:44:03:55:9B:5B:F2:1C:37:92:96:7A:5E:08:FC:6E:50
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0C1D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/73AD2168B43E11EDADD89FADF1222468.roa
Signing time:             Fri 24 Feb 2023 12:26:24 +0000
ROA not before:           Fri 24 Feb 2023 12:26:20 +0000
ROA not after:            Sat 22 Feb 2025 12:26:20 +0000
asID:                     61317
IP address blocks:        154.16.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 30 Mar 2024 00:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3101 (0xc1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Feb 24 12:26:20 2023 GMT
            Not After : Feb 22 12:26:20 2025 GMT
        Subject: CN=63f8acf0-458f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ab:13:46:fc:aa:94:3f:12:0c:ee:27:f7:2e:
                    8c:ee:43:89:b5:db:98:d2:b6:ba:2c:67:b0:ad:c0:
                    bf:34:ed:43:b4:64:20:3f:05:4e:8b:3b:d5:5a:62:
                    62:74:b5:71:e8:46:fd:2d:70:ac:87:9b:19:71:2d:
                    62:c7:87:e5:89:20:11:4a:8d:86:e9:82:7d:0c:a9:
                    e9:c9:f4:9d:62:4d:48:9a:5f:a2:84:39:d0:49:cd:
                    be:c1:11:b3:2c:c1:09:ba:43:5c:eb:af:95:ef:b2:
                    3e:02:bd:81:9d:c6:b0:3f:db:a9:9c:c0:c3:06:c1:
                    9d:bd:d0:ba:48:57:ae:5a:cb:c1:41:63:b7:6b:75:
                    20:d7:39:98:2a:06:00:86:50:c8:62:80:ac:69:21:
                    1c:c9:c3:31:7a:2a:d4:6d:9f:08:8b:ed:22:a1:3f:
                    70:d0:dd:54:72:98:dd:0e:35:78:8d:ae:46:50:92:
                    51:92:7c:6e:af:8c:72:a3:0b:64:cc:b1:d8:0a:d2:
                    e0:60:90:c1:c7:2f:f4:8f:0a:bb:38:ba:49:28:53:
                    19:bc:4e:d2:e6:3b:dc:8f:7e:bf:a3:62:d7:7b:79:
                    da:e8:33:38:f6:c7:17:9c:4e:fc:62:c0:70:ea:33:
                    88:39:80:75:1b:86:7c:92:8b:c6:04:65:34:58:fc:
                    13:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EF:20:42:44:03:55:9B:5B:F2:1C:37:92:96:7A:5E:08:FC:6E:50
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/73AD2168B43E11EDADD89FADF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:5a:2f:da:36:62:8e:e0:b7:22:99:82:7b:e9:b8:05:8a:08:
         42:09:c1:c2:53:c5:d4:52:10:c3:1d:47:ff:ac:e9:91:39:01:
         b3:1b:fc:c0:71:c6:b6:98:e2:6b:32:7e:e1:3f:35:4a:fd:7d:
         74:31:5b:8d:39:22:c0:cd:3e:c4:2b:c8:71:1c:83:31:a4:75:
         20:70:61:9e:06:9a:4d:3b:d8:6f:92:59:9f:3d:fa:91:25:18:
         c1:c1:54:64:a2:e3:81:dd:4f:88:55:0a:4a:4d:3b:11:32:04:
         c0:b6:72:b8:62:8d:bf:43:ba:4c:bf:39:25:69:a7:99:50:ea:
         17:61:8f:1d:44:63:c6:d2:08:59:79:28:49:8b:7d:56:24:8b:
         3a:9c:c3:19:25:c3:4f:a2:b5:ed:c7:24:bf:80:00:84:c4:d9:
         93:b3:c5:99:01:ce:cd:4a:a2:85:05:93:4b:04:49:c9:e3:a1:
         2c:35:50:f3:26:ff:de:a7:61:f7:ef:be:9f:7a:fa:8b:a8:e2:
         e1:e3:03:c1:80:a2:bf:40:12:6a:d1:7f:27:dd:f1:55:28:0d:
         59:04:40:e9:ec:ec:86:51:7b:2c:8b:c4:78:16:df:ce:5d:2c:
         44:80:61:1a:32:14:89:61:41:07:22:d1:dd:f4:4c:62:04:0e:
         6f:52:41:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:07:05 2024 by rpki-client on console-ams.rpki-client.org