Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/777358DEBB5111ED9DEE168EF1222468.roa
File:                     777358DEBB5111ED9DEE168EF1222468.roa (raw, json)
Hash identifier:          5yavtiW/uqyo3DC7clTcdyIy772s/RQ2YIrWIHp7A4M=
Subject key identifier:   11:73:2D:6C:99:87:1A:D7:7F:3A:64:8A:A8:B7:D3:14:C0:1E:B4:FF
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0CE9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/777358DEBB5111ED9DEE168EF1222468.roa
Signing time:             Sun 05 Mar 2023 12:30:09 +0000
ROA not before:           Sun 05 Mar 2023 12:30:05 +0000
ROA not after:            Wed 05 Mar 2025 12:30:05 +0000
asID:                     396356
IP address blocks:        154.16.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3305 (0xce9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Mar  5 12:30:05 2023 GMT
            Not After : Mar  5 12:30:05 2025 GMT
        Subject: CN=64048b51-81cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:34:51:70:1c:fc:bf:0b:70:c2:11:f6:85:ea:
                    5a:f0:a8:21:80:37:4b:61:d4:25:68:c2:cd:b0:2d:
                    bc:c3:ba:3a:64:81:73:5a:58:0a:85:c3:a6:c2:08:
                    7e:29:e7:88:9a:83:c4:d3:c3:82:ce:ce:05:6a:d4:
                    3c:1b:5a:d5:d5:ff:b6:12:15:af:81:0d:20:6e:c4:
                    fd:d8:26:52:7e:7e:82:fc:22:eb:e2:43:90:fc:34:
                    81:b2:29:91:57:1a:72:b4:40:9e:6f:5c:c8:e9:00:
                    a5:50:24:34:60:1f:f8:ec:eb:07:86:41:12:98:8a:
                    46:91:69:f9:92:ff:e8:a2:86:f5:3e:b6:2e:27:f4:
                    c8:8e:0b:36:f4:cc:fd:64:6f:02:16:0b:b1:97:b3:
                    8e:24:b3:c6:f3:99:f9:48:66:a2:11:3b:45:5d:98:
                    e8:5e:ce:2b:f6:12:46:29:70:ae:d2:14:24:4d:b0:
                    f0:a7:6e:7e:f9:49:bd:6b:b1:6a:aa:73:6d:4d:23:
                    8d:19:48:3d:a0:71:90:e0:85:3b:75:f6:2b:16:96:
                    46:40:16:70:ed:9a:4d:df:54:46:4e:cb:8c:f2:29:
                    da:05:05:8d:2d:2e:44:06:ce:a4:68:ae:d8:35:ba:
                    9d:78:33:db:bf:8b:79:bf:ba:56:1e:2a:00:19:17:
                    95:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:73:2D:6C:99:87:1A:D7:7F:3A:64:8A:A8:B7:D3:14:C0:1E:B4:FF
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/777358DEBB5111ED9DEE168EF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:03:d8:af:db:58:97:ce:ca:3d:9e:24:77:f6:34:23:84:d3:
         ac:e0:a2:79:8f:40:41:c5:53:9a:f3:09:4a:ef:a8:17:f2:c2:
         b8:79:11:16:84:2b:7a:2b:e2:8a:b5:82:15:48:c4:2d:a0:95:
         27:d3:cb:66:76:3f:bb:27:ff:4e:a8:c1:e9:49:2d:e1:62:63:
         b9:54:76:35:54:9b:9b:48:96:06:a9:2d:79:4d:1e:8f:10:95:
         2a:39:7b:27:24:af:a6:a4:7a:57:dd:5f:d2:1d:a4:6d:7e:c8:
         ec:c2:f4:ff:19:c1:96:ca:6a:fa:14:fa:d5:52:a5:ea:41:5e:
         56:c2:cb:e2:18:80:a4:17:fc:8d:54:98:6d:92:27:73:7a:08:
         6b:b7:f6:15:98:67:f2:42:0a:90:ca:a5:c8:b8:34:08:ea:6e:
         c7:3f:c5:1b:ad:4b:18:58:82:46:c7:43:12:90:be:2c:2b:46:
         0b:05:d5:b1:61:6a:95:39:61:a6:1d:e0:0f:d4:0e:99:b1:fb:
         e1:1e:e9:26:f3:b9:bc:98:79:11:1c:34:8f:c6:3b:05:62:a2:
         11:6c:ba:0c:a2:bc:58:44:4c:1e:df:18:0e:4f:ef:6e:2a:9a:
         c1:83:a6:17:5e:cf:38:07:f6:17:b2:dc:cf:b6:99:62:3c:ae:
         40:a9:c9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:18:50 2024 by rpki-client on console-ams.rpki-client.org