Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7CB11176D54811EE8291EE8C775412E6.roa
File:                     7CB11176D54811EE8291EE8C775412E6.roa (raw, json)
Hash identifier:          /vQlUE+8sfncq7+5nfhEKvv2xpWI6zQG2XYdhWB4vIQ=
Subject key identifier:   4D:19:F0:39:F1:40:2D:4D:81:F9:15:72:63:95:92:59:30:8E:49:56
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       14EA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7CB11176D54811EE8291EE8C775412E6.roa
Signing time:             Tue 27 Feb 2024 08:16:20 +0000
ROA not before:           Tue 27 Feb 2024 08:16:17 +0000
ROA not after:            Fri 27 Feb 2026 08:16:17 +0000
asID:                     201341
IP address blocks:        154.16.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 16 Jul 2024 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5354 (0x14ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Feb 27 08:16:17 2024 GMT
            Not After : Feb 27 08:16:17 2026 GMT
        Subject: CN=65dd9a54-3b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b8:76:b9:f1:e1:81:59:ef:10:16:b8:06:fc:
                    f6:25:93:66:b4:f3:68:44:36:d7:57:68:48:e8:88:
                    cf:50:b2:61:a0:b3:6d:10:5a:fe:be:b3:c0:1b:b0:
                    b1:0e:94:74:a8:90:17:43:2a:af:ef:43:51:3b:c8:
                    a3:d1:f9:90:46:40:9d:99:b2:38:39:ce:03:7f:0c:
                    1f:e4:b2:59:32:24:79:f4:74:64:12:51:66:b0:c6:
                    a6:a4:bd:b6:9a:fd:63:fa:ef:48:c0:a2:1b:48:d9:
                    38:87:1e:7c:4d:eb:b3:fa:38:d9:0a:64:8f:aa:16:
                    78:3b:0f:41:ed:76:95:52:73:e7:e7:c8:93:d1:f6:
                    93:c9:b2:e9:c7:59:0f:ed:f7:40:fd:0a:77:17:ae:
                    dd:70:10:de:19:7b:5d:e2:fa:c5:65:93:43:93:bc:
                    27:57:33:5d:3a:8b:5d:9c:fa:67:60:1c:8c:ae:2b:
                    29:1b:d6:5a:b3:e3:1d:28:d2:23:2b:06:fa:b2:45:
                    a7:c6:14:34:8f:74:ad:24:47:1c:07:6d:2f:15:cb:
                    2b:f6:d7:20:76:ff:82:8b:b4:02:0c:42:7c:3b:ae:
                    44:0b:cb:77:b5:04:b4:f6:c9:ce:14:98:69:76:69:
                    39:1c:0b:43:37:1c:54:51:a3:ac:59:b3:50:cf:88:
                    27:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:19:F0:39:F1:40:2D:4D:81:F9:15:72:63:95:92:59:30:8E:49:56
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7CB11176D54811EE8291EE8C775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:e5:79:d6:8c:96:04:0b:0a:eb:80:9d:82:70:32:13:94:a0:
         49:a1:a6:fe:8b:4a:d6:39:db:8f:28:d2:1a:4d:e7:16:66:bc:
         eb:97:37:9e:a7:d6:3c:64:4e:27:36:80:ae:02:ab:63:12:85:
         46:bd:29:9b:59:22:9f:de:87:57:1d:76:77:b3:09:83:1d:44:
         a9:c3:18:66:e0:c0:78:02:32:2f:69:d0:09:2a:51:88:f2:26:
         b8:18:1f:9b:52:b4:36:8c:64:42:89:02:d6:03:98:a3:eb:f3:
         a7:7b:44:d0:3e:b5:2c:c0:d4:19:2c:23:75:1c:db:5f:40:a8:
         f2:67:07:15:83:80:ac:66:98:a9:d8:67:02:46:6a:33:3e:bf:
         cf:be:33:14:21:f8:d1:f6:e9:1c:1b:c3:8d:f6:ab:b5:6b:d4:
         bc:b4:08:4b:fa:51:de:9e:ec:b3:10:f8:67:71:08:0b:da:4d:
         8b:1c:65:6e:17:89:ad:e8:f8:83:c7:29:4b:18:cb:e8:cf:c0:
         98:12:36:48:f7:3f:51:e1:ad:61:09:b9:2c:ed:0c:39:de:9d:
         2d:1f:6c:68:6b:00:33:be:09:b4:95:e7:08:6a:a0:88:73:0f:
         b7:03:6e:f0:d2:ca:14:d2:44:85:63:ec:90:a0:41:18:89:72:
         e3:72:62:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 02:50:29 2024 by rpki-client on console-ams.rpki-client.org