Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B9D68BD4E86811EE83438C9F775412E6.roa
File:                     B9D68BD4E86811EE83438C9F775412E6.roa (raw, json)
Hash identifier:          07D4wGjhW+gxXVIa/Lge2HxCW7Dc7At9QyRnMgjyqA4=
Subject key identifier:   F0:8F:E1:09:64:3D:E9:24:60:D1:BF:4A:0B:70:40:A5:4B:E4:24:AF
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       156D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B9D68BD4E86811EE83438C9F775412E6.roa
Signing time:             Fri 22 Mar 2024 16:24:59 +0000
ROA not before:           Fri 22 Mar 2024 16:24:55 +0000
ROA not after:            Sun 22 Mar 2026 16:24:55 +0000
asID:                     29802
IP address blocks:        154.16.134.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 16 Jul 2024 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5485 (0x156d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Mar 22 16:24:55 2024 GMT
            Not After : Mar 22 16:24:55 2026 GMT
        Subject: CN=65fdb0db-3449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2e:24:50:e7:f8:29:2c:ba:67:2e:45:2d:7d:
                    a6:31:39:21:e6:25:18:7d:00:6e:74:d8:09:c6:97:
                    2c:65:44:83:02:da:2b:9e:d4:2c:af:e3:13:6b:08:
                    90:45:9e:27:18:6c:13:f9:0b:db:48:ad:ae:88:68:
                    85:b0:2f:d4:be:61:44:53:f5:83:af:eb:ae:57:9a:
                    90:b1:22:f9:0f:0d:21:5d:75:ce:1c:ac:0e:6c:91:
                    57:25:c6:5e:95:b1:f7:38:e6:69:1b:e0:56:4d:ec:
                    10:e8:ea:0f:4e:9b:40:c3:b4:a4:e9:b7:aa:37:f1:
                    82:de:f2:65:b1:33:27:f9:89:f4:78:aa:cf:cf:8d:
                    6a:18:03:8c:48:00:ea:4c:e6:f8:31:39:62:ec:0b:
                    56:14:c8:c8:35:4b:69:7e:8a:8f:70:55:e1:9a:00:
                    e6:d2:17:3a:97:34:22:ae:e2:9c:59:76:e1:7b:ff:
                    3b:22:4c:96:12:53:98:a1:29:f1:29:2c:e0:aa:07:
                    ec:fa:05:51:dd:a8:37:05:92:c1:b0:75:b0:41:2e:
                    bd:00:f7:58:08:5d:93:f3:df:93:5e:ab:2d:91:da:
                    de:99:c3:51:d7:b5:56:b7:41:1a:d9:d6:da:8f:53:
                    89:eb:3b:44:6f:0c:a4:18:31:89:c9:8c:e3:44:7f:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8F:E1:09:64:3D:E9:24:60:D1:BF:4A:0B:70:40:A5:4B:E4:24:AF
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B9D68BD4E86811EE83438C9F775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:22:d5:33:89:5e:45:12:1d:21:0a:be:1e:8f:6c:6f:2e:9e:
         92:7b:e0:79:6f:2e:17:a9:df:29:db:6d:ef:99:3e:71:b3:04:
         84:91:b3:5c:0e:67:dd:50:7e:13:b3:ed:7a:cc:db:86:b7:ee:
         d2:e1:e4:5a:e8:08:29:78:5e:19:00:3d:63:3f:65:93:99:a5:
         61:38:af:1f:fe:04:ec:2f:b8:8c:43:83:dc:c4:83:65:2a:03:
         12:67:81:b7:7d:dc:34:c4:dd:b3:dd:fa:70:82:73:be:9b:96:
         f8:34:26:03:92:7a:f7:bc:d7:c4:dd:4c:e8:e5:da:79:bc:7b:
         cd:b0:b1:29:e1:ac:b9:1a:ea:91:7a:c0:aa:a0:ab:65:51:26:
         d1:cd:5d:4e:af:b3:61:b6:2a:6a:fe:a7:f8:b9:b8:f9:77:5c:
         ab:7c:50:52:40:77:0e:e2:88:e3:a9:e5:94:cf:7e:dd:57:84:
         57:d1:8b:83:90:2f:b7:cf:b4:55:80:a6:65:81:50:14:89:e4:
         0a:c8:a5:03:13:ed:c9:5c:0c:4b:43:59:0f:a9:37:93:55:a9:
         b5:ea:77:84:e7:0f:d9:b9:d0:6d:cf:63:c0:2d:66:90:06:db:
         4c:b3:81:93:01:b8:3d:9d:3a:ac:93:bf:ed:a2:9f:cc:5c:9c:
         6b:8c:9b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 02:50:29 2024 by rpki-client on console-ams.rpki-client.org