Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C0EE8B3E759311EFA54107A4762E951A.roa
File:                     C0EE8B3E759311EFA54107A4762E951A.roa (raw, json)
Hash identifier:          sSz0AvmjEy7kleXMtHxsDYepKwj9BOJgEuKggGw9dXA=
Subject key identifier:   5E:6D:94:1D:64:F2:D0:E4:B8:8C:47:88:00:BE:3D:63:41:E5:75:F7
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       180A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C0EE8B3E759311EFA54107A4762E951A.roa
Signing time:             Wed 18 Sep 2024 07:58:13 +0000
ROA not before:           Wed 18 Sep 2024 07:58:10 +0000
ROA not after:            Fri 18 Sep 2026 07:58:10 +0000
asID:                     212238
IP address blocks:        154.16.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6154 (0x180a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 18 07:58:10 2024 GMT
            Not After : Sep 18 07:58:10 2026 GMT
        Subject: CN=66ea8815-1934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:86:74:67:01:f9:ad:58:db:2c:d0:4a:d3:33:
                    12:65:ab:67:93:8d:4e:73:8d:fb:fb:70:10:bd:c1:
                    ec:79:cd:dd:91:1a:27:e2:c1:04:83:8c:86:df:4d:
                    22:24:5d:54:bb:fa:7e:ae:bd:0d:f5:50:dc:a7:a3:
                    9b:e8:74:d7:9c:1e:f5:e4:de:e2:71:aa:1d:3c:f9:
                    51:8e:fb:3f:68:63:c6:65:f4:4f:f2:88:27:c7:ce:
                    32:55:d1:e7:41:0e:67:e2:70:3c:c9:f1:d6:00:37:
                    49:6c:46:7a:b1:2b:ba:e2:2d:ef:af:a0:ed:6a:c2:
                    b2:4f:f5:59:c0:62:ac:f3:1b:e5:a1:2d:a8:09:eb:
                    2c:ee:6a:58:b8:17:5b:fd:39:8b:de:9e:48:6d:c7:
                    fe:dd:eb:7c:a0:e2:e7:6b:5d:04:38:ac:84:54:7c:
                    e4:89:5c:d0:93:78:4d:1f:e8:28:0e:f8:a3:c1:20:
                    70:88:29:37:eb:39:30:90:76:02:c6:9c:9d:73:89:
                    d8:68:27:64:bf:86:0a:ed:ac:60:2f:cd:38:9b:3e:
                    99:71:a5:0e:cd:5e:3e:ea:01:4a:28:b8:f2:40:59:
                    b5:fa:fc:40:57:cb:4e:b6:22:f3:b3:a0:0c:d5:4d:
                    cd:96:53:21:6d:c7:58:4e:e6:d1:42:4c:1c:90:0e:
                    cc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6D:94:1D:64:F2:D0:E4:B8:8C:47:88:00:BE:3D:63:41:E5:75:F7
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C0EE8B3E759311EFA54107A4762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:91:58:ec:ad:e8:94:c3:6e:01:89:c5:03:c1:e6:d7:f8:a2:
         eb:07:0c:87:1b:13:39:8e:35:bc:fd:95:4b:75:94:4e:59:ab:
         e4:80:a8:00:b9:c0:2f:fc:10:22:e9:bc:3e:61:78:9e:5b:00:
         37:85:44:d7:dc:2f:48:cd:31:a5:b1:f6:b6:7c:9d:8c:f1:f7:
         21:90:61:9a:bd:04:76:69:f3:d4:43:61:92:22:25:dd:08:68:
         f1:06:2f:34:3c:dd:fb:fb:ed:4e:40:34:69:61:35:09:de:8c:
         d8:79:ba:1b:1e:6e:54:8c:0d:25:38:f6:e2:96:8f:f7:2c:12:
         b9:e6:65:6c:a5:fc:d0:b5:44:bf:56:02:0d:34:31:6a:9f:72:
         fb:bf:13:2a:0e:86:c0:79:d7:d1:1d:b8:d5:e3:0c:d6:80:09:
         b2:57:da:e6:a2:56:97:e0:dd:41:19:08:40:c0:51:7d:28:0e:
         e7:5a:ec:15:fa:c5:35:50:f4:b1:72:2e:d5:45:58:0d:98:de:
         72:b0:be:65:86:0c:0d:79:e6:86:d9:1b:b1:50:cf:25:48:b3:
         02:83:27:fc:cb:27:f2:c4:b0:0d:ee:b5:c8:5e:64:86:da:a3:
         6c:2e:6f:72:a2:c1:5d:20:83:c6:87:50:0d:ea:f2:00:e6:75:
         ba:f3:51:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:33 2024 by rpki-client on console-fra.rpki-client.org