Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ECB5F032194111EDBC02FAF2F1222468.roa
File:                     ECB5F032194111EDBC02FAF2F1222468.roa (raw, json)
Hash identifier:          xTYIZFBHLjZUcjfer6jGDp+ewHt0VeeJYFhcUR9vh70=
Subject key identifier:   CD:DC:B2:29:E0:8A:28:36:44:39:F0:22:86:3A:01:3A:88:39:32:9A
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0933
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ECB5F032194111EDBC02FAF2F1222468.roa
Signing time:             Thu 11 Aug 2022 06:50:45 +0000
ROA not before:           Mon 15 Aug 2022 06:50:42 +0000
ROA not after:            Thu 15 Aug 2024 06:50:42 +0000
asID:                     17216
IP address blocks:        154.16.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 21 Jul 2023 00:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2355 (0x933)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 15 06:50:42 2022 GMT
            Not After : Aug 15 06:50:42 2024 GMT
        Subject: CN=62f4a6c5-48e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9e:32:26:ae:57:8b:89:ba:f6:e2:60:c2:91:
                    68:09:24:e0:19:59:41:f2:7f:16:a1:aa:65:fc:d9:
                    27:38:14:2b:36:95:72:11:37:67:c0:da:00:0c:2c:
                    6c:f6:62:35:01:cd:be:9d:d0:2c:35:52:e9:85:31:
                    f0:13:48:2a:e5:74:2a:b6:a1:c6:96:9d:d0:09:28:
                    d5:dd:67:c6:30:9f:f4:45:d3:af:ae:6f:f8:d3:b1:
                    aa:f2:20:b8:a7:69:05:3e:d4:bc:d8:1f:70:0e:a1:
                    de:e8:12:3a:23:60:62:ca:3f:54:e7:fc:07:2e:d6:
                    3a:9b:9e:2e:3a:82:30:53:ed:97:86:a8:09:d1:61:
                    af:82:b9:de:71:49:10:0a:4c:43:55:05:19:3b:84:
                    da:5d:8b:0d:73:4d:a0:e2:df:35:7d:4b:17:dc:c2:
                    a0:eb:75:d5:77:15:da:b9:7c:b7:e1:da:43:db:65:
                    72:3c:e1:fd:b7:32:00:74:ae:53:d5:d1:33:e8:3e:
                    18:46:f7:1e:af:94:0f:31:c1:28:02:8e:b2:7f:f3:
                    0a:e9:1a:ef:cd:97:bf:ac:6f:b0:5d:15:81:e8:2e:
                    89:04:81:fa:33:4d:b7:30:1a:6b:a3:75:22:be:1d:
                    ea:bb:6e:2d:ec:07:75:4e:a5:18:29:f2:de:4c:ea:
                    8a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DC:B2:29:E0:8A:28:36:44:39:F0:22:86:3A:01:3A:88:39:32:9A
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ECB5F032194111EDBC02FAF2F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:1b:c7:ca:b0:11:f9:dc:85:48:73:13:0b:2c:21:ea:3f:4e:
         35:08:17:43:88:c8:79:15:3a:fb:f8:04:75:78:b8:ce:cb:8f:
         02:07:c2:29:4a:14:7d:6a:60:d6:6c:af:04:52:7a:b1:9e:5e:
         18:d0:31:f4:ec:e3:a5:80:92:ac:7c:a9:17:b2:79:1f:14:e5:
         cb:7c:ff:77:e3:2b:1c:2f:db:95:4d:32:f8:04:0f:f4:d0:57:
         1e:8f:c4:87:1d:ba:47:19:6e:33:b5:be:bc:8b:aa:e4:7e:f0:
         a9:d9:7a:98:5f:c8:d2:a3:83:32:32:94:b9:4a:27:80:c6:41:
         36:3d:72:90:25:4e:70:31:5b:82:dc:ac:f1:f7:20:2b:1d:0e:
         b4:41:61:a7:8d:23:ed:c1:57:a0:b8:8a:22:d7:16:b6:ef:ea:
         24:48:7a:f7:2f:f4:ce:7e:9d:ed:f4:b3:46:37:c3:23:d2:e2:
         d4:1a:8b:03:df:d1:72:8d:65:98:97:79:fe:be:0f:e0:be:f4:
         f9:f5:ac:79:98:d5:8f:65:bc:8b:93:04:df:3e:da:ac:cd:df:
         60:8d:60:44:53:a2:db:06:f1:01:58:31:63:44:9f:81:7c:7c:
         0e:98:c7:85:c8:f9:43:7e:c6:62:ad:19:b1:a9:59:7a:70:90:
         5e:0a:f0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 22:34:10 2023 by rpki-client on console-ams.rpki-client.org