Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F6AAD57E903811EFBC92078E762E951A.roa
File:                     F6AAD57E903811EFBC92078E762E951A.roa (raw, json)
Hash identifier:          lSe2ACYHozyWubdE23Lc0NmPxfXE9o1/5GjfzTz6Qjw=
Subject key identifier:   A4:AE:C6:06:BF:4B:3C:6E:30:84:EE:82:72:BB:73:99:C1:EB:58:62
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1887
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F6AAD57E903811EFBC92078E762E951A.roa
Signing time:             Tue 22 Oct 2024 05:46:20 +0000
ROA not before:           Tue 22 Oct 2024 05:46:17 +0000
ROA not after:            Thu 22 Oct 2026 05:46:17 +0000
asID:                     212238
IP address blocks:        154.16.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6279 (0x1887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct 22 05:46:17 2024 GMT
            Not After : Oct 22 05:46:17 2026 GMT
        Subject: CN=67173c2c-e7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4a:cf:31:40:cd:a3:20:73:44:4b:1c:c3:26:
                    7e:16:2d:b2:8b:ba:16:a0:f4:79:3f:2d:9a:34:12:
                    f1:62:de:03:9f:cf:b6:c0:42:a6:24:a2:b1:12:bd:
                    b5:e1:05:ba:be:f4:bf:da:4e:26:92:7b:cb:e5:81:
                    92:54:52:c0:be:8e:eb:df:65:6c:d9:6f:cc:45:fe:
                    29:69:bc:b2:9c:59:47:28:16:32:eb:21:d9:d2:67:
                    f6:e9:48:52:45:b4:bf:ff:52:4e:0b:06:bb:0e:4b:
                    ff:67:a7:49:3f:0e:a5:86:7b:68:7d:c2:20:de:a4:
                    e8:72:c6:7b:45:f8:6b:f5:37:99:8f:96:3d:cb:5f:
                    2d:ad:8e:d6:7e:f8:41:53:d0:6a:22:70:d7:cb:ef:
                    5e:ea:ba:8d:e1:bd:8f:9f:34:c6:ad:1c:96:85:a8:
                    5c:96:81:13:e2:6c:25:d8:67:b5:d0:f3:32:15:98:
                    b4:75:9a:36:4c:03:c8:1a:2a:4f:cd:da:cc:24:09:
                    4e:3e:b0:67:46:c2:ae:3c:bb:2d:48:55:af:82:b4:
                    39:dc:0e:a5:d8:d5:ef:32:42:7b:e9:0b:a3:bc:13:
                    b0:bd:9e:b2:e8:80:79:2a:4f:73:67:c6:62:3d:30:
                    38:da:5e:88:81:c3:27:06:c6:5e:fe:1a:71:ce:15:
                    9d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AE:C6:06:BF:4B:3C:6E:30:84:EE:82:72:BB:73:99:C1:EB:58:62
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F6AAD57E903811EFBC92078E762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:b8:ab:0b:b9:a9:c8:88:3f:b4:80:ea:66:20:a3:8a:d6:fb:
         43:27:e6:05:c3:45:7a:b5:bf:0e:57:b1:e8:92:f8:fa:30:1a:
         7d:a1:db:1e:51:61:58:29:b7:ad:e9:38:0a:91:66:ef:da:42:
         46:46:e1:00:c5:15:07:b8:8b:e3:47:ff:ea:d0:93:b7:44:53:
         d8:36:6b:a7:22:94:d3:06:10:db:ff:98:22:79:62:b5:b8:be:
         13:ee:14:f8:15:dd:c4:e5:24:59:8f:a7:c8:6c:5a:f1:d6:6a:
         5c:ed:2e:62:34:1b:e4:27:ab:aa:ae:ea:e3:09:63:0c:f4:69:
         cc:a9:64:0d:a3:e4:28:03:2b:51:23:d0:1b:f6:e8:85:f1:20:
         8e:14:12:b8:da:49:aa:fa:31:75:c8:40:27:a8:8e:e9:2e:ff:
         bc:ae:27:79:80:58:1a:91:8a:d5:bc:38:ce:45:85:3d:b2:d6:
         26:f8:8e:67:36:0d:53:f8:69:24:fc:df:07:83:e2:3d:fb:10:
         55:0f:78:33:32:11:80:29:d3:7c:42:6c:4c:ea:49:e2:e3:d4:
         c2:54:ab:c2:2f:ce:25:a5:a6:45:92:c5:82:4e:ae:25:f3:62:
         fd:6a:bf:5f:ec:06:17:ca:80:57:d9:7c:57:47:c0:d2:2c:ac:
         9a:8c:0b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:57 2024 by rpki-client on console-fra.rpki-client.org