Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F74C544E434E11EF922F407F762E951A.roa
File:                     F74C544E434E11EF922F407F762E951A.roa (raw, json)
Hash identifier:          2Bj/BhQO/FkqwhBOxplmvdIJbdSvpFqTG4M+hmbV250=
Subject key identifier:   FE:6C:A9:3C:09:7E:F9:9C:08:1B:FB:20:6B:C1:82:04:FE:0F:EB:A6
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1731
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F74C544E434E11EF922F407F762E951A.roa
Signing time:             Tue 16 Jul 2024 08:39:51 +0000
ROA not before:           Tue 16 Jul 2024 08:39:47 +0000
ROA not after:            Thu 16 Jul 2026 08:39:47 +0000
asID:                     397423
IP address blocks:        154.16.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Sep 2024 00:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5937 (0x1731)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jul 16 08:39:47 2024 GMT
            Not After : Jul 16 08:39:47 2026 GMT
        Subject: CN=669631d7-4fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6b:6a:8a:91:a3:2b:89:31:61:aa:43:d7:d9:
                    d5:b7:dd:6b:59:08:c6:4a:8a:67:a4:0d:35:a8:95:
                    91:2b:03:7d:5a:1a:fa:c2:2f:ce:a7:eb:7b:08:0f:
                    41:70:1d:0c:18:59:da:1c:0e:bc:ce:ed:e8:70:d2:
                    33:c5:90:b6:d2:a2:ab:8d:74:bf:3e:20:db:56:ed:
                    6a:d7:6b:5b:cc:e3:0b:0b:fb:fa:6c:38:95:52:ba:
                    57:aa:6c:b4:96:3b:61:ff:1d:5a:02:d4:c8:da:5f:
                    ab:05:df:7a:ed:8d:26:41:e5:3f:41:c5:ba:1f:80:
                    c6:d6:36:26:8d:6d:60:b4:a1:f7:1e:b7:4c:94:82:
                    24:94:06:fd:ba:09:22:32:e9:77:e2:30:25:7c:b4:
                    9c:76:65:f6:4d:44:12:6b:b2:b8:eb:ee:27:ac:b5:
                    57:4a:d9:36:cc:59:36:b0:02:a4:22:51:e9:18:bb:
                    5f:56:32:0d:e2:04:8c:62:bb:2f:8c:05:8f:c2:da:
                    94:cf:e4:c2:d6:77:45:64:43:53:e2:38:c4:22:ff:
                    2e:65:b4:39:8d:2d:7e:16:a8:bf:71:cb:d8:7e:f2:
                    26:c4:b6:35:42:83:c1:1c:bc:5d:ce:03:7e:11:ee:
                    76:a2:10:10:ba:3c:24:a0:6c:c3:1b:9e:1a:84:94:
                    8a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6C:A9:3C:09:7E:F9:9C:08:1B:FB:20:6B:C1:82:04:FE:0F:EB:A6
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F74C544E434E11EF922F407F762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:3f:86:c8:a2:44:e6:45:39:e9:31:10:78:8b:7e:3b:84:6a:
         4f:96:0d:27:b0:ec:75:28:35:78:14:45:28:81:92:29:53:34:
         99:f0:8d:40:e0:85:39:58:2d:60:05:d9:1c:a2:38:e8:17:b1:
         37:c7:73:ae:17:95:0c:28:e5:4e:b2:39:f5:2a:2f:2a:2a:11:
         91:bb:e6:85:b3:e1:8d:c0:26:cd:a3:94:96:d5:fb:a9:e6:d6:
         10:00:5b:63:b5:cf:2c:f6:ab:c0:f0:7c:09:55:41:14:76:69:
         f2:3b:d7:37:60:3e:fa:7b:6e:67:de:05:31:7d:fd:fc:b0:66:
         c2:df:d6:0c:31:b9:ac:d9:d7:5f:27:c0:f8:e7:9e:74:70:d4:
         cf:01:53:a5:52:62:b8:1f:ed:6f:e3:82:7d:4f:ce:cc:07:b1:
         08:1e:af:d8:a1:d3:92:82:7f:75:d8:d9:0e:f2:75:83:c4:d9:
         96:03:a8:cb:db:e5:6d:a2:72:1b:ca:c5:ee:8c:08:a9:94:88:
         87:19:6f:4e:21:3f:5c:47:ba:30:d5:81:a7:f9:00:a3:7f:db:
         b2:ef:8a:6e:a1:8f:15:80:4f:e7:71:ae:91:64:2f:6f:5a:8c:
         3b:84:57:08:0f:9e:63:f8:3a:af:0f:a5:28:46:1f:63:d1:5d:
         29:70:99:47
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFzEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDA3MTYwODM5NDdaFw0yNjA3MTYwODM5NDdaMBgxFjAU
BgNVBAMTDTY2OTYzMWQ3LTRmZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDfa2qKkaMriTFhqkPX2dW33WtZCMZKimekDTWolZErA31aGvrCL86n63sI
D0FwHQwYWdocDrzO7ehw0jPFkLbSoquNdL8+INtW7WrXa1vM4wsL+/psOJVSuleq
bLSWO2H/HVoC1MjaX6sF33rtjSZB5T9BxbofgMbWNiaNbWC0ofcet0yUgiSUBv26
CSIy6XfiMCV8tJx2ZfZNRBJrsrjr7iestVdK2TbMWTawAqQiUekYu19WMg3iBIxi
uy+MBY/C2pTP5MLWd0VkQ1PiOMQi/y5ltDmNLX4WqL9xy9h+8ibEtjVCg8EcvF3O
A34R7naiEBC6PCSgbMMbnhqElIp1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/myp
PAl++ZwIG/sga8GCBP4P66YwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0Y3NEM1NDRFNDM0RTExRUY5MjJGNDA3Rjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKaEKgwDQYJKoZIhvcNAQEL
BQADggEBAHM/hsiiROZFOekxEHiLfjuEak+WDSew7HUoNXgURSiBkilTNJnwjUDg
hTlYLWAF2RyiOOgXsTfHc64XlQwo5U6yOfUqLyoqEZG75oWz4Y3AJs2jlJbV+6nm
1hAAW2O1zyz2q8DwfAlVQRR2afI71zdgPvp7bmfeBTF9/fywZsLf1gwxuazZ118n
wPjnnnRw1M8BU6VSYrgf7W/jgn1PzswHsQger9ih05KCf3XY2Q7ydYPE2ZYDqMvb
5W2ichvKxe6MCKmUiIcZb04hP1xHujDVgaf5AKN/27Lvim6hjxWAT+dxrpFkL29a
jDuEVwgPnmP4Oq8PpShGH2PRXSlwmUc=
-----END CERTIFICATE-----
Generated at Sat Sep 7 02:13:57 2024 by rpki-client on console-fra.rpki-client.org