Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/E739D1BE1F7811ECBE14071BD8A014CE.roa
File:                     E739D1BE1F7811ECBE14071BD8A014CE.roa (raw, json)
Hash identifier:          XvzpJAf5CAfqUsf2t3F2RGOpHSqxkl68xqf6tTZaymg=
Subject key identifier:   EF:07:C3:07:E8:1C:E9:34:29:AE:BB:56:49:20:21:AC:5D:18:0D:BD
Certificate issuer:       /CN=F3683A54AF/serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
Certificate serial:       04
Authority key identifier: 91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/E739D1BE1F7811ECBE14071BD8A014CE.roa
Signing time:             Mon 27 Sep 2021 09:54:28 +0000
ROA not before:           Mon 27 Sep 2021 09:54:24 +0000
ROA not after:            Tue 23 Sep 2031 09:54:24 +0000
asID:                     36924
IP address blocks:        2c0f:3d00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683A54AF/serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
        Validity
            Not Before: Sep 27 09:54:24 2021 GMT
            Not After : Sep 23 09:54:24 2031 GMT
        Subject: CN=615194d4-a225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:77:94:68:61:4c:11:35:ed:53:8d:6c:71:
                    a2:39:a1:67:d7:4f:87:ef:26:f4:34:3b:8f:77:fb:
                    13:8d:d1:a7:30:cc:cf:a8:5f:cc:7f:b8:3d:8d:38:
                    73:7b:1f:e2:e5:be:d8:bf:b7:74:f3:37:9c:b2:a5:
                    21:38:c5:11:e0:83:7b:54:ae:8f:ec:86:91:2b:10:
                    ec:75:c8:78:33:e2:c2:58:93:7a:0e:87:16:12:bd:
                    c1:15:11:44:c0:c7:9e:a8:1e:61:c3:37:68:48:2f:
                    87:05:21:f4:d5:a2:63:e6:9a:71:c3:dd:bc:b4:14:
                    1a:4b:a9:ce:9d:f0:bc:d1:01:e5:9f:37:54:03:be:
                    b5:bb:bf:2f:1f:63:fd:82:c5:32:fa:e1:af:3e:c5:
                    53:6c:74:e7:c3:6d:b9:f3:e4:c4:5f:64:59:b7:aa:
                    ae:7e:8a:77:cf:b7:ba:d2:05:e8:6b:83:91:a2:cf:
                    7b:2e:b6:4f:a5:27:66:0a:fa:8e:5f:b0:89:f8:7c:
                    02:9f:76:e9:47:ab:1a:c8:ef:1d:a0:19:69:14:4b:
                    59:69:4c:05:7f:4c:a3:6f:6c:d0:58:a4:94:18:33:
                    e0:a3:31:93:b1:7c:7b:46:63:4e:09:f9:9c:38:74:
                    c9:24:8f:50:78:fe:54:f9:c7:fc:e6:de:c2:6d:00:
                    69:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:07:C3:07:E8:1C:E9:34:29:AE:BB:56:49:20:21:AC:5D:18:0D:BD
            X509v3 Authority Key Identifier:
                keyid:91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/E739D1BE1F7811ECBE14071BD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:3d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:43:28:98:9d:1c:a5:9b:92:e5:9a:c7:26:9a:f9:6d:5f:82:
         1c:4c:05:18:e4:1f:f5:03:62:51:52:14:6c:a9:e3:3e:67:ea:
         5d:78:bd:06:bb:c7:4d:56:af:3e:21:21:aa:2e:cd:07:c5:b6:
         c6:33:e0:88:88:fe:ba:e0:e5:ef:7a:77:ed:d2:ea:af:f8:c4:
         38:81:57:3a:b0:2e:e5:bd:1b:a9:c9:65:29:f2:81:1e:31:11:
         38:21:2f:bb:39:e5:c3:c8:22:1f:23:a6:94:43:34:7e:e3:b3:
         3f:bf:97:21:ed:bc:17:c0:44:5a:b1:42:e0:f0:69:88:41:76:
         e5:d3:a2:9a:8e:3d:bf:a0:1c:6e:ad:b4:36:19:1b:b0:82:e4:
         e1:a0:35:77:de:07:8d:84:0c:af:ee:84:46:e7:e2:e9:83:07:
         a6:39:1c:01:d8:79:5f:ef:9d:fd:4a:c7:6d:37:5e:70:40:61:
         4a:8b:94:13:73:f8:7e:7d:fd:f6:cd:8f:a9:95:41:5a:a0:8a:
         46:4f:70:99:31:af:98:4b:8d:06:05:e4:84:4a:cc:20:e6:46:
         d1:4d:ad:aa:d6:a5:fc:b2:b4:69:a9:c0:78:75:57:cc:65:f5:
         88:a9:02:a7:ec:91:e7:90:38:22:a3:61:64:aa:e2:46:c2:ac:
         40:90:a1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:18:52 2024 by rpki-client on console-ams.rpki-client.org