Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A8563E8C16911EE830F08C3775412E6.roa
File:                     9A8563E8C16911EE830F08C3775412E6.roa (raw, json)
Hash identifier:          cmAp9dO0yVWCNElCQK8pzHHn/2q89WHX225JwWUY+NE=
Subject key identifier:   BF:B0:F2:80:5A:82:B5:26:D6:B2:B2:7E:FB:41:D5:18:FB:0D:DD:D2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       6C67
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A8563E8C16911EE830F08C3775412E6.roa
Signing time:             Fri 02 Feb 2024 01:23:00 +0000
ROA not before:           Fri 02 Feb 2024 01:22:57 +0000
ROA not after:            Thu 08 Aug 2024 01:22:57 +0000
asID:                     133199
IP address blocks:        45.207.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27751 (0x6c67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb  2 01:22:57 2024 GMT
            Not After : Aug  8 01:22:57 2024 GMT
        Subject: CN=65bc43f4-f992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ff:ac:a1:28:41:d2:70:2c:cf:29:ea:56:76:
                    10:03:b9:1f:22:8b:93:52:6b:6e:2d:e8:cb:45:bd:
                    9c:5f:0e:58:92:11:9c:85:01:29:5c:aa:67:4e:e2:
                    60:c7:81:3d:64:ac:5a:42:a9:81:df:c1:a8:b0:8e:
                    32:e6:f7:92:6f:0a:2f:00:dd:c4:d4:ea:00:e1:e1:
                    2b:f3:27:2b:55:d4:b0:db:b9:41:72:94:b8:9d:c9:
                    85:de:48:d7:ac:fb:19:ca:1c:c5:dd:1c:7f:1d:28:
                    46:bf:0b:0a:24:35:51:ce:a1:71:e7:87:e0:ed:d3:
                    76:04:b1:01:43:47:28:70:7b:bf:5b:74:3e:24:cf:
                    5c:da:1c:84:40:5a:03:6b:01:64:7b:50:15:67:08:
                    2c:b9:86:4e:d4:2c:24:a9:37:4b:a7:79:75:8e:82:
                    ab:a5:f6:c0:97:5d:aa:f1:c6:6f:d2:af:d4:68:51:
                    74:d0:52:36:ce:29:1b:f0:d1:a1:a6:ed:0f:03:99:
                    49:4f:5c:b5:c3:dd:36:55:6f:70:ac:3f:fa:51:5f:
                    97:aa:d8:02:be:4a:78:b6:86:bc:22:de:3a:5c:fa:
                    ad:2d:21:10:4a:23:15:ef:bb:c3:47:4e:f9:49:fa:
                    b0:24:57:ce:5b:f0:61:cd:4a:6b:79:07:77:94:4f:
                    cb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B0:F2:80:5A:82:B5:26:D6:B2:B2:7E:FB:41:D5:18:FB:0D:DD:D2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A8563E8C16911EE830F08C3775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:8d:70:a4:c1:3d:72:16:57:fc:88:bd:0d:4b:db:13:ec:63:
         40:2b:5d:02:5b:05:79:fe:b0:a7:15:8d:7b:74:9c:37:57:c9:
         6c:ec:f9:57:74:de:67:50:36:84:74:16:2f:12:5c:7d:33:b3:
         09:ee:7f:69:9e:ec:70:40:b5:9e:3d:ba:b6:5b:f6:64:52:62:
         04:11:ef:af:f3:26:f7:f0:04:c2:87:2b:25:dd:27:fc:28:e9:
         e1:e8:c6:0d:ca:ad:49:89:d1:a3:4e:ed:1b:81:9d:c5:c7:c0:
         fe:8b:8a:21:f6:2d:d3:36:54:6e:1b:8e:74:68:02:ed:71:b6:
         6c:ef:e0:d4:d1:bb:6f:a0:fd:03:d4:3d:e5:d5:c8:af:58:da:
         15:bb:f4:51:8e:6d:9d:4d:b7:30:aa:16:35:c7:45:b1:f3:cd:
         44:ba:35:17:29:a4:6f:9c:75:c4:17:2a:e3:c3:1c:d9:96:84:
         92:a5:1f:9b:0e:c7:2f:e2:10:d9:d2:3a:50:a0:1a:3d:0c:02:
         0e:cf:6e:0a:ef:0c:5d:66:ac:3b:ed:3f:dd:51:96:34:a0:b3:
         bd:81:3e:97:7b:4d:5c:0b:5c:23:2f:d3:d7:b9:fd:cb:9a:4f:
         be:5c:36:9e:60:74:d5:3c:d1:65:6b:b7:f7:59:a4:26:46:80:
         58:c8:08:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:13 2024 by rpki-client on console-fra.rpki-client.org