Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE6E03A4156311EE875A6E5E4AD9E6FC.roa
File:                     AE6E03A4156311EE875A6E5E4AD9E6FC.roa (raw, json)
Hash identifier:          5XIzG8japTdWplaTWLsJ72SADPUBpul1fulAR75hI/4=
Subject key identifier:   B9:48:1B:35:DD:58:ED:F8:2B:95:F7:93:98:0A:58:12:28:96:42:FC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       2D94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE6E03A4156311EE875A6E5E4AD9E6FC.roa
Signing time:             Wed 28 Jun 2023 03:27:17 +0000
ROA not before:           Wed 28 Jun 2023 03:27:13 +0000
ROA not after:            Sun 16 Jun 2024 03:27:13 +0000
asID:                     270068
IP address blocks:        45.195.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11668 (0x2d94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 28 03:27:13 2023 GMT
            Not After : Jun 16 03:27:13 2024 GMT
        Subject: CN=649ba895-8031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f8:6d:be:24:5b:79:e1:fb:32:31:76:f5:b1:
                    47:a2:95:c6:4e:53:a3:50:ca:b0:af:85:df:61:71:
                    d3:be:bc:65:05:5b:32:9a:f6:d4:e8:7c:64:c8:56:
                    f7:0a:3d:82:ad:0d:fb:5e:f2:06:bf:05:88:b2:81:
                    d5:ac:f2:fc:dc:5e:b8:7c:fe:77:33:8c:d0:ef:e2:
                    78:c1:cb:20:a5:c0:87:32:26:7b:11:9a:ab:5b:f4:
                    c9:43:2f:ce:3e:4e:bf:e7:69:41:bf:43:73:ac:54:
                    bd:12:af:c9:bb:d2:66:63:03:85:1c:2a:9a:f9:b2:
                    4e:74:08:37:6b:66:45:a4:22:a0:b6:0a:4e:57:c3:
                    95:3f:27:f3:f0:c4:f1:ca:26:80:d7:36:73:a6:2d:
                    db:8a:57:d3:36:3b:79:c4:69:63:00:7f:b8:88:d5:
                    d2:f0:94:4d:b3:4b:c4:47:26:d7:ef:c5:a3:d1:8b:
                    32:d2:18:be:cd:8d:46:85:05:d4:56:11:f7:c5:48:
                    1b:71:20:1c:33:6d:d3:65:34:ae:bf:ad:b2:59:3c:
                    ca:63:62:30:68:b9:40:1d:6d:ff:58:7f:b6:ac:27:
                    7d:a0:46:4a:8e:5a:fb:fc:43:15:d8:c1:1a:5a:eb:
                    9b:29:83:f0:66:a4:03:ce:82:0b:df:ae:5e:08:59:
                    76:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:48:1B:35:DD:58:ED:F8:2B:95:F7:93:98:0A:58:12:28:96:42:FC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE6E03A4156311EE875A6E5E4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:4f:f2:e2:38:48:aa:b1:5f:4c:87:0d:36:3c:33:9f:1c:a1:
         4f:b2:14:b3:70:71:64:ee:32:e2:30:97:f2:bc:2d:1d:88:d8:
         a8:b3:ac:05:91:cc:dd:68:66:0f:b8:37:ad:c6:27:85:92:76:
         16:2a:2c:ba:a6:bd:dc:44:fa:84:39:80:ef:4c:4b:b2:07:40:
         fa:e2:02:a7:50:14:a3:39:f3:a5:88:58:80:85:4e:4c:08:a7:
         28:a1:97:e0:2a:3d:b3:a5:d8:50:a6:48:6f:02:d1:9b:94:49:
         f8:72:8d:d7:d6:bf:a7:6b:a2:1f:db:9d:ff:5d:48:85:c5:ea:
         6f:31:e3:9d:02:c1:c3:24:0b:0d:4d:0e:a1:90:a8:87:84:1e:
         e6:4e:f9:05:39:88:cb:1f:02:1b:1b:39:c3:70:a3:39:5b:b3:
         da:68:7a:ef:e0:f3:ff:96:29:9f:49:73:75:10:95:a2:bb:56:
         2b:fb:53:a9:30:84:ee:b4:b7:a0:e7:15:cc:16:da:a2:e1:a7:
         22:e1:a1:d4:f2:bf:ef:d2:f6:08:a7:7d:b0:25:29:40:ee:20:
         c5:75:64:5d:6b:d4:c9:e1:84:02:14:33:d3:6e:e8:d1:a3:b1:
         0b:13:12:07:82:db:ab:d5:1a:5a:90:c9:4d:2f:ae:72:34:ac:
         c9:ed:ef:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:14 2024 by rpki-client on console-fra.rpki-client.org