Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6AD9DC8901D11EE9CB86257D25BE465.roa
File:                     C6AD9DC8901D11EE9CB86257D25BE465.roa (raw, json)
Hash identifier:          FyoPrel6KUk1rc5tOx6qL1UlFyXSJdsb5eD3x3TlEtU=
Subject key identifier:   84:79:7A:C6:33:55:B8:10:A9:53:75:8A:6B:22:BA:FA:AB:8A:9F:DE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       4C83
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6AD9DC8901D11EE9CB86257D25BE465.roa
Signing time:             Fri 01 Dec 2023 07:46:46 +0000
ROA not before:           Fri 01 Dec 2023 07:46:42 +0000
ROA not after:            Sat 30 Nov 2024 07:46:42 +0000
asID:                     149641
IP address blocks:        45.200.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19587 (0x4c83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  1 07:46:42 2023 GMT
            Not After : Nov 30 07:46:42 2024 GMT
        Subject: CN=65698f66-9b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3f:36:9d:94:3e:9d:d3:b6:98:8d:19:83:ea:
                    ca:bd:0a:01:c3:1e:59:33:09:2c:55:59:7a:f3:cb:
                    02:be:f6:08:f0:34:74:80:1e:f0:06:f7:b0:8e:52:
                    86:5d:8f:d0:8a:ce:e4:20:e7:09:ff:b7:b3:0d:ad:
                    18:26:b8:4e:49:91:f9:54:c9:bc:0a:bd:1f:4c:11:
                    2e:a3:35:27:bc:fc:b8:87:47:b3:31:8f:64:9c:14:
                    8d:78:9c:89:85:6f:69:13:dc:39:1b:74:62:f8:23:
                    6c:ce:bc:6c:8b:57:9a:a3:6b:c9:d7:28:ca:72:64:
                    23:53:9f:e0:0d:85:78:e7:93:0a:40:25:24:f7:47:
                    82:4e:25:4a:3e:83:84:d4:27:62:2b:4e:c0:eb:cf:
                    32:f5:79:93:ba:66:25:0d:64:2d:01:c7:c9:bd:21:
                    0a:62:52:2f:fc:c5:9f:7d:b0:ad:58:76:fc:60:ee:
                    6b:5f:d3:9b:4c:af:01:12:31:dd:a2:68:49:e7:37:
                    ae:52:88:2b:15:36:1b:e4:3b:29:26:fe:21:09:27:
                    b5:37:05:6d:47:7c:56:24:bf:88:51:71:5f:b8:b6:
                    67:4e:12:a0:6a:ef:63:f5:f2:c5:c1:d9:56:a2:8b:
                    fc:db:78:55:78:40:dd:82:93:7b:46:47:88:85:2a:
                    7a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:79:7A:C6:33:55:B8:10:A9:53:75:8A:6B:22:BA:FA:AB:8A:9F:DE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6AD9DC8901D11EE9CB86257D25BE465.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:2d:bb:0d:e6:0d:c7:94:7c:a5:2e:cb:a2:b6:24:97:c7:fa:
         3f:9c:e0:67:ea:82:6c:47:da:a2:1f:5a:d3:b7:69:b6:28:a0:
         74:da:1b:87:5d:d3:c1:11:cc:55:7c:ff:7f:2a:49:53:f8:d0:
         22:c0:2f:dc:9a:e2:95:93:5f:03:1c:28:87:71:e7:a5:9c:d4:
         8b:c7:44:93:e6:b9:f2:84:cc:56:b1:bd:c8:5e:ec:77:07:9e:
         53:ce:23:91:33:5a:f1:5d:12:8c:bd:9c:67:da:37:63:67:51:
         ad:96:e0:28:e9:10:36:ba:94:c5:9c:46:b8:1d:d6:a4:c7:95:
         03:1c:77:0e:b7:d1:4d:1c:bb:69:ae:4b:93:40:6c:2d:fb:f8:
         93:d9:eb:00:84:e0:f3:f6:a3:19:1d:bf:fa:e8:10:6b:8a:8d:
         a6:cd:a3:f7:a6:9c:f6:87:72:65:ab:80:77:ec:c1:3f:d1:07:
         32:4e:d2:dd:e5:7f:35:25:a9:10:92:3c:b7:3b:23:63:b5:4b:
         26:d4:b8:85:66:3a:87:b7:3a:f2:55:59:61:58:b0:0e:81:4f:
         79:27:68:79:de:b4:f6:01:b3:15:39:68:fd:17:a2:97:13:1d:
         8b:20:2a:fa:55:df:d3:e1:d0:13:76:17:46:8b:69:f9:d4:78:
         14:12:7b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:58 2024 by rpki-client on console-ams.rpki-client.org