Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F69A13023B2911EE8D723D3E4AD9E6FC.roa
File:                     F69A13023B2911EE8D723D3E4AD9E6FC.roa (raw, json)
Hash identifier:          oIregicb9IBsoOBCJqUgLHbf3E6BXaFyvyivZucZ3Bs=
Subject key identifier:   1F:6A:64:3A:20:E0:F5:C8:0E:14:4B:65:8A:9A:7C:6A:5D:E3:9C:B7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       35D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F69A13023B2911EE8D723D3E4AD9E6FC.roa
Signing time:             Tue 15 Aug 2023 05:09:51 +0000
ROA not before:           Tue 15 Aug 2023 05:09:48 +0000
ROA not after:            Mon 27 May 2024 05:09:48 +0000
asID:                     140627
IP address blocks:        156.247.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13777 (0x35d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 15 05:09:48 2023 GMT
            Not After : May 27 05:09:48 2024 GMT
        Subject: CN=64db089f-e2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:9b:8e:ca:3c:ac:4b:53:36:e9:67:db:95:
                    a1:e3:25:8b:05:c0:72:c5:fe:1e:ae:a5:0d:8b:48:
                    47:fb:7b:c3:90:36:66:63:8a:5f:ac:ec:a2:7c:35:
                    b9:00:6e:db:e9:09:44:4e:67:6c:1b:36:0a:ef:4c:
                    2f:a3:81:e8:6a:a5:37:bf:79:36:7b:25:51:ce:3d:
                    cc:3a:a6:7b:86:7c:6c:ae:4e:86:da:bd:c2:ed:70:
                    71:94:b7:18:0b:3d:f5:f6:55:05:f5:92:2d:35:a4:
                    eb:75:51:e2:9c:a5:fa:c5:f0:3f:44:eb:4c:ac:93:
                    70:42:42:63:1e:7d:b5:0f:4b:7d:b5:7c:7f:23:f7:
                    d2:d3:5b:0f:bd:0f:cf:b8:98:33:02:32:f0:d9:85:
                    f3:1f:d3:00:65:c3:bf:36:28:5e:02:73:48:67:18:
                    98:ef:97:c7:22:a6:dc:2b:31:0e:ab:02:74:5e:90:
                    b3:8d:f0:1b:70:65:40:6f:68:b1:5b:b3:df:d3:03:
                    eb:7f:54:69:49:78:68:af:24:bc:ce:86:ed:9e:89:
                    a6:06:46:0f:c2:3f:97:a2:ec:c1:08:38:72:e1:ff:
                    91:53:07:ba:6e:ab:50:7d:b8:ea:29:55:0f:ee:55:
                    12:53:2c:34:4b:31:11:8b:67:a4:4e:f3:46:08:bf:
                    a6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6A:64:3A:20:E0:F5:C8:0E:14:4B:65:8A:9A:7C:6A:5D:E3:9C:B7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F69A13023B2911EE8D723D3E4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:17:09:4d:fa:b8:2b:ff:7b:c4:c6:34:32:d9:61:7b:49:c5:
         7e:01:97:f2:88:1a:a2:0f:d6:b2:ba:67:5f:c6:8c:d6:68:f7:
         ba:51:3b:d0:81:63:9c:2c:26:68:9c:cf:58:30:80:ce:bb:98:
         67:f0:a4:a0:48:fe:5a:c0:0e:ed:ef:32:d4:4f:05:1d:7c:59:
         8d:51:fe:42:05:80:de:7b:d5:d3:b5:e5:c7:44:7d:63:cb:11:
         7f:d9:b8:84:95:ee:ea:b0:6f:e0:8b:4f:07:b1:cf:1d:7f:c7:
         c6:e4:1e:e6:95:c2:69:11:f2:1e:26:aa:bd:3c:c2:59:82:60:
         3c:e7:93:41:ab:30:dc:b1:31:9c:94:02:b0:ca:d6:ef:09:ed:
         14:25:7f:b0:c7:bf:63:e8:02:b9:2a:db:7f:c9:85:7c:ff:50:
         01:db:31:46:fb:5d:1f:6e:ab:68:0a:af:ab:f4:95:c1:d3:e7:
         70:7c:cb:cb:52:76:be:29:ed:96:89:8f:e5:4e:c2:04:3a:bd:
         a0:66:7e:f3:56:e1:de:2c:36:f5:2f:77:98:cd:e5:3f:89:14:
         9d:bb:5d:c3:7e:49:6a:29:45:c2:c8:43:32:1f:80:d3:d9:de:
         9d:96:07:94:8f:41:7f:aa:74:58:7c:6b:28:2a:22:be:10:c2:
         d8:9f:0c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:05:01 2024 by rpki-client on console-ams.rpki-client.org