Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/9733E512800111EC9CF061CE5A40D577.roa
File:                     9733E512800111EC9CF061CE5A40D577.roa (raw, json)
Hash identifier:          7aNJhpbTziBeolDWt7IVZWfYO33jTKfJsXRXn6F4rZU=
Subject key identifier:   AB:3A:DF:7B:C6:65:32:94:DE:82:A8:B5:F9:FD:6E:7C:2C:BC:42:36
Certificate issuer:       /CN=F369671EAF/serialNumber=23BF045F8B8E9BE838E79DD312CC95ECB8CC610B
Certificate serial:       0403
Authority key identifier: 23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/9733E512800111EC9CF061CE5A40D577.roa
Signing time:             Fri 28 Jan 2022 06:14:46 +0000
ROA not before:           Fri 28 Jan 2022 06:14:42 +0000
ROA not after:            Thu 31 Jan 2030 06:14:42 +0000
asID:                     37172
IP address blocks:        196.250.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 May 2024 00:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1027 (0x403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369671EAF/serialNumber=23BF045F8B8E9BE838E79DD312CC95ECB8CC610B
        Validity
            Not Before: Jan 28 06:14:42 2022 GMT
            Not After : Jan 31 06:14:42 2030 GMT
        Subject: CN=61f389d6-cce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:02:fb:4d:07:53:a1:74:71:bc:e8:8c:78:39:
                    4f:fe:96:9c:d7:de:40:fd:1a:13:f9:04:4c:93:7b:
                    5e:f6:e7:99:21:57:8c:6a:44:c3:26:82:c0:26:18:
                    5a:c3:75:39:49:5e:6f:dc:46:4d:20:37:02:e6:d0:
                    4a:ef:b3:39:71:29:72:de:bb:b6:68:c0:ff:22:14:
                    c6:53:5d:f3:96:af:69:61:c8:d1:59:7a:29:b7:92:
                    c5:d0:64:43:d8:98:7a:64:54:56:5d:d6:65:a7:ca:
                    8f:81:8a:86:c6:d1:f4:8a:13:04:9b:d6:62:5c:4b:
                    72:08:51:52:a6:2d:08:c2:3d:65:47:5e:6c:bb:04:
                    a5:bc:7a:95:fc:10:3c:12:d2:26:2a:34:43:30:74:
                    fe:bb:61:e0:3d:23:a6:f1:8d:6f:df:68:44:8e:6d:
                    39:94:4b:67:d6:f9:61:bb:0c:e1:bc:11:b7:f9:fb:
                    d8:f5:f2:0a:b6:1b:b2:5f:49:9c:12:fb:d8:5f:19:
                    80:bd:64:d6:5b:e2:22:c7:f0:41:7c:e7:7b:a1:5d:
                    04:75:ad:04:52:a7:0e:3f:7a:95:c3:07:fa:70:ae:
                    2c:0f:9e:da:d7:40:a7:5b:ba:a5:93:a2:00:27:55:
                    bf:dd:01:8b:00:4a:4d:72:f2:d0:18:5b:c0:31:f1:
                    63:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3A:DF:7B:C6:65:32:94:DE:82:A8:B5:F9:FD:6E:7C:2C:BC:42:36
            X509v3 Authority Key Identifier:
                keyid:23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/9733E512800111EC9CF061CE5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.250.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c7:50:53:ac:44:31:d8:a4:bc:61:e0:91:3e:7a:61:ab:ab:55:
         90:66:09:1a:b1:b1:4e:7e:26:0a:b0:e6:d9:1a:63:06:4a:7d:
         28:80:f6:f2:41:8f:49:6d:be:90:ad:a2:b1:0c:c7:b8:12:2f:
         9a:d1:85:de:24:fb:b3:33:7d:c0:27:e8:99:91:01:54:08:d7:
         0a:38:eb:86:c0:90:7f:eb:64:25:52:e2:db:c6:ec:99:37:49:
         2c:1e:0a:b6:06:32:7a:8f:0d:39:eb:d6:ef:c8:d1:df:d2:50:
         d0:a9:96:52:59:4c:b5:f2:37:05:45:47:67:e9:bf:69:72:a5:
         12:56:e3:c6:7c:fe:df:0c:67:99:cc:f2:de:43:6b:4e:d9:d0:
         0b:bb:0e:02:65:95:cf:14:c5:37:8a:80:7f:b2:6d:b4:62:6a:
         75:66:75:54:d2:c5:14:ae:1a:d8:39:e0:18:79:ac:cb:4b:cb:
         b3:a8:a8:b1:6c:99:bf:93:fd:d5:6b:2b:91:0d:1a:3d:c5:88:
         ff:63:ca:4b:68:e6:e8:62:46:15:52:8b:9b:fa:4e:df:a4:a4:
         c5:de:67:2b:09:8d:d7:54:76:f5:ee:93:6c:64:38:28:45:6d:
         ec:25:d6:2f:e4:c0:a8:4a:c0:fa:3b:3b:33:82:d6:a2:6c:dd:
         2e:f4:e0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:01:31 2024 by rpki-client on console-ams.rpki-client.org