Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/C16E6C76800111ECA185F1CE5A40D577.roa
File:                     C16E6C76800111ECA185F1CE5A40D577.roa (raw, json)
Hash identifier:          UWu2+KyBdfbVxloILheOAfGMR6u105H4ohFmI54Kn8M=
Subject key identifier:   DB:82:3F:FD:C6:8B:5E:D9:AF:B9:4D:15:FA:9F:75:E4:26:EF:99:47
Certificate issuer:       /CN=F369671EAF/serialNumber=23BF045F8B8E9BE838E79DD312CC95ECB8CC610B
Certificate serial:       0406
Authority key identifier: 23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/C16E6C76800111ECA185F1CE5A40D577.roa
Signing time:             Fri 28 Jan 2022 06:15:57 +0000
ROA not before:           Fri 28 Jan 2022 06:15:54 +0000
ROA not after:            Thu 31 Jan 2030 06:15:54 +0000
asID:                     37172
IP address blocks:        197.231.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 May 2024 00:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1030 (0x406)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369671EAF/serialNumber=23BF045F8B8E9BE838E79DD312CC95ECB8CC610B
        Validity
            Not Before: Jan 28 06:15:54 2022 GMT
            Not After : Jan 31 06:15:54 2030 GMT
        Subject: CN=61f38a1d-9127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:09:7c:32:c5:a4:8b:41:04:eb:be:63:42:
                    36:9a:02:bc:15:b5:9c:0f:e5:61:4b:95:db:18:0e:
                    c4:7a:cd:0a:fe:5f:d7:49:58:7e:a7:e4:45:cf:41:
                    7d:7e:83:05:31:5a:9e:4a:fd:f3:e3:7b:2d:4d:2a:
                    30:23:ac:c9:3d:c9:1a:16:3d:2e:68:22:90:36:68:
                    60:2c:d9:cb:2a:d3:17:2a:ed:04:f5:97:cf:50:e6:
                    f5:23:89:a8:52:8d:f3:da:07:68:de:fb:10:1a:ac:
                    8f:08:6b:f3:8e:ac:f4:f6:ec:65:bd:ec:67:3a:39:
                    12:c6:b4:45:a2:63:25:c5:41:ff:53:48:ed:40:d9:
                    7a:c3:23:04:7f:ba:4d:f0:30:f9:de:96:1e:96:b9:
                    59:50:8e:f8:5c:e2:78:40:6c:7a:54:6f:03:64:85:
                    17:bc:71:b5:e8:e4:c3:a7:e4:a6:4e:17:d3:97:a4:
                    89:a2:7a:b6:62:97:20:de:4f:bf:bb:5d:41:9c:c9:
                    21:5a:79:62:89:16:3d:f0:b2:25:f5:7c:6c:54:d4:
                    92:b9:13:cd:9e:cd:3b:a8:de:c5:26:06:f9:f5:4c:
                    8f:e6:bc:2b:13:9d:a0:fe:01:9f:c9:2b:b5:b8:ec:
                    6d:3b:1d:3b:97:cb:77:50:ee:73:b0:40:82:cc:9b:
                    53:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:82:3F:FD:C6:8B:5E:D9:AF:B9:4D:15:FA:9F:75:E4:26:EF:99:47
            X509v3 Authority Key Identifier:
                keyid:23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/C16E6C76800111ECA185F1CE5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.231.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:3e:23:96:f5:c9:9e:58:5a:24:4d:be:d0:fb:a1:b5:79:9f:
         30:24:e2:be:65:08:f6:9f:11:b9:3f:b8:cb:0d:eb:3d:85:de:
         84:56:3d:35:92:94:1b:39:b6:34:1c:96:92:61:79:7c:89:ae:
         8d:73:6c:55:53:7a:5d:94:97:4c:9e:2b:21:09:d4:ce:42:20:
         66:7e:23:50:17:7c:dd:31:bc:0c:44:2c:42:74:26:4f:0a:2b:
         e0:07:1f:d3:3b:5b:18:f3:e6:08:1d:0f:42:56:5a:f0:ae:d6:
         43:40:24:22:a8:d6:9a:d7:14:d8:a0:06:16:9c:7b:fc:67:82:
         61:c0:12:15:f7:dc:20:63:30:ec:0a:36:b8:f3:b2:87:ab:d1:
         ec:d0:7c:cd:a8:00:ab:2a:77:89:12:0c:7d:f8:ac:15:36:da:
         59:4c:ed:f6:8c:a5:4a:21:b1:c1:05:77:04:41:8c:8b:ee:08:
         6d:d3:e1:c9:2e:7c:3e:98:94:af:3c:42:9d:24:cf:70:7d:a5:
         ca:4b:e9:bf:e6:9a:56:1b:fa:3b:6e:c7:7d:d2:0f:26:9e:b6:
         07:20:cf:77:e7:e7:e4:3e:7e:e5:5f:fe:8e:8d:a8:75:d2:87:
         4e:0f:c4:04:d1:8d:78:f4:51:dd:a2:b4:4b:71:32:ea:88:c5:
         38:b7:ad:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:01:31 2024 by rpki-client on console-ams.rpki-client.org