Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/0EDAC69C7E9711EC938A07A55A40D577.roa
File:                     0EDAC69C7E9711EC938A07A55A40D577.roa (raw, json)
Hash identifier:          IHQza7DKfiJqgHWYlqE8cYUVoYzkuQy2AQju/GR8v0Q=
Subject key identifier:   D4:15:2E:CB:4B:4C:91:33:8A:01:C6:FB:42:9E:E6:0B:60:DF:72:B8
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       015D
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/0EDAC69C7E9711EC938A07A55A40D577.roa
Signing time:             Wed 26 Jan 2022 10:59:40 +0000
ROA not before:           Wed 26 Jan 2022 10:59:36 +0000
ROA not after:            Mon 26 Jan 2032 10:59:36 +0000
asID:                     40676
IP address blocks:        41.216.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Apr 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Jan 26 10:59:36 2022 GMT
            Not After : Jan 26 10:59:36 2032 GMT
        Subject: CN=61f1299c-bb40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:47:fc:d4:e0:15:f6:ca:d6:18:a4:c0:16:
                    52:5b:c6:84:69:ca:2a:8b:70:aa:2c:4f:82:9d:f4:
                    39:e7:fd:87:89:1b:6a:0d:70:f4:47:d3:73:33:2e:
                    53:da:8f:0a:75:05:f6:0e:86:27:f7:66:86:db:cb:
                    e0:da:61:77:5a:35:87:46:24:64:db:85:90:8d:dc:
                    25:91:c3:6b:6c:bd:92:e9:8d:e6:74:53:8f:19:95:
                    68:d5:e3:eb:9b:0b:a8:38:8e:e4:3b:f5:c2:d5:2f:
                    6a:77:08:d5:26:35:2e:cd:15:8f:c7:47:30:b0:1c:
                    24:70:0c:e2:ba:2d:aa:3c:56:94:30:1d:03:43:7a:
                    5a:7a:28:33:6e:9f:2b:4c:87:b8:39:6d:20:1c:f8:
                    df:7c:ad:5a:ed:e2:4e:32:b2:98:ec:34:81:f5:e9:
                    5a:c4:45:2b:59:d4:2c:38:5d:08:f4:e7:b7:98:29:
                    1a:68:df:0b:80:9b:fb:7c:c2:25:5a:c2:e5:fd:35:
                    2e:0e:18:08:9d:ff:85:41:a2:1e:91:d8:c1:c0:23:
                    66:50:4d:70:32:ce:d8:46:d6:98:72:f6:0f:c6:fd:
                    72:a7:cf:5d:66:48:cf:92:9b:40:88:e8:a9:41:cd:
                    5b:6c:15:b7:6c:af:64:68:56:ce:90:bf:c9:b6:9d:
                    e0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:15:2E:CB:4B:4C:91:33:8A:01:C6:FB:42:9E:E6:0B:60:DF:72:B8
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/0EDAC69C7E9711EC938A07A55A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:c1:1c:94:fe:d1:41:3d:14:6b:a9:fa:a7:ae:73:b3:25:4f:
         84:1c:8e:c2:f3:7a:7c:6b:8a:05:a6:9f:8f:b2:9a:21:20:66:
         6f:cb:98:9e:79:11:42:00:5c:a9:0e:ae:c6:19:ed:0b:9d:6f:
         72:8e:54:33:2e:fc:05:dc:ef:79:23:b7:95:d3:7a:f9:bc:4d:
         ed:cd:d9:f8:5b:31:54:6b:1c:59:ac:0a:71:cb:80:34:84:dd:
         69:8f:22:bc:fe:41:3e:99:b4:0e:50:8f:56:bc:38:81:32:04:
         3c:79:39:c2:0c:21:f0:da:29:27:d2:75:7c:c4:d9:02:e2:7c:
         1d:cf:99:06:12:9a:0d:06:4e:5d:8c:32:f9:3b:34:b4:9c:38:
         80:dd:d8:a9:81:d0:49:de:36:ac:89:44:0a:06:23:84:6d:04:
         e9:8d:8b:23:fd:a7:5c:38:73:01:3b:0f:dd:01:a8:97:13:32:
         a3:39:ae:d7:39:54:26:1f:03:8f:b4:f6:fd:ef:60:47:04:89:
         49:cc:c4:03:9a:b1:e0:6e:74:64:19:5d:c6:8d:0a:a2:db:e5:
         0d:f9:bb:72:e5:56:6c:5e:50:45:9a:a5:08:83:6d:b5:92:b6:
         3b:69:9f:fe:56:5b:cf:4e:4b:1c:ca:e5:20:fd:b2:f3:55:80:
         73:72:65:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 03:35:35 2024 by rpki-client on console-ams.rpki-client.org