Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/8C361A285FB011EEAA20225D4AD9E6FC.roa
File:                     8C361A285FB011EEAA20225D4AD9E6FC.roa (raw, json)
Hash identifier:          que3FgH6vkS2NxtSyYa3MsFeQelC1Z6XcR23GSO81mE=
Subject key identifier:   3C:A8:EC:9F:B5:61:A1:21:1B:E0:DE:BD:C1:01:22:B2:77:10:DF:D3
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       03FF
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/8C361A285FB011EEAA20225D4AD9E6FC.roa
Signing time:             Sat 30 Sep 2023 16:43:57 +0000
ROA not before:           Sat 30 Sep 2023 16:43:53 +0000
ROA not after:            Fri 30 Sep 2033 16:43:53 +0000
asID:                     139989
IP address blocks:        41.216.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1023 (0x3ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Sep 30 16:43:53 2023 GMT
            Not After : Sep 30 16:43:53 2033 GMT
        Subject: CN=6518504d-777c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cb:a8:4e:8a:a7:2f:a9:6b:85:e2:ec:f4:d4:
                    6a:d3:ba:59:be:aa:a9:f6:7a:8b:57:57:b9:ac:8b:
                    41:41:29:bb:c2:42:31:90:82:95:eb:07:fa:cf:29:
                    9b:0b:4b:b3:66:17:fe:46:23:42:15:5d:92:a3:14:
                    12:47:8f:1f:77:6d:ad:0f:9d:d4:4e:4c:c1:49:f5:
                    20:f7:c7:c1:97:cc:a6:09:7d:88:7d:dc:5c:d6:0c:
                    45:3b:a4:c0:bd:e7:1f:72:c1:ae:38:df:4b:dd:7f:
                    62:d2:96:6a:bc:8a:8c:bd:6c:12:ad:77:fb:6a:6b:
                    09:5e:99:d6:42:77:2f:76:ce:13:2d:ff:9e:a2:f0:
                    d8:5b:aa:e8:2a:bb:d8:93:6a:44:dc:d1:51:1e:cc:
                    3b:31:ae:b2:a6:dc:ed:64:2d:25:bc:ea:b1:fd:29:
                    06:69:fe:0e:1c:1b:ad:99:f2:57:d8:fa:df:f1:d1:
                    bf:29:28:b7:ba:cd:dd:b4:7a:fe:a4:ab:ff:26:ac:
                    6e:42:7c:ae:d3:9c:57:d1:42:7b:34:3c:2b:99:5d:
                    53:72:37:8a:3d:66:9c:66:b1:31:de:fa:14:a6:e7:
                    e7:d4:39:f2:cf:f8:e0:d0:86:ae:f6:08:9d:54:be:
                    13:ac:95:bd:9e:22:68:78:7d:46:ab:10:db:22:d9:
                    8f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A8:EC:9F:B5:61:A1:21:1B:E0:DE:BD:C1:01:22:B2:77:10:DF:D3
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/8C361A285FB011EEAA20225D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:b1:8e:b2:0a:c4:13:28:bf:d6:7b:b9:63:c6:d5:74:fa:da:
         bf:ca:72:2d:a4:ad:1f:a4:32:5b:bc:8f:0b:16:94:e7:ef:74:
         a3:84:8a:c8:6f:68:a1:44:84:8d:05:f6:32:8e:ec:1f:c0:6a:
         c3:59:64:16:bb:32:56:b0:46:7a:6a:cb:dd:30:1a:0a:30:c3:
         7d:f8:83:3a:6d:bc:a9:fd:a7:00:be:55:15:57:35:14:5f:62:
         82:d8:74:70:32:0f:d6:f6:2c:86:58:be:68:c9:18:fb:07:c3:
         70:83:28:e6:e2:77:08:06:0a:88:81:c0:51:ca:7b:10:87:59:
         20:10:b9:5e:ee:da:7f:1c:98:76:12:56:3f:96:9c:2c:5b:f8:
         d8:6e:2a:e5:49:08:e9:aa:f7:90:49:91:6c:9d:f3:9a:45:14:
         60:f4:4c:00:bb:fb:02:a3:d6:1f:cc:fb:b7:63:e5:24:ac:86:
         8e:36:0d:60:8b:0d:d0:53:45:2d:f9:ba:51:db:ea:c8:ee:ef:
         58:8f:cb:28:7f:af:99:16:4a:7c:48:e1:55:1d:99:30:8a:75:
         49:c8:43:82:ad:45:ec:78:96:98:e4:fc:d8:9d:0a:de:44:e2:
         aa:7a:58:e3:21:d2:e5:c9:0c:7a:48:05:06:7c:91:cf:1d:7a:
         06:85:cc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:06:02 2024 by rpki-client on console-ams.rpki-client.org