Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/7BD1C78ECEC211ECA5D168D9F1222468.roa
File:                     7BD1C78ECEC211ECA5D168D9F1222468.roa (raw, json)
Hash identifier:          nf4PK+lidOrfc2Reb2CQH5nPtPRWenK3xLxQgTopJGo=
Subject key identifier:   3A:D8:79:AD:51:09:3B:7C:CB:B0:15:0E:AC:03:AC:5D:08:04:2A:F0
Certificate issuer:       /CN=F369C738AF/serialNumber=01E61C3F96466A5909985476E88479BB7D4112F6
Certificate serial:       0278
Authority key identifier: 01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/7BD1C78ECEC211ECA5D168D9F1222468.roa
Signing time:             Sun 08 May 2022 11:32:04 +0000
ROA not before:           Sun 08 May 2022 11:31:59 +0000
ROA not after:            Sat 08 May 2032 11:31:59 +0000
asID:                     15706
IP address blocks:        196.1.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 17 Jun 2024 00:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C738AF/serialNumber=01E61C3F96466A5909985476E88479BB7D4112F6
        Validity
            Not Before: May  8 11:31:59 2022 GMT
            Not After : May  8 11:31:59 2032 GMT
        Subject: CN=6277aa34-9389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:ac:47:24:81:79:e6:5a:44:ac:f6:50:09:
                    7f:c7:6f:44:5c:d5:76:27:db:77:94:54:f8:d5:36:
                    15:76:0f:63:ce:27:f0:cb:8f:35:88:a9:84:46:f4:
                    d6:29:f4:c8:df:5a:16:b0:d0:ea:97:31:91:39:b7:
                    57:dc:b2:ad:e6:4c:0e:92:2d:69:a9:1a:8e:f3:65:
                    29:36:9c:41:05:22:da:d6:e0:bb:b7:85:7b:14:bd:
                    58:85:0b:8f:63:60:d9:d8:f5:74:09:c6:0d:81:29:
                    a1:f1:cf:bf:99:97:43:fb:b6:77:3d:6d:c8:fe:b2:
                    57:e9:99:a8:11:9d:c6:01:1d:73:a8:8d:21:2e:5d:
                    81:9c:0a:12:73:54:bf:e8:25:3b:3a:a9:21:ed:70:
                    67:d3:53:95:11:ed:86:da:64:a7:c3:94:d6:51:9f:
                    b7:d4:86:e7:5f:82:6e:7c:e4:1c:30:60:2e:f7:1b:
                    42:cb:5a:bb:54:8e:fb:57:00:dd:31:53:e2:0c:b3:
                    d4:ce:d7:82:f7:d1:ef:e5:8e:f9:a7:15:ac:3f:e9:
                    aa:2b:f9:35:48:09:e7:50:57:16:cd:bf:5b:28:eb:
                    68:91:e9:16:9b:9d:02:02:c6:5b:cb:f2:e4:28:37:
                    88:81:7c:c0:a6:9f:8a:0c:2f:72:86:70:ad:9c:63:
                    b7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D8:79:AD:51:09:3B:7C:CB:B0:15:0E:AC:03:AC:5D:08:04:2A:F0
            X509v3 Authority Key Identifier:
                keyid:01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/7BD1C78ECEC211ECA5D168D9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.1.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3a:e6:be:3d:ea:a0:07:aa:97:19:dd:08:5b:22:fc:39:f4:4f:
         d6:17:dc:75:81:27:2e:11:87:29:26:5d:f4:57:1b:85:65:4a:
         b8:fc:0f:00:4a:cf:30:6a:4e:8e:f4:b3:e7:81:5b:d2:4d:a7:
         9c:91:51:c3:98:8f:ab:48:1a:40:d9:33:90:96:b0:21:aa:58:
         ab:47:ad:ea:89:7f:d1:30:7d:fe:4b:e8:5b:84:a2:1e:36:a4:
         2f:08:bf:03:c3:44:98:59:17:70:95:ee:c8:45:5b:e8:f0:d3:
         04:2c:8b:52:e2:79:d6:cd:14:ec:d8:7e:17:51:3d:fa:c1:b0:
         f9:fe:37:c8:eb:7e:15:24:30:7a:ba:03:ae:38:97:56:35:b2:
         b0:f8:e5:1b:fd:1f:8a:9b:00:29:7a:3a:76:ac:28:c9:ae:fd:
         06:f2:be:85:df:6d:d9:08:44:a6:cb:5f:94:c7:cc:48:a5:b0:
         cb:99:ad:03:a3:2b:a0:4d:c1:dd:ef:dd:13:f3:c4:11:c3:fa:
         24:38:23:bd:e8:f6:17:e5:06:35:4e:70:ee:67:9a:2a:df:55:
         40:47:0b:5a:3b:01:22:23:11:30:31:21:f2:51:a6:ed:2e:3d:
         fb:0d:4e:57:c3:3c:cd:93:4f:0e:81:b9:65:bb:da:a4:81:80:
         22:7f:93:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:03:12 2024 by rpki-client on console-fra.rpki-client.org