Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/DB1CF2E4CF5E11EC915C67C8F1222468.roa
File:                     DB1CF2E4CF5E11EC915C67C8F1222468.roa (raw, json)
Hash identifier:          5Aalyj0KvAvkgduGsPBpHdZbewdqAVL2gKGSiyYrFeY=
Subject key identifier:   7D:75:E6:B6:25:34:84:4A:51:7C:74:CE:D1:9C:3F:11:7F:E7:3C:39
Certificate issuer:       /CN=F369C738AF/serialNumber=01E61C3F96466A5909985476E88479BB7D4112F6
Certificate serial:       027D
Authority key identifier: 01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/DB1CF2E4CF5E11EC915C67C8F1222468.roa
Signing time:             Mon 09 May 2022 06:11:25 +0000
ROA not before:           Mon 09 May 2022 06:11:21 +0000
ROA not after:            Sun 09 May 2032 06:11:21 +0000
asID:                     15706
IP address blocks:        196.202.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Jun 2024 00:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 637 (0x27d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C738AF/serialNumber=01E61C3F96466A5909985476E88479BB7D4112F6
        Validity
            Not Before: May  9 06:11:21 2022 GMT
            Not After : May  9 06:11:21 2032 GMT
        Subject: CN=6278b08d-7980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:be:c7:0e:31:45:90:ab:83:5b:b9:f6:b8:c0:
                    57:7e:44:c1:8f:0c:7a:a9:ef:8d:ca:9c:ef:f0:af:
                    95:20:ab:d3:8d:51:c3:32:4e:bc:76:d5:7a:84:01:
                    d0:c9:30:af:a6:25:35:8d:f9:87:a3:3f:f1:5f:18:
                    a9:72:a7:db:c9:3f:1e:19:16:58:3f:b4:3e:52:46:
                    66:aa:f5:48:8b:d5:9a:0a:f9:48:ad:ab:55:e3:d2:
                    ed:86:2d:22:a4:25:18:cf:a8:3f:ac:94:b8:6a:d1:
                    0c:23:ca:d1:7c:0e:f5:71:e4:b0:ed:29:cf:41:c7:
                    9c:1c:5f:a6:a6:bc:9f:dd:94:fb:fe:4b:ef:da:fb:
                    57:1f:1f:92:55:22:1b:2c:b7:71:11:05:75:a6:0c:
                    8b:da:f6:50:57:a8:02:cb:b8:91:84:80:60:0f:df:
                    12:17:16:eb:66:a1:6e:fc:fe:47:ea:81:36:93:e7:
                    4d:68:b4:ee:cb:d6:57:3f:a4:80:77:6b:53:9e:1a:
                    f9:7c:0e:d7:96:00:40:8a:80:27:f0:f2:a2:09:c3:
                    42:82:b9:24:b3:d2:37:32:42:d6:1b:66:c2:52:6a:
                    37:fa:e4:ef:c7:98:51:3e:62:04:ee:37:ad:a8:78:
                    97:24:82:57:b6:71:db:e2:b7:97:8c:e8:37:9f:0a:
                    d5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:75:E6:B6:25:34:84:4A:51:7C:74:CE:D1:9C:3F:11:7F:E7:3C:39
            X509v3 Authority Key Identifier:
                keyid:01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/DB1CF2E4CF5E11EC915C67C8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.202.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ae:b0:ba:3c:83:b5:84:6f:3f:8c:3f:b4:a6:e8:8d:01:00:d7:
         98:60:87:a3:f7:94:f1:06:73:3d:63:d4:af:ad:9c:a3:af:0f:
         e3:f1:cf:b6:b4:a1:d1:7e:2f:5c:f1:55:5b:cf:93:ee:fa:ff:
         40:18:5b:35:9a:98:3d:d2:86:dc:d0:b4:88:36:88:5a:e3:6f:
         67:a4:7d:b9:ed:f6:33:96:87:ce:5f:13:32:b7:a6:66:68:ec:
         4c:9b:67:8c:d3:34:80:c0:ff:3f:ca:b2:e2:25:a5:10:43:14:
         33:a8:45:31:bf:6f:db:33:ac:4d:a9:2e:f0:39:23:22:65:01:
         bd:5c:c3:23:a7:15:ee:fe:a6:4a:0d:45:8f:07:c9:f3:4b:da:
         04:92:e4:9c:83:ce:75:3b:83:27:e3:6c:7a:ce:a3:17:1c:fb:
         ed:5d:ab:67:bc:33:59:14:1e:a0:2e:1e:db:19:8d:5e:5c:41:
         53:a1:ed:fd:45:67:f0:25:38:3c:b6:49:72:7a:80:44:b8:7c:
         13:9b:bb:e1:ec:4e:08:a8:04:cf:a6:0c:7f:43:ef:2d:c2:a6:
         da:13:70:e8:c2:51:d1:b8:44:08:a4:8c:45:96:b8:f5:67:54:
         8d:32:40:74:69:b1:9c:89:dd:84:9b:52:08:37:f3:c7:a0:49:
         ab:d4:f0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:45:53 2024 by rpki-client on console-fra.rpki-client.org