Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/32837C9003B711EF967A4F2C017001B1.roa
File:                     32837C9003B711EF967A4F2C017001B1.roa (raw, json)
Hash identifier:          +5CLxbGwXT60ubQqq8bM1C2hWckotvUlGwQf+a7WrQo=
Subject key identifier:   49:99:79:E4:69:83:FC:72:B5:FB:53:94:D4:50:AA:81:CA:A7:88:8E
Certificate issuer:       /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial:       01ED
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/32837C9003B711EF967A4F2C017001B1.roa
Signing time:             Fri 26 Apr 2024 10:24:44 +0000
ROA not before:           Fri 26 Apr 2024 10:24:40 +0000
ROA not after:            Thu 30 Apr 2043 10:24:40 +0000
asID:                     30988
IP address blocks:        41.73.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 May 2024 00:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
        Validity
            Not Before: Apr 26 10:24:40 2024 GMT
            Not After : Apr 30 10:24:40 2043 GMT
        Subject: CN=662b80eb-e4c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:89:4e:82:86:22:6b:89:63:08:dc:c2:98:fa:
                    e4:2d:ad:54:df:fe:40:8d:2f:df:85:52:5a:2c:ec:
                    23:d1:90:71:33:e2:6e:0c:f9:c6:20:05:1d:08:48:
                    18:c6:5b:3f:fd:8a:e2:75:8b:2a:27:7d:f5:e0:18:
                    d2:8f:73:bd:a1:c8:e5:86:bb:6a:33:db:be:e5:ab:
                    1d:65:2d:bf:28:59:40:02:dc:50:ae:96:fe:19:6a:
                    91:f9:bb:35:3d:69:0d:02:18:78:59:ce:b7:66:67:
                    ad:6b:91:91:44:04:7f:e6:f2:a7:52:69:21:ad:74:
                    23:d3:b3:20:16:8e:ef:71:ff:17:d9:f7:57:01:08:
                    13:83:5d:d8:28:18:be:40:3b:88:d5:ad:c1:ca:e0:
                    81:eb:32:a6:cf:43:99:12:6b:e8:a2:04:9a:bc:78:
                    09:be:72:75:b4:6e:d2:6a:f1:f5:bf:dd:5e:61:11:
                    84:dc:69:74:80:13:2f:d5:97:83:a7:2a:ad:df:77:
                    b4:29:80:cb:b9:cc:dd:3c:5e:db:26:d5:6f:63:3b:
                    ca:a2:22:2d:1c:98:a9:de:79:4e:7c:b9:ae:51:65:
                    26:33:d0:c1:fd:85:41:4f:ab:e9:5f:86:3e:2b:f3:
                    36:b9:6a:ee:c2:43:31:fd:2b:bb:2c:62:ea:13:9a:
                    49:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:99:79:E4:69:83:FC:72:B5:FB:53:94:D4:50:AA:81:CA:A7:88:8E
            X509v3 Authority Key Identifier:
                keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/32837C9003B711EF967A4F2C017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.73.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:5b:43:8b:08:03:a1:f8:cb:ee:14:f0:a1:38:ae:65:77:00:
         a1:15:83:16:a9:30:49:1f:15:94:65:e1:bd:38:e0:2a:93:58:
         06:b7:b8:9b:01:ee:ce:4b:90:d0:5b:9c:ce:20:c9:be:bc:05:
         e3:ad:3a:93:76:60:8a:77:70:84:da:40:a0:64:51:b6:46:53:
         c4:14:ff:80:21:79:1d:eb:78:1f:8d:e1:95:df:f0:78:07:bd:
         21:62:39:ca:18:7a:d3:d2:2c:57:50:65:6c:97:70:cd:2e:88:
         30:ee:1c:28:a9:1c:e5:8f:51:2e:4a:1f:b4:03:ce:26:d2:6a:
         78:ba:48:9d:c7:c2:02:58:ac:0d:10:7c:f9:fd:97:7d:7f:9d:
         1a:6e:f9:e1:ed:c8:72:00:a7:a1:d0:ae:91:e7:29:81:a1:08:
         8e:95:ee:68:66:a9:94:4e:9f:62:3b:94:56:4c:eb:be:67:cd:
         09:f6:9a:76:9a:28:db:e7:98:d2:c1:74:1c:27:e3:2f:76:f9:
         bc:37:0d:89:29:87:fd:77:06:81:68:f7:a6:b5:8b:50:2e:c3:
         e3:f0:db:59:24:16:c9:6f:af:be:38:d3:21:30:22:1d:a0:40:
         b9:2d:84:a1:1b:e9:2a:38:83:71:ab:0b:18:c8:1e:13:da:e9:
         72:e6:07:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 03:39:22 2024 by rpki-client on console-ams.rpki-client.org