Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/67ECDE3803B911EFA186603D017001B1.roa
File:                     67ECDE3803B911EFA186603D017001B1.roa (raw, json)
Hash identifier:          DI5kIwElQ8R+Lw20LT5yGvsY0m7hji0peiEWAehYwT8=
Subject key identifier:   AD:BA:D0:D3:EB:10:AB:67:6E:E7:0B:66:F7:15:A1:24:28:7D:D7:9C
Certificate issuer:       /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial:       0207
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/67ECDE3803B911EFA186603D017001B1.roa
Signing time:             Fri 26 Apr 2024 10:40:32 +0000
ROA not before:           Fri 26 Apr 2024 10:40:28 +0000
ROA not after:            Thu 30 Apr 2043 10:40:28 +0000
asID:                     30988
IP address blocks:        41.73.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 May 2024 00:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
        Validity
            Not Before: Apr 26 10:40:28 2024 GMT
            Not After : Apr 30 10:40:28 2043 GMT
        Subject: CN=662b84a0-7cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fd:cb:7e:06:ee:b2:02:b7:11:32:cc:9b:03:
                    91:17:6a:5d:18:5c:bb:e5:07:bc:d1:e5:ea:71:63:
                    a0:e4:ab:3e:03:2b:44:80:11:a4:de:85:b8:ee:46:
                    16:95:fd:ed:e1:7f:f3:28:cd:43:a2:a4:71:86:2a:
                    ce:21:d6:52:5c:92:d5:89:3c:0b:76:14:0c:21:6a:
                    4a:bd:43:e8:5f:2c:47:fe:36:ca:ca:74:67:69:ab:
                    ae:c0:1c:25:12:6a:81:f8:17:ab:4e:3d:eb:55:ff:
                    e5:89:a6:4f:12:df:77:25:ff:7c:ca:76:12:86:10:
                    6e:fd:a5:c5:f9:8e:25:66:4a:b9:e0:00:e2:5f:1c:
                    62:dc:d8:78:a0:e7:b4:ae:17:93:02:a2:20:5d:d3:
                    58:0d:2e:3d:06:31:3d:9e:9f:66:d3:15:80:3e:5c:
                    4e:f7:b1:c9:9b:c3:ae:cb:8d:33:e5:e3:e7:38:27:
                    28:eb:1b:e2:30:e3:51:7d:a3:63:d3:78:89:da:37:
                    e5:d6:6d:21:ff:1a:57:8f:69:c7:ed:03:f5:a1:85:
                    de:2c:6c:9a:67:9a:d9:23:a1:77:03:4a:f4:06:69:
                    99:82:05:d6:96:fa:fe:47:0b:2a:32:7f:55:21:22:
                    77:a4:9b:0c:91:e2:73:30:b8:c0:86:25:c3:bb:29:
                    95:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BA:D0:D3:EB:10:AB:67:6E:E7:0B:66:F7:15:A1:24:28:7D:D7:9C
            X509v3 Authority Key Identifier:
                keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/67ECDE3803B911EFA186603D017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.73.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:f7:8c:3d:e9:44:4e:67:5c:54:81:66:76:31:41:b4:77:80:
         1d:ca:be:c3:38:82:b3:66:d8:e5:45:f8:22:20:92:d4:98:88:
         1d:83:01:1d:f5:89:fb:48:42:a3:40:0c:58:4b:de:25:26:6e:
         e4:22:41:73:40:13:6e:e5:d6:02:fa:5c:77:9a:c3:1a:07:f8:
         b2:64:e2:b6:2c:42:7f:2f:a1:c1:ba:f6:e0:b4:cc:9b:bf:38:
         27:b1:cb:69:6f:9e:41:c5:ba:56:db:59:02:e7:8f:6d:7b:d9:
         61:cd:f9:f3:0d:54:41:6d:4e:88:64:d3:c3:ee:28:0f:07:da:
         0f:fc:33:2e:8e:ba:aa:4e:52:46:54:81:ee:70:05:33:67:72:
         02:15:99:34:45:c3:9a:fb:1d:fe:ac:93:c7:86:8c:34:91:d1:
         0e:9b:f0:80:d4:9f:cc:c2:80:c4:63:d3:06:b3:9c:6b:89:48:
         6f:cd:eb:11:4f:10:66:b5:b3:90:23:f7:ef:3d:b2:fa:dc:f9:
         0b:cf:2e:83:81:65:01:ef:57:f0:dc:49:52:16:16:69:e8:a3:
         8c:1b:de:59:1b:d7:d7:8e:32:a1:16:6d:c8:6f:70:df:e9:3d:
         4a:b7:01:c3:de:a8:0c:05:32:c8:18:1b:6b:b6:95:50:f1:b9:
         57:0f:eb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:53:20 2024 by rpki-client on console-fra.rpki-client.org