Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/AB485D40BB1011EC8593AFC75A40D577.roa
File:                     AB485D40BB1011EC8593AFC75A40D577.roa (raw, json)
Hash identifier:          oaACRYJ/pF9OJAPz1+dSFwiOIu+zR3+hzGtxNETwOrM=
Subject key identifier:   C6:03:EA:C6:15:ED:E0:70:4A:3B:F8:B7:58:10:35:68:03:F5:23:3A
Certificate issuer:       /CN=F369F2FAAF/serialNumber=9478315A1E5C5615A9228BBECA48A396870B847E
Certificate serial:       0C
Authority key identifier: 94:78:31:5A:1E:5C:56:15:A9:22:8B:BE:CA:48:A3:96:87:0B:84:7E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/AB485D40BB1011EC8593AFC75A40D577.roa
Signing time:             Wed 13 Apr 2022 10:01:21 +0000
ROA not before:           Wed 13 Apr 2022 10:01:17 +0000
ROA not after:            Tue 13 Apr 2027 10:01:17 +0000
asID:                     51265
IP address blocks:        197.211.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F2FAAF/serialNumber=9478315A1E5C5615A9228BBECA48A396870B847E
        Validity
            Not Before: Apr 13 10:01:17 2022 GMT
            Not After : Apr 13 10:01:17 2027 GMT
        Subject: CN=62569f71-0bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:64:7a:c2:ce:83:03:0d:3e:06:a7:01:aa:9a:
                    02:ef:4e:75:f0:99:18:16:17:a8:d7:b5:47:71:b5:
                    9f:02:82:6f:78:68:e4:02:66:b4:68:1a:fe:ab:d6:
                    92:fa:e4:c2:f7:94:84:95:da:ef:22:3c:f7:9b:ca:
                    0b:4e:b0:bc:ba:53:bf:f6:94:2d:a0:91:34:0a:fb:
                    a9:b6:55:42:01:19:18:d0:3a:48:14:79:9c:2b:15:
                    34:fa:dd:5d:ab:45:aa:98:58:27:2c:9c:42:fe:dc:
                    a3:97:a7:c4:0d:c4:28:c2:c0:b5:ad:08:7f:c6:b4:
                    23:98:31:00:a3:a9:8c:54:92:66:d7:8e:1b:9a:2d:
                    cd:4e:4d:e7:85:0c:64:1f:ad:24:39:85:a9:3d:09:
                    d2:63:fc:d1:04:c4:53:e8:94:dd:5b:c4:e9:28:91:
                    ef:93:68:8f:0d:25:6c:fa:02:20:fc:78:b4:31:b5:
                    ea:ad:b2:55:a6:ac:0b:62:d9:93:46:59:4b:aa:9f:
                    30:9b:87:9b:7e:d7:54:5c:af:33:80:98:bc:26:84:
                    dc:dd:5f:ea:42:aa:0f:d2:92:ea:9e:97:e2:9f:94:
                    68:25:ca:9f:ac:56:79:b8:76:d4:74:20:84:b0:34:
                    91:cd:c3:b3:f0:ac:aa:8a:cb:0c:18:ec:3c:0d:d0:
                    36:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:03:EA:C6:15:ED:E0:70:4A:3B:F8:B7:58:10:35:68:03:F5:23:3A
            X509v3 Authority Key Identifier:
                keyid:94:78:31:5A:1E:5C:56:15:A9:22:8B:BE:CA:48:A3:96:87:0B:84:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/AB485D40BB1011EC8593AFC75A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.211.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         35:ef:4d:e3:d9:2c:c6:b8:3a:ff:9e:b1:d7:ac:54:ad:5d:2c:
         99:d0:3e:c0:57:68:b5:1a:e8:90:d2:77:45:70:50:15:35:33:
         24:25:1b:03:7d:99:56:0e:19:20:54:d8:64:2a:59:32:81:e8:
         92:e8:a6:c9:1e:62:2d:b4:ae:07:ae:16:21:7c:28:8f:f6:6f:
         8a:ee:ab:b3:2e:5b:ab:3f:0d:16:7a:ca:5f:e7:cf:2f:06:62:
         86:76:4e:60:30:9e:7b:4e:70:bb:16:7b:47:f8:1f:2d:83:1d:
         47:ed:a9:ca:b0:c6:4b:59:02:42:88:c2:a0:e0:04:49:73:d5:
         04:4b:54:a7:25:80:c1:1f:a2:a2:e2:f8:25:31:f0:4e:5c:37:
         91:7c:d4:b3:2d:86:a5:81:3d:41:ff:67:95:6a:6e:54:65:92:
         13:2f:2f:6c:58:42:b0:e1:73:c8:24:ee:68:29:1e:32:82:93:
         75:ad:3c:6c:87:00:35:49:b3:07:58:82:af:de:dd:98:de:44:
         33:ff:cc:18:1d:0a:d7:b5:94:77:2c:a5:bd:79:4d:16:91:04:
         6c:aa:5a:05:65:94:a9:ae:13:e8:ee:db:ce:42:f4:f1:fb:1d:
         02:3f:18:f7:50:57:65:9b:68:d6:9f:15:75:93:5a:06:04:08:
         0e:3e:c4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:59 2024 by rpki-client on console-ams.rpki-client.org