Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/441AF75E193C11EF8B2A4608017001B1.roa
File:                     441AF75E193C11EF8B2A4608017001B1.roa (raw, json)
Hash identifier:          LBmATIjlAFyVvWTju4PJRcrTlmU1BoTbZcCfdVCkOpk=
Subject key identifier:   58:14:CA:EA:1A:1B:33:45:82:1B:A8:4B:9E:CB:2D:45:B1:D1:26:A1
Certificate issuer:       /CN=F36B9F4BAF/serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
Certificate serial:       0772
Authority key identifier: 98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/441AF75E193C11EF8B2A4608017001B1.roa
Signing time:             Thu 23 May 2024 19:40:10 +0000
ROA not before:           Thu 23 May 2024 19:40:07 +0000
ROA not after:            Sun 31 Dec 2034 19:40:07 +0000
asID:                     36982
IP address blocks:        154.115.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1906 (0x772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9F4BAF/serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
        Validity
            Not Before: May 23 19:40:07 2024 GMT
            Not After : Dec 31 19:40:07 2034 GMT
        Subject: CN=664f9b9a-a3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:78:ac:65:d5:d7:45:62:53:f5:d9:f5:23:
                    18:12:09:0e:8b:3c:ad:92:29:df:c4:27:d8:83:71:
                    39:ca:6e:dd:9d:20:be:2e:dc:74:ab:2e:ca:bf:b5:
                    ae:38:02:71:42:2f:1f:70:95:ab:85:fa:ce:c3:8e:
                    7d:a4:a2:c5:46:38:d7:c0:df:b8:f2:96:52:06:19:
                    54:7b:60:46:c9:37:8e:f4:ba:ed:67:92:c3:01:21:
                    b4:d0:53:31:c0:64:3d:ec:cc:6b:fb:10:b8:ac:7b:
                    a9:ba:54:9d:c3:91:18:95:6c:c1:78:80:d7:35:2b:
                    c5:73:af:d5:2f:f2:99:e5:fc:62:74:87:28:28:b0:
                    e3:e9:c2:76:e2:80:50:0d:49:bd:8a:22:29:7e:42:
                    bf:4e:5c:e1:7b:68:aa:61:db:05:ec:b8:68:16:f8:
                    eb:94:1d:18:13:93:de:60:02:ba:c3:23:81:93:01:
                    32:4f:50:3e:d0:44:66:14:13:9f:f3:ed:54:f1:d5:
                    60:65:7b:bc:62:1e:20:c0:24:32:e7:67:2f:ff:88:
                    64:18:4f:a6:d4:67:32:cb:3e:8b:b3:0d:64:53:24:
                    61:13:34:6f:f0:6e:9c:5a:bc:2e:6f:80:e1:4a:9a:
                    a5:58:e4:5d:d3:19:19:90:51:ec:75:d3:4c:e9:5a:
                    95:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:14:CA:EA:1A:1B:33:45:82:1B:A8:4B:9E:CB:2D:45:B1:D1:26:A1
            X509v3 Authority Key Identifier:
                keyid:98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/441AF75E193C11EF8B2A4608017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.115.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:91:dd:fc:a1:cb:b2:28:61:05:6c:59:8c:32:f6:8e:59:2b:
         75:aa:24:ea:41:b7:9b:81:72:57:16:61:f7:10:39:4a:b2:cb:
         b2:0a:41:db:36:ac:45:d7:44:99:4e:ac:e7:ab:85:18:52:5f:
         36:83:7a:d4:cf:86:25:fb:87:0c:15:51:3b:88:24:93:f8:48:
         24:4b:59:7a:f3:ca:9a:bb:b0:63:8a:7e:c2:83:41:6c:77:18:
         41:53:ef:34:12:40:60:0b:64:e5:6b:4b:c4:35:01:e4:e8:00:
         32:20:3b:07:9e:15:09:ae:b3:2f:a2:b5:1e:9f:a4:e5:a6:66:
         f0:14:0e:60:98:e3:6e:23:bf:06:14:39:c5:3c:44:1b:86:da:
         74:00:3e:5f:fd:ef:b8:dc:81:f4:61:61:9e:f8:dc:50:de:35:
         c4:4e:b1:bf:f5:7d:f9:cf:db:2e:4c:a5:88:39:90:37:e0:f9:
         84:e1:5f:15:45:91:1a:e9:ba:c7:97:f9:d8:3f:29:8f:4f:00:
         7e:7c:ab:99:de:e4:cf:b2:b1:65:f8:9d:06:d8:03:11:19:50:
         3f:f3:43:f1:32:2b:83:ed:0b:8d:fa:33:b4:89:39:0a:de:f2:
         c1:76:1e:9c:cd:c7:bb:eb:91:e3:d5:91:e7:9a:24:56:19:d5:
         d7:15:7a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:14 2024 by rpki-client on console-fra.rpki-client.org