Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/494629A869C611EFAB29428D762E951A.roa
File:                     494629A869C611EFAB29428D762E951A.roa (raw, json)
Hash identifier:          eeCnZNp5+DXjWbE73Xzf+vc1c6ITE8Mpg+2iFFIZRf0=
Subject key identifier:   4A:02:55:6E:DA:81:1E:70:0D:5C:3E:3F:1E:C6:EF:19:93:54:A8:11
Certificate issuer:       /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial:       021A
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/494629A869C611EFAB29428D762E951A.roa
Signing time:             Tue 03 Sep 2024 07:29:43 +0000
ROA not before:           Tue 03 Sep 2024 07:29:39 +0000
ROA not after:            Mon 03 Sep 2035 07:29:39 +0000
asID:                     37105
IP address blocks:        41.56.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
        Validity
            Not Before: Sep  3 07:29:39 2024 GMT
            Not After : Sep  3 07:29:39 2035 GMT
        Subject: CN=66d6bae6-a46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:23:37:5f:90:66:75:23:7b:da:72:5e:7c:b6:
                    a0:fd:db:7c:3d:bb:65:f3:17:37:ed:56:98:ec:c8:
                    5e:25:cb:15:1e:66:80:4d:a4:d2:d9:84:82:6c:1e:
                    53:01:8d:7b:dd:5c:a0:21:12:6b:85:15:cc:f9:a5:
                    a5:15:14:2a:ce:ac:87:0a:78:81:0c:1b:dc:cb:3f:
                    45:25:fd:eb:06:8d:57:29:4b:79:e5:ed:d8:f9:82:
                    e0:2f:67:8d:33:3b:84:5a:d1:cf:bc:7a:e2:d7:76:
                    99:95:10:79:db:40:65:5d:fc:e3:37:23:f4:7c:e9:
                    b9:c7:d9:b2:50:b1:5d:8b:f0:5a:ae:f2:61:63:84:
                    a9:29:3d:ba:a1:b7:00:93:ef:39:45:f6:70:c8:5c:
                    44:70:73:c2:03:61:c4:68:51:89:95:8b:09:e5:93:
                    6a:80:0f:15:f5:df:72:35:0c:e1:82:ca:f5:a8:b5:
                    94:7a:50:56:7a:d2:d9:d5:7b:1e:64:2b:0c:5a:86:
                    de:af:1b:5a:a9:40:bf:6b:a3:99:51:bf:72:bd:74:
                    01:32:36:5d:cd:af:a1:9a:eb:ba:5b:a9:3c:7c:0b:
                    58:a1:51:0b:38:ca:87:68:c1:b3:ef:a0:c9:c3:89:
                    f3:fd:6f:02:9a:a7:9f:a4:8f:d0:57:39:83:03:4c:
                    0d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:02:55:6E:DA:81:1E:70:0D:5C:3E:3F:1E:C6:EF:19:93:54:A8:11
            X509v3 Authority Key Identifier:
                keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/494629A869C611EFAB29428D762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.56.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         58:7e:92:bd:ae:dd:36:db:ef:46:af:50:d8:b8:cf:49:74:6e:
         0d:09:f0:ca:7c:4c:79:02:d1:10:6f:f2:58:a3:0a:ef:91:ce:
         24:0b:0a:3e:fc:b0:5d:31:93:39:79:79:6c:ec:b0:6a:3f:ad:
         31:a3:f9:1e:a2:88:bb:82:c8:df:a6:24:c3:80:b4:34:70:c6:
         b9:45:6e:ba:80:26:c3:ef:6a:1a:a5:31:52:55:88:a2:ff:99:
         fa:68:32:26:b8:e6:d8:fe:e5:af:10:3c:23:80:2c:7f:17:6c:
         4b:43:11:e6:2b:0a:cd:bd:87:83:dc:b3:16:f4:b6:be:ce:3d:
         7b:c6:df:46:be:d7:7a:f8:05:97:51:43:05:11:03:e6:87:48:
         3e:16:8d:55:d4:90:76:bf:85:eb:dc:e5:49:72:d4:d8:04:d5:
         fa:2b:e5:a3:20:fe:72:be:5f:cd:61:89:f2:6f:bb:fd:58:2a:
         2c:cc:ed:6c:91:45:57:15:b3:8f:1f:8a:88:2f:08:58:66:cc:
         37:39:b6:27:8e:55:b1:b4:c9:d2:70:43:3e:50:ab:32:19:36:
         f9:ca:87:04:21:af:6b:4a:76:bb:09:39:63:78:23:f0:3a:bd:
         b7:9d:36:da:9a:8d:69:5c:9a:7b:f0:e6:6b:fb:4b:32:f4:f0:
         a7:04:b1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:22 2024 by rpki-client on console-ams.rpki-client.org