Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/0391042A007911EFAE93753B017001B1.roa
File:                     0391042A007911EFAE93753B017001B1.roa (raw, json)
Hash identifier:          ROy7IXIOSH9P9duj13zOuIMfsAHkd1TqIfObC5Gq/2c=
Subject key identifier:   C5:63:F2:B8:89:BF:6F:2F:2B:3F:A4:11:43:05:A3:5E:B5:5F:CE:B1
Certificate issuer:       /CN=F36C10D8AF/serialNumber=C0D3AAFB63D33F0F6735DC99FF4D901A8E2250EB
Certificate serial:       01D0
Authority key identifier: C0:D3:AA:FB:63:D3:3F:0F:67:35:DC:99:FF:4D:90:1A:8E:22:50:EB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/0391042A007911EFAE93753B017001B1.roa
Signing time:             Mon 22 Apr 2024 07:22:02 +0000
ROA not before:           Mon 22 Apr 2024 07:21:59 +0000
ROA not after:            Sat 22 Apr 2034 07:21:59 +0000
asID:                     198394
IP address blocks:        197.148.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C10D8AF/serialNumber=C0D3AAFB63D33F0F6735DC99FF4D901A8E2250EB
        Validity
            Not Before: Apr 22 07:21:59 2024 GMT
            Not After : Apr 22 07:21:59 2034 GMT
        Subject: CN=6626101a-aa50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:16:d2:d4:2b:15:e0:16:c7:78:0c:85:0c:a6:
                    53:47:28:4a:b2:9e:a1:dd:c0:10:29:37:9d:2b:3e:
                    62:56:46:be:e1:14:13:04:a5:80:ea:c2:3c:b9:5b:
                    27:86:fa:1f:58:8c:86:10:69:6c:fb:a6:01:32:e7:
                    30:b9:f6:e8:8e:cf:9e:57:ba:bd:8e:d2:6d:31:35:
                    26:4e:41:63:e1:03:d2:4c:56:08:34:1b:75:90:6c:
                    36:93:cd:17:7c:4d:1f:09:5c:be:63:84:d8:c0:e1:
                    08:67:b4:3e:b0:93:19:fd:dc:bd:ce:b0:4a:a0:5e:
                    93:c9:36:b8:7f:30:53:1d:43:5b:d6:70:fd:8a:27:
                    cf:fc:a4:45:40:22:aa:09:96:99:81:85:5a:cf:49:
                    dd:16:a9:de:4d:00:9d:6b:54:8f:44:92:56:ce:f6:
                    07:73:78:ef:7c:38:af:e7:f5:e8:aa:c3:23:c5:08:
                    6d:78:a1:36:09:39:bb:1b:94:4f:de:1b:71:d3:78:
                    52:47:77:82:e0:5d:11:ee:6f:42:04:0e:17:5b:a0:
                    eb:c7:0a:01:c9:8d:e7:5b:35:14:52:d6:92:3e:f8:
                    69:30:6f:0e:e0:16:3c:4d:c9:50:4b:e3:dc:bf:79:
                    ca:61:32:03:32:d5:8b:bf:c8:5b:c2:76:6c:f9:c8:
                    5f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:63:F2:B8:89:BF:6F:2F:2B:3F:A4:11:43:05:A3:5E:B5:5F:CE:B1
            X509v3 Authority Key Identifier:
                keyid:C0:D3:AA:FB:63:D3:3F:0F:67:35:DC:99:FF:4D:90:1A:8E:22:50:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/0391042A007911EFAE93753B017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.148.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:bc:23:81:e5:de:49:df:2e:f5:7d:8a:eb:ee:ef:dd:7a:3a:
         d6:ed:22:37:2c:42:2f:1f:8f:cb:ec:fb:9e:9a:09:ad:a3:85:
         c9:25:76:a9:c2:fb:10:89:42:d9:4d:8d:e9:9c:fb:c4:e4:b1:
         d8:83:ce:ed:15:ce:63:7d:fa:47:9d:44:df:23:00:2f:04:a6:
         7d:30:23:68:44:b3:7b:fc:3e:3d:fa:9c:80:c3:69:88:e6:9f:
         ee:9d:35:ed:a5:7f:30:73:9a:36:ad:21:3d:2e:0a:e8:2a:1b:
         3f:a0:d6:d9:12:b5:33:ea:df:ae:19:bf:3d:b2:c7:a9:ae:6e:
         81:e7:dc:15:ad:71:5f:a4:00:9e:1f:b8:3a:0e:9a:a6:81:aa:
         32:6f:73:98:a0:24:2f:f9:f1:43:43:be:aa:5e:cf:5a:14:ff:
         f0:90:6f:57:91:96:06:9d:59:74:19:c7:9d:45:58:bc:b5:eb:
         bd:79:6a:72:3d:51:6e:e6:ca:f4:e6:5a:0a:10:50:5a:ea:50:
         c2:fc:36:b9:f3:c2:14:da:2c:36:e9:f3:b2:a0:c1:e9:b6:13:
         ca:bd:f4:b1:4f:77:07:9a:13:ca:9a:32:1a:91:50:c9:74:0f:
         cb:2d:a1:4b:93:dd:c3:36:ab:a2:88:37:bf:0d:75:ce:cd:66:
         c2:0d:ec:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:59:01 2024 by rpki-client on console-ams.rpki-client.org