Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/154B9022336511EE93E2CA3B4AD9E6FC.roa
File:                     154B9022336511EE93E2CA3B4AD9E6FC.roa (raw, json)
Hash identifier:          g5gHhEUnCh1OVyy0GnE3SQ97JE8wS38lb2nW3HkIlpo=
Subject key identifier:   A3:FD:0D:3D:09:78:A5:46:57:64:BF:A9:23:36:F8:40:65:04:E9:6B
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       0519
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/154B9022336511EE93E2CA3B4AD9E6FC.roa
Signing time:             Sat 05 Aug 2023 07:52:54 +0000
ROA not before:           Sat 05 Aug 2023 07:52:50 +0000
ROA not after:            Sat 30 Jul 2033 07:52:50 +0000
asID:                     37119
IP address blocks:        105.173.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1305 (0x519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Aug  5 07:52:50 2023 GMT
            Not After : Jul 30 07:52:50 2033 GMT
        Subject: CN=64cdffd6-a6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:e7:f2:d3:de:93:08:7f:d2:53:ba:bb:0b:
                    ae:cb:71:34:94:2e:a6:85:30:4a:e9:16:18:e6:5f:
                    98:61:a5:22:1d:e5:66:8e:a5:be:8f:2a:75:23:b5:
                    12:17:b4:14:8b:2d:7b:3f:16:9c:8f:3e:7c:9e:b0:
                    02:7c:cd:e7:a1:6e:c4:1a:22:3f:09:7f:44:61:c8:
                    65:e4:67:df:06:d8:c9:15:23:b1:7d:ab:62:e3:2b:
                    99:7c:e2:96:9c:d2:ce:fb:0e:a6:b3:33:75:fe:19:
                    95:ac:59:77:39:31:7e:7d:13:3d:2f:8e:85:75:f1:
                    1d:c4:3d:54:4c:60:71:b6:cd:ec:c7:d2:ef:cf:8a:
                    91:35:c6:68:35:21:eb:33:cd:2b:13:3f:99:33:2c:
                    42:6c:50:f9:ff:ae:8d:07:53:ed:6e:10:04:7f:48:
                    eb:d5:46:35:35:a7:99:fc:28:f2:3e:42:ef:c3:ee:
                    df:3a:5a:20:79:20:35:75:1c:ad:dc:31:dd:9f:30:
                    89:74:bc:64:33:75:03:78:50:d1:fc:f4:5f:4e:e1:
                    a0:d0:f1:bd:d5:a5:7a:a1:fa:57:5d:33:1d:4c:bb:
                    fb:c7:db:53:13:a5:29:19:b2:99:29:d6:a3:cf:75:
                    90:fd:ca:27:22:7e:c9:75:1a:25:90:6e:17:53:b3:
                    e1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FD:0D:3D:09:78:A5:46:57:64:BF:A9:23:36:F8:40:65:04:E9:6B
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/154B9022336511EE93E2CA3B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.173.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:ef:6a:f6:b7:02:08:84:85:bf:16:11:e9:c7:fb:69:20:19:
         44:3b:9f:1d:c5:98:50:10:02:54:fc:ba:8f:0f:94:56:08:d5:
         36:66:1e:ec:f3:34:05:97:97:84:6e:e0:87:74:6e:5f:f1:4e:
         ef:53:04:02:fa:75:32:75:85:62:ea:a1:28:88:41:9c:3d:52:
         f8:58:19:7a:6d:4a:a4:84:e9:76:a6:54:19:42:6f:0a:ee:d0:
         4e:15:09:eb:99:23:50:f2:85:31:07:c6:aa:72:3e:89:bd:88:
         03:90:0b:a3:1c:d4:49:ac:3b:58:21:a0:dc:80:4f:de:ec:ec:
         7b:38:5d:96:7d:61:c8:cc:a4:86:da:f4:9d:67:df:a0:df:90:
         73:13:9f:a8:2b:fd:5f:21:62:a1:ac:54:15:67:d0:55:2c:6b:
         bc:da:8a:fb:71:08:6b:3a:04:3a:38:9a:3f:f3:02:b8:85:ba:
         63:27:82:26:de:8c:b6:e8:1e:73:5a:23:81:cf:af:38:ac:ce:
         68:e2:b6:60:0c:fc:4b:12:fa:0c:af:e5:72:f8:16:d8:94:8f:
         55:4f:c4:78:cc:28:0b:0a:d4:10:e4:5b:24:79:5e:99:01:d2:
         c2:bb:26:3f:05:6e:bd:64:d5:ae:49:74:40:15:61:dc:50:0c:
         8d:67:0b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:27 2024 by rpki-client on console-ams.rpki-client.org