Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/62B232922F0711EE93F9C86C4AD9E6FC.roa
File:                     62B232922F0711EE93F9C86C4AD9E6FC.roa (raw, json)
Hash identifier:          QH7JLReMaSMBkY3xDDzBeDk8T5+KJ+WJ64rNvFi2u30=
Subject key identifier:   04:FC:F8:2A:6F:21:D1:DC:54:A0:D7:2D:1E:1A:BA:26:69:14:D4:69
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       04F4
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/62B232922F0711EE93F9C86C4AD9E6FC.roa
Signing time:             Sun 30 Jul 2023 18:32:06 +0000
ROA not before:           Sun 30 Jul 2023 18:32:02 +0000
ROA not after:            Sat 30 Jul 2033 18:32:02 +0000
asID:                     37119
IP address blocks:        105.169.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1268 (0x4f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 30 18:32:02 2023 GMT
            Not After : Jul 30 18:32:02 2033 GMT
        Subject: CN=64c6aca6-2c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d0:68:c8:7f:07:08:28:6b:79:17:e2:38:e1:
                    39:4c:91:bc:5e:f0:21:81:2f:e7:ad:27:2c:3f:5a:
                    09:01:88:6c:c1:e3:25:76:20:15:24:bd:8b:e4:0a:
                    84:1c:44:38:08:8d:52:44:b0:b2:4d:a7:88:8b:aa:
                    c4:b6:84:46:ad:ea:46:3c:ad:04:2c:32:01:2b:9a:
                    a4:2f:f4:e0:c3:d1:61:5a:2e:b8:29:b0:18:b0:58:
                    ba:47:d5:c2:3e:75:34:05:e4:da:ba:46:95:f7:b0:
                    c8:0f:f5:61:c6:c8:21:49:41:6c:4a:90:73:fb:7f:
                    17:b5:f4:fc:e1:a6:b7:a4:a1:db:a3:35:76:e2:92:
                    2e:ad:a4:c0:32:d8:21:00:61:fe:16:b2:71:51:71:
                    64:e3:ff:2f:f0:e9:bd:30:ac:54:eb:77:88:50:80:
                    23:e4:9b:0d:a6:87:9a:f7:56:0e:ea:d7:30:12:e6:
                    a8:98:ed:33:3f:69:16:b9:dc:0f:37:f1:55:5e:6b:
                    ff:a1:86:59:17:9d:c6:57:c3:7f:ff:d6:0e:ce:0e:
                    19:38:7d:a4:19:2c:56:51:38:9b:96:1d:2d:ce:55:
                    a0:75:57:b7:9d:38:f8:f5:81:e6:2d:d9:99:66:af:
                    e5:41:69:1c:60:70:61:61:5b:81:ed:6e:e2:76:ec:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FC:F8:2A:6F:21:D1:DC:54:A0:D7:2D:1E:1A:BA:26:69:14:D4:69
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/62B232922F0711EE93F9C86C4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.169.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b6:4f:dc:ae:9a:b4:77:4f:7d:2d:e9:cd:92:96:9d:5b:53:9d:
         4f:a2:62:cc:24:6b:60:2b:55:49:72:ac:d0:65:90:12:af:78:
         09:f7:60:e6:90:6e:de:80:f2:aa:d6:69:63:52:72:71:88:18:
         d1:f1:18:5f:7e:05:75:cd:f9:0f:78:f2:4e:ba:0e:fa:15:ac:
         a8:46:12:15:da:34:b0:87:ad:29:8a:e0:e3:e2:9b:9a:14:8a:
         d3:aa:d3:6c:b7:86:3d:68:61:6d:77:d3:28:27:72:84:ff:50:
         ae:f1:e0:b4:fe:fb:bc:a5:c5:6d:41:15:7d:df:cc:1e:3f:c2:
         17:c9:7a:59:93:31:0e:26:f6:1e:5b:28:e3:9b:6c:cf:de:9b:
         84:74:d2:19:8b:ab:56:d2:5d:23:5f:32:36:65:04:41:af:1f:
         d5:f9:d6:cf:e2:fb:f8:a0:5b:c4:c3:0c:7b:8c:4c:5e:ea:59:
         50:a8:d8:19:ad:5a:61:f7:96:59:61:5e:01:e3:3d:10:af:53:
         9a:a2:b1:01:52:39:32:e5:66:3d:9f:e6:ad:86:f6:58:8c:8a:
         f6:30:ba:9e:f3:d6:a6:54:1c:ec:2e:87:27:9a:3e:0b:13:1b:
         4c:a4:88:ba:c8:da:78:c0:c9:0a:28:1a:41:08:0f:11:8c:77:
         a0:e7:1b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:18 2024 by rpki-client on console-fra.rpki-client.org