Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/7715AC7C2E4F11EE8D46AA3D4AD9E6FC.roa
File:                     7715AC7C2E4F11EE8D46AA3D4AD9E6FC.roa (raw, json)
Hash identifier:          7H4Ze4JGTi9EpL+J1/hyQZm+EC7ZIXM71D25hra7PZE=
Subject key identifier:   F2:CA:CA:93:13:20:03:65:93:F3:6D:B8:8D:83:21:C3:80:1D:0C:E8
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       04B9
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/7715AC7C2E4F11EE8D46AA3D4AD9E6FC.roa
Signing time:             Sat 29 Jul 2023 20:35:33 +0000
ROA not before:           Sat 29 Jul 2023 20:35:29 +0000
ROA not after:            Sat 30 Jul 2033 20:35:29 +0000
asID:                     37119
IP address blocks:        41.78.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1209 (0x4b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 29 20:35:29 2023 GMT
            Not After : Jul 30 20:35:29 2033 GMT
        Subject: CN=64c57815-cfd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fb:95:91:b4:cb:3e:9e:23:48:99:17:94:b1:
                    65:b0:67:4a:a4:ab:0d:8c:29:90:8d:b8:e1:22:01:
                    1f:b3:a0:33:bc:7e:50:c4:c2:0c:51:21:7e:b1:a2:
                    26:5a:41:7e:ba:b0:65:06:bf:b7:dc:7e:26:26:d8:
                    45:5f:c2:db:c2:db:75:00:3e:fc:91:6f:6d:33:5f:
                    53:58:dd:73:7e:9a:01:99:66:8e:cc:a9:ed:71:2b:
                    ac:6f:47:31:17:aa:99:03:5b:61:98:70:d9:ec:79:
                    72:49:db:5d:c3:5e:97:ea:96:e6:a1:c3:35:48:ff:
                    3b:d4:db:e5:06:70:35:f3:c4:c3:4e:05:c1:17:fc:
                    2d:f8:96:e1:ad:eb:74:9b:01:70:49:a3:e3:1e:76:
                    fb:9c:83:de:d2:20:9f:af:bc:da:bf:6a:a1:b3:54:
                    5b:16:4e:17:74:08:e6:d9:c4:70:0c:37:12:c2:af:
                    7f:6d:63:14:b3:c4:ac:86:32:8b:3a:8f:a3:a2:b2:
                    47:a8:3e:a8:2c:84:af:9a:b2:74:d4:9e:03:68:77:
                    4b:01:1f:1b:3a:f4:50:8f:cb:d6:78:dc:90:79:9c:
                    95:40:9b:b8:94:f2:f0:ec:88:76:97:c7:c3:01:f7:
                    65:30:fc:a9:66:14:f3:0e:88:69:8f:d1:87:d3:56:
                    a6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CA:CA:93:13:20:03:65:93:F3:6D:B8:8D:83:21:C3:80:1D:0C:E8
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/7715AC7C2E4F11EE8D46AA3D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.78.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:a8:94:d6:e3:f3:1d:a0:37:76:15:34:80:86:05:23:b6:a0:
         1e:ed:57:be:fd:ef:02:e6:cf:41:d6:bf:03:ca:d1:0d:a1:18:
         0d:8f:fe:5a:0e:5d:0f:ab:12:f1:2c:64:0d:a6:e0:e6:9d:d9:
         c2:12:7f:8d:17:53:24:a6:ed:8f:87:3a:ce:6e:da:29:06:44:
         7f:c1:14:79:fb:5c:99:44:eb:73:98:ad:41:d4:be:d5:21:9c:
         3d:a8:65:96:45:b0:23:32:2a:7f:c1:84:d0:b2:2a:53:48:1d:
         bb:a4:7e:5e:33:96:65:f0:f6:4f:25:3b:7e:98:a8:70:30:77:
         59:85:ce:8c:a2:58:50:c1:f1:6a:9c:f1:38:05:2b:bb:d1:09:
         55:33:82:11:e2:87:00:5c:d8:28:6e:bf:94:10:a5:cd:a1:a6:
         c1:c5:8b:33:9a:fb:98:f2:63:b8:f1:1e:93:55:6a:e6:14:f8:
         df:6d:1d:c7:93:eb:42:2a:40:93:e0:7d:4e:cd:20:09:a9:25:
         f0:e7:93:d2:5b:bd:49:88:3b:75:a8:e8:22:ac:fa:6f:54:0d:
         7f:5b:d6:b2:15:da:87:fa:7e:b4:f5:e5:2c:53:d2:f9:7c:fe:
         ff:f0:c9:58:26:cc:34:b2:c7:25:21:82:bf:29:1c:9c:e8:57:
         1d:e6:4c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:27 2024 by rpki-client on console-ams.rpki-client.org