Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/6B519B0E055411EEA4B69F454AD9E6FC.roa
File:                     6B519B0E055411EEA4B69F454AD9E6FC.roa (raw, json)
Hash identifier:          MlR1pu7WkCuYeKJKYfug+65Us0NZKNlqF1+hRCPzABM=
Subject key identifier:   8D:D1:66:BC:9D:BB:CF:A2:77:85:59:A5:A8:3B:10:58:B0:45:C2:48
Certificate issuer:       /CN=F36E1028AF/serialNumber=7ECE78AE81BF4072B1DC4F6FB7E6CB9166252B34
Certificate serial:       01B6
Authority key identifier: 7E:CE:78:AE:81:BF:40:72:B1:DC:4F:6F:B7:E6:CB:91:66:25:2B:34
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/6B519B0E055411EEA4B69F454AD9E6FC.roa
Signing time:             Wed 07 Jun 2023 16:57:43 +0000
ROA not before:           Wed 07 Jun 2023 16:57:39 +0000
ROA not after:            Sun 07 Jun 2026 16:57:39 +0000
asID:                     7155
IP address blocks:        196.200.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 15 May 2024 00:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1028AF/serialNumber=7ECE78AE81BF4072B1DC4F6FB7E6CB9166252B34
        Validity
            Not Before: Jun  7 16:57:39 2023 GMT
            Not After : Jun  7 16:57:39 2026 GMT
        Subject: CN=6480b707-a041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:bc:1d:f3:a3:37:15:00:18:6e:13:32:be:
                    b5:fe:d8:a3:d8:00:70:3e:a4:9b:22:48:6a:bc:30:
                    b7:38:10:25:f2:70:a4:63:f3:3c:22:09:da:9a:0a:
                    86:49:25:2b:c6:ab:52:47:56:6d:ce:18:2c:4d:83:
                    58:de:b1:32:73:8c:d0:77:29:bd:5e:ba:74:ac:18:
                    8c:07:4f:ad:07:27:91:8b:1f:39:46:a0:fa:36:41:
                    2d:28:80:20:63:83:2e:86:bd:d8:91:8c:f7:f6:11:
                    09:b7:75:93:16:a8:d8:15:ae:6e:a7:b8:4e:09:45:
                    bb:fc:8c:f1:39:92:6d:db:05:e4:4f:76:13:9f:e4:
                    28:a0:82:65:f6:c5:e3:93:24:45:d8:1e:5a:f7:e0:
                    c2:96:ea:5b:52:11:82:dc:52:6d:d1:0c:cf:5a:59:
                    2e:da:3a:fa:f1:79:91:37:df:82:76:31:b3:7b:2c:
                    3e:98:64:c5:ae:85:de:69:66:2f:77:54:3d:ed:f0:
                    d3:62:0e:27:fb:06:8d:bf:56:07:09:f1:e9:61:08:
                    6f:f2:6d:a2:86:66:6d:49:2b:4f:30:26:db:52:8f:
                    0e:f1:d3:04:fe:db:e4:0e:23:5d:be:65:a8:e0:10:
                    00:e6:77:df:29:a6:3d:12:35:dd:7a:72:9f:b1:3f:
                    2f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D1:66:BC:9D:BB:CF:A2:77:85:59:A5:A8:3B:10:58:B0:45:C2:48
            X509v3 Authority Key Identifier:
                keyid:7E:CE:78:AE:81:BF:40:72:B1:DC:4F:6F:B7:E6:CB:91:66:25:2B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/6B519B0E055411EEA4B69F454AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.200.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:44:b9:53:7f:5f:27:db:8b:6d:01:a0:34:d1:f5:dc:63:a1:
         4c:4e:4d:40:d2:3e:16:d4:ca:f7:53:51:9c:f9:38:46:e3:74:
         97:d9:cb:ee:b5:5a:32:aa:1d:d8:8c:42:01:45:6b:a2:59:66:
         42:d2:94:c7:f2:c2:ef:90:a2:30:29:fd:98:61:8e:01:7a:4f:
         5f:7b:1b:9c:4f:64:0f:69:54:5c:6b:73:be:fa:0d:a4:31:7e:
         af:ea:57:a2:91:2e:30:f3:a3:bb:17:d7:cc:09:83:8e:70:b9:
         1f:d7:a2:19:fa:37:5d:b2:22:1c:f8:1c:c2:20:84:4b:15:4c:
         2a:d1:b2:79:80:e5:65:99:69:76:be:1f:3b:f0:6b:48:65:df:
         c3:a4:0b:51:8f:35:6b:bf:b5:26:6b:0d:14:3c:43:30:3d:ab:
         7e:3c:ac:61:d6:d1:f1:26:af:1e:10:46:e1:70:6a:5b:9b:9f:
         12:f4:ca:00:b5:90:e6:54:55:a2:8a:86:fd:ee:99:e6:79:28:
         4e:81:85:ce:20:62:8b:f6:c0:ff:8c:05:ce:5a:2a:f9:12:28:
         9a:a8:e0:7b:81:a6:e4:56:50:4d:a8:d1:69:01:2b:33:2b:bc:
         2d:b4:a3:50:23:cc:87:da:36:7d:7e:c5:89:7e:f5:46:8f:b6:
         aa:41:bf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:39:34 2024 by rpki-client on console-ams.rpki-client.org