Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/112E2C72603C11EDA2A8E38DF1222468.roa
File:                     112E2C72603C11EDA2A8E38DF1222468.roa (raw, json)
Hash identifier:          VpBEbXpxKbJILffmsqj/OzTnQUQOEkM/MEBPomChOT8=
Subject key identifier:   9E:D1:59:47:95:19:EA:1D:0A:A1:C0:77:03:FB:D2:FD:A2:2C:AA:84
Certificate issuer:       /CN=F36F7C77AF/serialNumber=F3826F3B5D24F64CB60F8C60C75DB519A0C7A6B7
Certificate serial:       46
Authority key identifier: F3:82:6F:3B:5D:24:F6:4C:B6:0F:8C:60:C7:5D:B5:19:A0:C7:A6:B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/84JvO10k9ky2D4xgx121GaDHprc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/112E2C72603C11EDA2A8E38DF1222468.roa
Signing time:             Wed 09 Nov 2022 14:37:42 +0000
ROA not before:           Wed 09 Nov 2022 14:37:38 +0000
ROA not after:            Mon 09 Nov 2026 14:37:38 +0000
asID:                     8075
IP address blocks:        41.223.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/84JvO10k9ky2D4xgx121GaDHprc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F7C77AF/serialNumber=F3826F3B5D24F64CB60F8C60C75DB519A0C7A6B7
        Validity
            Not Before: Nov  9 14:37:38 2022 GMT
            Not After : Nov  9 14:37:38 2026 GMT
        Subject: CN=636bbb36-6946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0a:82:6b:23:f9:97:9d:de:ac:49:4e:7a:42:
                    2d:81:49:d9:7f:fb:07:e3:03:eb:91:0f:e2:b7:29:
                    62:d5:fa:87:17:cc:0f:06:c2:dc:00:f9:53:d1:8f:
                    81:4c:16:d7:15:ad:a3:c3:dc:a6:b1:ad:90:f7:e6:
                    29:53:a7:7e:14:ac:79:d1:56:65:d0:bb:cd:f6:9f:
                    8c:83:ea:97:6e:34:a4:ba:10:bb:ab:a3:d1:b6:c5:
                    fd:72:e5:b6:85:0f:cb:b3:e3:55:e2:f4:c9:00:b9:
                    b1:f1:0b:5a:bc:18:74:9c:00:07:c3:d5:82:b0:c6:
                    f4:d8:07:c3:aa:62:1b:78:b6:66:d3:ff:41:ba:0a:
                    81:57:86:92:a6:1d:c5:c4:82:fa:d1:cd:a1:9b:06:
                    84:0e:22:4e:40:f6:7f:a2:57:7c:88:18:bf:56:86:
                    00:bb:52:ea:4f:ff:74:81:10:df:e0:fe:1f:96:17:
                    f3:f9:9e:31:bd:ee:df:95:61:8e:00:ef:50:68:4c:
                    38:43:73:0b:44:1d:7d:a0:7f:2f:5d:73:87:51:2c:
                    45:3e:68:3f:6b:cf:a4:79:5c:f6:36:4c:2c:cc:74:
                    02:3a:97:08:4d:b0:fc:19:e3:51:a9:5a:3d:c3:4a:
                    4f:57:26:86:95:a5:c8:45:20:58:83:a0:10:d1:18:
                    a8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D1:59:47:95:19:EA:1D:0A:A1:C0:77:03:FB:D2:FD:A2:2C:AA:84
            X509v3 Authority Key Identifier:
                keyid:F3:82:6F:3B:5D:24:F6:4C:B6:0F:8C:60:C7:5D:B5:19:A0:C7:A6:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/84JvO10k9ky2D4xgx121GaDHprc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/112E2C72603C11EDA2A8E38DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.223.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:5f:68:e6:a0:74:4c:72:0f:79:a4:79:c8:e1:38:8e:f4:dd:
         be:cf:79:61:16:1c:79:ab:65:2a:c1:2e:52:f4:2f:63:1f:59:
         57:6b:cc:b6:7a:ae:fa:45:5d:4a:26:78:71:6f:9f:5e:ef:e7:
         2f:95:95:2b:b2:63:41:65:a0:4d:f4:5c:41:f6:3c:91:61:12:
         97:18:b4:21:16:fb:8c:2a:55:f5:9c:d0:29:07:73:c0:59:40:
         aa:68:23:2a:13:eb:e6:c6:84:a0:db:b9:00:50:8b:1e:6f:44:
         ff:05:85:57:dc:7e:a4:65:e9:ad:ea:a1:6f:b7:b0:54:28:01:
         18:04:9a:50:03:32:62:75:17:49:cf:3b:d4:d2:09:5a:ce:99:
         a1:c7:b6:16:db:0a:09:bb:5d:b9:56:47:47:03:61:50:c1:db:
         59:c3:41:f0:77:0b:8f:f2:dd:68:18:c3:d1:f8:96:fd:68:1e:
         51:fb:e3:1a:53:ee:a7:c3:62:47:82:26:39:e1:05:84:94:fb:
         ed:08:00:d3:e7:03:10:a0:4b:f5:09:41:6a:d8:6d:60:6a:e2:
         de:65:d1:c4:a5:28:e3:4c:34:0c:a9:75:c0:45:66:1f:8f:86:
         55:e5:33:ec:b8:39:b8:c1:c7:6b:db:15:d6:03:1c:55:52:b3:
         32:db:ad:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:00 2024 by rpki-client on console-fra.rpki-client.org