Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/C6182334346011EDA12A24EEF1222468.roa
File:                     C6182334346011EDA12A24EEF1222468.roa (raw, json)
Hash identifier:          jH3sitVp68SYd4QD/dRUfuzvSquAJDcEaHoiP8qtVAY=
Subject key identifier:   A7:2B:1F:A4:6C:2C:56:55:25:A5:D4:F4:F6:9A:B8:B7:CB:17:EB:93
Certificate issuer:       /CN=F36F7C77AF/serialNumber=F3826F3B5D24F64CB60F8C60C75DB519A0C7A6B7
Certificate serial:       06
Authority key identifier: F3:82:6F:3B:5D:24:F6:4C:B6:0F:8C:60:C7:5D:B5:19:A0:C7:A6:B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/84JvO10k9ky2D4xgx121GaDHprc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/C6182334346011EDA12A24EEF1222468.roa
Signing time:             Wed 14 Sep 2022 19:09:36 +0000
ROA not before:           Wed 14 Sep 2022 19:09:32 +0000
ROA not after:            Mon 14 Sep 2026 19:09:32 +0000
asID:                     37387
IP address blocks:        41.79.160.0/24 maxlen: 24
                          41.79.161.0/24 maxlen: 24
                          41.79.162.0/24 maxlen: 24
                          41.79.163.0/24 maxlen: 24
                          41.223.8.0/24 maxlen: 24
                          41.223.9.0/24 maxlen: 24
                          41.223.10.0/24 maxlen: 24
                          41.223.11.0/24 maxlen: 24
                          2c0f:fa78::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/84JvO10k9ky2D4xgx121GaDHprc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F7C77AF/serialNumber=F3826F3B5D24F64CB60F8C60C75DB519A0C7A6B7
        Validity
            Not Before: Sep 14 19:09:32 2022 GMT
            Not After : Sep 14 19:09:32 2026 GMT
        Subject: CN=632226f0-1437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:74:22:ea:71:7d:7c:b8:6d:3a:80:6e:23:35:
                    29:64:7e:5d:c9:a0:ce:ac:d0:2c:ef:1f:52:7c:a5:
                    fb:79:bb:1b:40:87:7a:61:b9:eb:1d:0e:d0:cf:38:
                    9c:4c:35:02:60:3f:95:bb:3b:96:ef:ea:81:4a:d8:
                    e9:b2:d2:19:1b:77:7d:fd:a9:d7:01:1b:07:a9:ac:
                    29:c4:47:5b:a9:a3:82:a2:a4:48:97:c9:62:13:d1:
                    14:c5:99:6e:60:b9:b1:7e:59:34:fc:96:ec:c2:be:
                    76:69:2f:13:97:89:28:cb:d9:ca:4f:d6:f9:9d:99:
                    0d:ac:83:c3:ea:36:94:1f:c7:bb:4c:6c:44:27:5a:
                    ad:b9:d3:ef:66:d7:84:02:cb:60:1d:20:64:14:7a:
                    4d:8b:9d:e2:7b:ac:d9:ee:85:2c:0c:58:c0:60:dc:
                    31:51:19:7b:0e:02:66:67:15:27:a2:b3:52:b7:15:
                    7a:bb:c0:f4:bc:fb:3e:07:33:c1:da:b7:75:a8:3b:
                    1d:b7:80:ef:cb:12:f7:e5:7b:6e:d9:d0:35:60:63:
                    d8:b0:af:6b:25:79:0c:1f:45:11:18:d2:59:b5:c0:
                    f9:81:1c:72:a7:ac:79:c3:42:d7:06:f6:da:2e:83:
                    9b:99:d1:52:47:81:79:24:e2:02:eb:b7:b3:38:1e:
                    29:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2B:1F:A4:6C:2C:56:55:25:A5:D4:F4:F6:9A:B8:B7:CB:17:EB:93
            X509v3 Authority Key Identifier:
                keyid:F3:82:6F:3B:5D:24:F6:4C:B6:0F:8C:60:C7:5D:B5:19:A0:C7:A6:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/84JvO10k9ky2D4xgx121GaDHprc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/C6182334346011EDA12A24EEF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.79.160.0/22
                  41.223.8.0/22
                IPv6:
                  2c0f:fa78::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:28:34:02:5e:c9:6a:c9:bc:ed:74:4e:21:99:3c:7c:ca:02:
         2b:34:b1:c5:f7:6b:5e:7d:f4:be:f5:03:56:85:99:8c:b9:b5:
         b9:8b:17:60:11:b3:e0:cb:70:da:18:42:3b:19:28:39:66:ab:
         f1:9d:12:77:5d:85:c1:df:7c:9c:7a:01:c6:4b:79:9b:42:8f:
         ae:ff:6f:02:a5:32:c6:41:fc:86:c7:60:d8:57:cf:ea:9c:9f:
         e0:82:c9:90:be:b4:1d:56:ca:00:83:0f:74:f0:fb:c7:79:da:
         53:3d:7a:f3:da:2c:43:68:f6:6a:23:5c:4a:9e:81:62:39:8a:
         a1:77:1c:ce:b0:af:97:5e:ae:a7:ca:91:d9:92:0a:13:84:c4:
         e1:a0:f2:a3:6a:f6:33:fc:ce:83:6d:77:41:ec:de:ac:ff:00:
         82:06:d6:54:c6:e8:b3:a1:46:8f:97:9c:75:b2:60:9d:7c:5c:
         c9:13:e1:d5:b8:47:09:c4:60:e5:42:75:b9:ee:f2:b0:e1:dd:
         e7:29:e5:cf:bf:f0:a2:58:48:ff:4c:93:d2:da:89:5d:8f:7f:
         f3:b7:c8:6e:68:16:c3:a8:2a:72:dc:5b:2d:be:d9:87:eb:f4:
         dc:c3:fc:4d:ac:44:ef:d3:73:49:4f:60:48:d1:24:c3:7f:f8:
         8f:87:08:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:00 2024 by rpki-client on console-fra.rpki-client.org