Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/57418EF04A9411EEB410DB814AD9E6FC.roa
File:                     57418EF04A9411EEB410DB814AD9E6FC.roa (raw, json)
Hash identifier:          q12m8ZQQQsDXVbIvrMrW+qu3TkUh3w0FfQrFK7Pqqvc=
Subject key identifier:   AD:E8:28:6E:11:8F:5E:1E:77:6C:81:C8:1E:08:E6:D3:C4:1C:1A:4B
Certificate issuer:       /CN=F36D7FB7AF/serialNumber=A58A6D29114C881E005877279D95ABAA39EE141C
Certificate serial:       85
Authority key identifier: A5:8A:6D:29:11:4C:88:1E:00:58:77:27:9D:95:AB:AA:39:EE:14:1C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/57418EF04A9411EEB410DB814AD9E6FC.roa
Signing time:             Sun 03 Sep 2023 19:59:07 +0000
ROA not before:           Sun 03 Sep 2023 19:59:04 +0000
ROA not after:            Wed 15 Sep 2027 19:59:04 +0000
asID:                     328344
IP address blocks:        102.135.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 04 Jun 2024 00:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D7FB7AF/serialNumber=A58A6D29114C881E005877279D95ABAA39EE141C
        Validity
            Not Before: Sep  3 19:59:04 2023 GMT
            Not After : Sep 15 19:59:04 2027 GMT
        Subject: CN=64f4e58b-3081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4b:ba:f0:4c:7c:44:cb:34:08:de:24:b9:fc:
                    00:8d:68:8c:75:31:0b:2f:8b:2e:73:be:6b:99:61:
                    db:37:c2:ce:47:23:45:f2:7e:e6:24:c1:21:7d:14:
                    d4:d1:dc:27:c3:52:07:d7:db:85:5e:e4:9a:d2:21:
                    98:f6:20:67:9b:01:57:3c:43:4a:4f:98:7d:9d:59:
                    bf:18:fc:f2:c0:58:67:2a:5f:45:79:2c:72:2d:f8:
                    d6:25:6d:08:e0:0d:52:98:76:c5:b5:8e:44:c8:b2:
                    0e:05:66:3e:ec:2a:55:b5:e3:4a:26:f6:24:d0:80:
                    64:a6:43:4c:c5:29:d3:a6:93:1c:df:25:f1:54:0e:
                    ee:a9:df:bc:a8:b6:e9:c3:d5:fb:9f:30:05:d0:41:
                    c4:80:ac:22:71:8a:d8:8c:a7:dc:a7:c2:53:80:e6:
                    97:24:fa:99:02:57:92:60:ab:c9:dd:1f:96:97:0a:
                    6d:ac:4e:51:58:f2:1c:01:e1:25:71:ce:4a:6d:7d:
                    1d:c0:56:71:f3:79:f6:8d:64:5e:11:d5:ff:f7:a6:
                    28:e7:76:ea:b2:1d:85:d0:4c:e3:b6:c3:59:95:1b:
                    23:fd:a6:88:16:3f:e3:09:29:e0:c3:9f:10:ec:77:
                    b8:0d:e7:f8:ce:e6:96:eb:d1:43:78:91:e5:8f:10:
                    a5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E8:28:6E:11:8F:5E:1E:77:6C:81:C8:1E:08:E6:D3:C4:1C:1A:4B
            X509v3 Authority Key Identifier:
                keyid:A5:8A:6D:29:11:4C:88:1E:00:58:77:27:9D:95:AB:AA:39:EE:14:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/57418EF04A9411EEB410DB814AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:17:a1:e7:f3:f1:9f:04:ac:70:80:e9:4c:99:c6:00:f3:ef:
         b9:3b:6e:fe:2b:11:3a:65:96:e2:a7:cf:94:cb:a2:3d:bd:61:
         75:c1:ec:69:ac:78:ec:3e:50:74:3d:1e:24:d3:32:58:77:0f:
         5b:95:48:30:10:5e:0d:dc:32:04:2d:80:c1:43:65:82:a4:3c:
         6f:d7:1b:2c:c6:f5:5d:25:95:db:4c:c6:d5:a8:8a:7e:70:14:
         8e:7b:6d:72:3c:7c:54:e1:c1:93:2f:2b:c0:aa:7c:ab:96:ba:
         c6:5b:ff:f4:74:ca:84:77:2a:51:72:96:93:c6:90:00:af:8b:
         ba:5a:b0:e7:66:8a:e4:4d:e2:b8:0d:28:1a:68:3d:b1:04:6b:
         14:26:bf:04:55:2f:97:e9:22:26:eb:4e:06:01:16:28:49:41:
         9b:e9:cc:66:9c:7d:e8:a7:6f:bb:6c:0e:ce:77:e2:74:c4:65:
         eb:ea:57:ef:c3:b7:e8:79:cb:45:35:44:99:21:74:f9:dd:5b:
         87:49:29:24:0c:e1:c5:b0:4c:58:17:0c:8c:6a:63:74:f2:d4:
         3b:68:3d:a4:db:59:f5:54:12:cf:97:1f:88:f7:1b:08:1e:35:
         59:cf:6a:22:32:03:c7:73:ba:2f:ca:ea:f9:f7:36:3d:d5:4e:
         8e:ef:79:a2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDdGQjdBRjExMC8GA1UEBRMoQTU4QTZEMjkxMTRDODgxRTAwNTg3NzI3OUQ5NUFC
QUEzOUVFMTQxQzAeFw0yMzA5MDMxOTU5MDRaFw0yNzA5MTUxOTU5MDRaMBgxFjAU
BgNVBAMTDTY0ZjRlNThiLTMwODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDeS7rwTHxEyzQI3iS5/ACNaIx1MQsviy5zvmuZYds3ws5HI0XyfuYkwSF9
FNTR3CfDUgfX24Ve5JrSIZj2IGebAVc8Q0pPmH2dWb8Y/PLAWGcqX0V5LHIt+NYl
bQjgDVKYdsW1jkTIsg4FZj7sKlW140om9iTQgGSmQ0zFKdOmkxzfJfFUDu6p37yo
tunD1fufMAXQQcSArCJxitiMp9ynwlOA5pck+pkCV5Jgq8ndH5aXCm2sTlFY8hwB
4SVxzkptfR3AVnHzefaNZF4R1f/3pijnduqyHYXQTOO2w1mVGyP9pogWP+MJKeDD
nxDsd7gN5/jO5pbr0UN4keWPEKVLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUrego
bhGPXh53bIHIHgjm08QcGkswHwYDVR0jBBgwFoAUpYptKRFMiB4AWHcnnZWrqjnu
FBwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ3RkI3LzhBQzFDNTcyRjYyQzExRURBMTBEM0IzQTRBRDlFNkZDL3BZcHRL
UkZNaUI0QVdIY25uWldycWpudUZCdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3BZcHRLUkZNaUI0QVdIY25uWldycWpudUZCdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQ3RkI3LzhBQzFDNTcyRjYyQzExRURBMTBEM0IzQTRB
RDlFNkZDLzU3NDE4RUYwNEE5NDExRUVCNDEwREI4MTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh7IwDQYJKoZIhvcNAQEL
BQADggEBAHYXoefz8Z8ErHCA6UyZxgDz77k7bv4rETplluKnz5TLoj29YXXB7Gms
eOw+UHQ9HiTTMlh3D1uVSDAQXg3cMgQtgMFDZYKkPG/XGyzG9V0lldtMxtWoin5w
FI57bXI8fFThwZMvK8CqfKuWusZb//R0yoR3KlFylpPGkACvi7pasOdmiuRN4rgN
KBpoPbEEaxQmvwRVL5fpIibrTgYBFihJQZvpzGacfeinb7tsDs534nTEZevqV+/D
t+h5y0U1RJkhdPndW4dJKSQM4cWwTFgXDIxqY3Ty1DtoPaTbWfVUEs+XH4j3Gwge
NVnPaiIyA8dzui/K6vn3Nj3VTo7veaI=
-----END CERTIFICATE-----
Generated at Sun Jun 2 03:40:55 2024 by rpki-client on console-ams.rpki-client.org