Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/83E8C882ABE211EAB75B5884F8AEA228.roa
File:                     83E8C882ABE211EAB75B5884F8AEA228.roa (raw, json)
Hash identifier:          RmYidaSanSrUDIijG3Hos1aIo1Mry4vynEz6zaj5KdQ=
Subject key identifier:   5B:C5:D0:0B:BD:18:01:29:56:3A:7F:A4:EB:AB:10:68:08:BF:88:3D
Certificate issuer:       /CN=F3610674AF/serialNumber=7046A652760C8E9035701D6A44DC271A0E33015C
Certificate serial:       01A2
Authority key identifier: 70:46:A6:52:76:0C:8E:90:35:70:1D:6A:44:DC:27:1A:0E:33:01:5C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/83E8C882ABE211EAB75B5884F8AEA228.roa
Signing time:             Thu 11 Jun 2020 12:53:15 +0000
ROA not before:           Thu 11 Jun 2020 12:53:09 +0000
ROA not after:            Tue 11 Jun 2030 12:53:09 +0000
asID:                     328453
IP address blocks:        102.222.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Apr 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610674AF/serialNumber=7046A652760C8E9035701D6A44DC271A0E33015C
        Validity
            Not Before: Jun 11 12:53:09 2020 GMT
            Not After : Jun 11 12:53:09 2030 GMT
        Subject: CN=5ee2293b-37f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:5d:ad:0c:ed:bc:7f:fd:dc:28:02:c4:4b:
                    84:f4:e1:9e:ef:9f:90:dd:64:02:80:5e:60:90:c0:
                    c1:d7:f2:38:59:c2:dc:29:65:60:a6:73:25:66:d5:
                    19:a1:37:8f:e8:00:7c:11:13:a4:53:40:4f:28:69:
                    d2:94:72:5b:3c:65:aa:be:f1:7d:a8:78:d3:66:c3:
                    ed:5c:be:e0:0e:94:8f:2b:9e:c9:a3:3d:d4:02:24:
                    2a:3d:ab:08:69:15:d3:d7:eb:18:65:44:7c:d7:47:
                    7d:b2:ed:07:97:95:88:0e:48:1f:a9:7b:56:d3:18:
                    45:ac:88:6a:0a:6e:c3:e0:27:b3:ef:0e:e7:5e:64:
                    9d:eb:ee:a0:60:9f:42:c1:d5:6f:7c:53:6b:8c:30:
                    d3:8c:4e:c0:57:0d:77:75:bc:a8:33:2a:a6:9e:d0:
                    1f:50:1f:be:ce:05:79:84:f8:a5:99:e1:a0:9d:6c:
                    08:0b:d3:2e:96:ea:63:41:07:95:56:e1:a7:a0:c6:
                    27:51:2f:f4:1b:48:5e:ce:21:06:0a:b8:3a:b4:2a:
                    4c:c6:a6:cc:2f:4b:ec:0a:2b:8e:ae:73:3f:99:94:
                    4b:33:75:c6:12:37:da:5a:6c:c7:75:75:ac:ec:45:
                    8d:d6:bd:25:67:eb:41:2c:00:31:96:44:aa:20:75:
                    c2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C5:D0:0B:BD:18:01:29:56:3A:7F:A4:EB:AB:10:68:08:BF:88:3D
            X509v3 Authority Key Identifier:
                keyid:70:46:A6:52:76:0C:8E:90:35:70:1D:6A:44:DC:27:1A:0E:33:01:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/83E8C882ABE211EAB75B5884F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.222.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:8d:c0:34:2b:1d:40:d7:76:b7:ce:b3:67:a4:55:1e:1a:b0:
         78:b2:bd:95:b3:8b:ee:ec:01:2a:93:ad:a1:98:82:68:fd:62:
         69:57:67:22:79:1d:47:93:89:33:71:50:7a:08:22:5c:73:4b:
         89:02:5b:f6:2e:6b:f6:98:04:15:56:d8:bd:a1:60:c9:16:0c:
         80:67:4d:a9:bd:a9:4e:d5:a7:1c:4b:51:63:6d:73:d1:44:c4:
         30:d1:39:98:2f:12:25:16:10:7b:ef:76:49:ae:91:8f:5d:d3:
         e9:4d:b9:69:42:c0:ce:ab:79:65:1e:a7:e6:40:f1:f3:e0:6f:
         59:f4:5f:e4:f3:5d:a3:90:c3:41:6e:d2:cd:26:3e:bc:38:26:
         57:2b:7b:f0:ab:5c:66:7a:41:7a:54:2e:f2:91:fb:c9:5c:2a:
         a9:0d:c6:1c:9f:70:6e:a7:25:29:f7:9e:26:ca:60:33:1d:11:
         21:b8:2f:98:1f:94:27:73:9a:a0:5d:08:9b:02:c2:f7:24:b6:
         dc:f3:2e:7c:02:7f:db:0c:35:7a:b0:44:98:ee:74:ef:7f:60:
         1d:4f:67:5d:2b:55:79:4c:1e:35:be:81:3a:b2:43:aa:71:3e:
         b4:6b:c4:a2:d9:d1:b3:e3:03:75:ff:6f:86:2f:6b:e2:e7:e0:
         be:cb:f4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 02:19:23 2024 by rpki-client on console-ams.rpki-client.org