Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/B3AF20B22BCC11EEADC220224AD9E6FC.roa
File:                     B3AF20B22BCC11EEADC220224AD9E6FC.roa (raw, json)
Hash identifier:          nXzorb03me3+qUCitQD81j7/qTZ3iZHzisnNHDuCpaA=
Subject key identifier:   2B:62:78:6A:DF:85:59:87:60:D9:BB:B2:23:D5:56:24:8E:D8:2C:74
Certificate issuer:       /CN=F3618519AF/serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
Certificate serial:       0389
Authority key identifier: 7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/B3AF20B22BCC11EEADC220224AD9E6FC.roa
Signing time:             Wed 26 Jul 2023 15:54:28 +0000
ROA not before:           Wed 26 Jul 2023 15:54:25 +0000
ROA not after:            Mon 31 Jul 2028 15:54:25 +0000
asID:                     328813
IP address blocks:        102.220.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/e9ii0EVNYmPiJ_p-6mofhlrwJAY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/e9ii0EVNYmPiJ_p-6mofhlrwJAY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905 (0x389)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618519AF/serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
        Validity
            Not Before: Jul 26 15:54:25 2023 GMT
            Not After : Jul 31 15:54:25 2028 GMT
        Subject: CN=64c141b4-e41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:94:5d:83:74:45:55:95:cd:3d:1d:75:af:32:
                    b2:f0:8f:16:33:67:c6:5c:8a:2c:af:b8:97:bc:9e:
                    66:f5:a8:1a:5b:57:0b:f6:69:eb:df:62:09:f7:c1:
                    5b:72:b7:99:78:bd:37:71:8e:56:e4:0a:f8:c6:a7:
                    0b:bd:39:b9:70:10:ca:98:11:05:d6:43:a1:4c:a1:
                    7d:8f:17:f0:fc:57:af:42:0c:f5:1d:7d:b2:85:21:
                    6d:08:8f:44:8b:da:a9:c8:79:b4:ee:6c:f1:97:58:
                    2e:a9:8f:48:7c:58:ec:f1:76:31:e0:a4:a5:80:9f:
                    0b:b8:0d:e6:34:8e:15:ed:9a:04:8a:8e:e5:98:eb:
                    5e:56:a5:e8:33:7a:6d:7a:c1:ed:b8:70:7b:3b:f3:
                    f0:cd:00:86:60:bd:74:99:34:8a:78:e0:be:06:b3:
                    98:a3:b8:24:ec:2b:36:e1:29:a3:c7:35:ea:57:30:
                    4f:aa:ff:f7:2b:13:7b:a0:22:e0:82:8c:79:22:db:
                    ac:fa:c2:54:6f:d9:c5:6b:86:d7:73:72:20:2c:0e:
                    d6:89:24:d9:23:05:66:b7:21:a9:29:24:77:e7:d3:
                    52:6b:d3:9b:14:76:c1:35:81:42:00:67:c6:16:72:
                    dc:28:9a:e4:5c:aa:37:0c:1f:1b:97:e6:c4:54:9e:
                    34:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:62:78:6A:DF:85:59:87:60:D9:BB:B2:23:D5:56:24:8E:D8:2C:74
            X509v3 Authority Key Identifier:
                keyid:7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/e9ii0EVNYmPiJ_p-6mofhlrwJAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/B3AF20B22BCC11EEADC220224AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.220.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:03:ed:f6:34:b9:7d:dd:84:41:ad:37:d4:68:13:d4:4a:81:
         64:03:31:1f:6b:52:f5:db:df:62:5e:70:8d:cc:e7:f4:ee:07:
         b6:84:64:47:84:6a:11:fc:5a:94:9a:3d:fe:5a:c1:6d:58:8c:
         1e:c0:da:c2:af:a6:fb:ec:f1:9b:7e:d2:7a:d8:97:10:f5:fb:
         44:f9:d9:78:94:94:d4:4d:18:98:ab:99:15:87:ad:52:36:f2:
         91:51:05:9d:3b:78:df:87:06:b0:bb:73:94:d5:cf:37:a2:c8:
         f5:73:95:f8:d9:a1:9a:d0:b2:c6:30:41:61:39:81:60:5c:b9:
         17:a0:33:65:f2:89:40:2f:89:cd:43:46:90:c9:35:7a:b1:50:
         f0:22:4b:da:5a:5b:07:d2:8e:3c:f6:9e:ef:b4:09:fc:49:90:
         88:a0:74:de:b5:0c:64:05:c7:d9:b4:5a:76:a6:8f:56:9d:5b:
         cf:e6:0f:90:98:da:53:75:94:19:c6:94:a9:95:21:41:f7:20:
         59:fa:e6:2a:3f:70:8e:90:2b:3f:67:c3:d7:22:cb:55:c0:2f:
         f8:44:b3:8c:fd:d0:d5:9b:56:88:4d:8e:c8:81:b0:cb:db:09:
         24:96:b6:8b:ae:b4:d8:19:41:38:e6:b8:68:11:25:fc:38:73:
         c8:8d:10:d2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA4kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MTg1MTlBRjExMC8GA1UEBRMoN0JEOEEyRDA0NTRENjI2M0UyMjdGQTdFRUE2QTFG
ODY1QUYwMjQwNjAeFw0yMzA3MjYxNTU0MjVaFw0yODA3MzExNTU0MjVaMBgxFjAU
BgNVBAMTDTY0YzE0MWI0LWU0MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXlF2DdEVVlc09HXWvMrLwjxYzZ8ZciiyvuJe8nmb1qBpbVwv2aevfYgn3
wVtyt5l4vTdxjlbkCvjGpwu9OblwEMqYEQXWQ6FMoX2PF/D8V69CDPUdfbKFIW0I
j0SL2qnIebTubPGXWC6pj0h8WOzxdjHgpKWAnwu4DeY0jhXtmgSKjuWY615Wpegz
em16we24cHs78/DNAIZgvXSZNIp44L4Gs5ijuCTsKzbhKaPHNepXME+q//crE3ug
IuCCjHki26z6wlRv2cVrhtdzciAsDtaJJNkjBWa3IakpJHfn01Jr05sUdsE1gUIA
Z8YWctwomuRcqjcMHxuX5sRUnjRZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUK2J4
at+FWYdg2buyI9VWJI7YLHQwHwYDVR0jBBgwFoAUe9ii0EVNYmPiJ/p+6mofhlrw
JAYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE4NTE5LzJCRkI2QjQyOTE2MTExRUI5QjBGOTU0QUY4QUVBMjI4L2U5aWkw
RVZOWW1QaUpfcC02bW9maGxyd0pBWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2U5aWkwRVZOWW1QaUpfcC02bW9maGxyd0pBWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE4NTE5LzJCRkI2QjQyOTE2MTExRUI5QjBGOTU0QUY4
QUVBMjI4L0IzQUYyMEIyMkJDQzExRUVBREMyMjAyMjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFm3MgwDQYJKoZIhvcNAQEL
BQADggEBACwD7fY0uX3dhEGtN9RoE9RKgWQDMR9rUvXb32JecI3M5/TuB7aEZEeE
ahH8WpSaPf5awW1YjB7A2sKvpvvs8Zt+0nrYlxD1+0T52XiUlNRNGJirmRWHrVI2
8pFRBZ07eN+HBrC7c5TVzzeiyPVzlfjZoZrQssYwQWE5gWBcuRegM2XyiUAvic1D
RpDJNXqxUPAiS9paWwfSjjz2nu+0CfxJkIigdN61DGQFx9m0Wnamj1adW8/mD5CY
2lN1lBnGlKmVIUH3IFn65io/cI6QKz9nw9ciy1XAL/hEs4z90NWbVohNjsiBsMvb
CSSWtouutNgZQTjmuGgRJfw4c8iNENI=
-----END CERTIFICATE-----
Generated at Fri May 3 03:10:04 2024 by rpki-client on console-ams.rpki-client.org