Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/5B8783E49BAC11ED97C0B6D9F1222468.roa
File:                     5B8783E49BAC11ED97C0B6D9F1222468.roa (raw, json)
Hash identifier:          PMDaBBvtP2gmeRL/ahXbvJAglpyMYY8FFcv7kEF4xqM=
Subject key identifier:   C8:1C:B1:FD:57:AC:C0:7E:DB:1B:13:8B:0D:31:55:02:E6:02:06:D2
Certificate issuer:       /CN=F3619AFBAF/serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
Certificate serial:       02
Authority key identifier: 50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/5B8783E49BAC11ED97C0B6D9F1222468.roa
Signing time:             Tue 24 Jan 2023 06:00:09 +0000
ROA not before:           Tue 24 Jan 2023 06:00:05 +0000
ROA not after:            Thu 23 Jan 2025 06:00:05 +0000
asID:                     329182
IP address blocks:        102.213.89.0/24 maxlen: 32
                          2c0f:2980:4000::/34 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 May 2024 00:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619AFBAF/serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
        Validity
            Not Before: Jan 24 06:00:05 2023 GMT
            Not After : Jan 23 06:00:05 2025 GMT
        Subject: CN=63cf73e9-bdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:72:e3:83:ae:8d:7a:96:f8:32:13:0c:b1:26:
                    8c:94:55:c2:f7:cf:6c:d5:f8:8d:0d:f5:7d:89:95:
                    a3:c1:3b:1f:5e:3d:bf:85:a9:de:3e:f3:b1:d2:cf:
                    fa:9c:11:ea:5d:93:81:1a:74:e8:74:15:9e:53:6c:
                    c3:a4:71:e5:bd:1d:4a:93:19:1a:e9:d5:e0:5a:56:
                    03:ec:e6:af:40:e3:21:c3:34:ab:e6:12:b3:c5:5f:
                    97:58:e4:95:f5:e9:fe:84:6e:26:f7:68:c1:fa:09:
                    25:71:dd:84:70:d1:f0:65:be:e9:a9:c5:e1:5a:87:
                    3b:24:1a:53:ed:e0:32:84:e3:f3:6c:a9:a8:4c:79:
                    e2:35:cc:3e:b3:13:0c:8c:35:5d:31:d9:1e:14:24:
                    f8:1f:71:2d:5a:69:1f:90:14:c3:90:95:d0:3d:a6:
                    4c:9e:07:e7:73:67:2c:51:7f:f3:3b:f5:1a:82:75:
                    4a:4e:f2:f5:fc:f3:07:ae:60:1f:30:03:fe:14:51:
                    08:19:55:78:ff:51:af:78:ab:c3:85:52:44:b7:df:
                    17:30:49:55:ba:e7:a8:b5:35:98:3a:de:30:d5:b7:
                    44:1d:d1:20:ae:2f:f5:2f:fa:49:6f:82:a0:74:63:
                    4d:a4:44:1d:16:ff:55:e8:03:b0:e3:e5:8a:9a:7d:
                    4b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1C:B1:FD:57:AC:C0:7E:DB:1B:13:8B:0D:31:55:02:E6:02:06:D2
            X509v3 Authority Key Identifier:
                keyid:50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/5B8783E49BAC11ED97C0B6D9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.213.89.0/24
                IPv6:
                  2c0f:2980:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8c:8a:84:4e:8c:4f:3c:68:a9:0d:5a:56:ea:81:be:47:0e:43:
         01:a3:e3:8d:5c:6c:4f:75:be:a6:f2:e7:05:d7:92:df:65:55:
         65:d0:dc:99:c4:0e:91:a8:af:0e:d6:2f:83:74:3a:67:63:16:
         22:28:12:45:15:12:15:72:09:3f:0d:a1:49:e7:25:53:04:ab:
         45:e7:6b:2e:5c:ef:38:eb:2f:e2:33:ee:89:6a:7a:e9:37:7b:
         06:ee:59:e2:26:43:58:10:b1:2c:63:2c:85:6f:84:e9:1d:21:
         29:20:41:08:44:13:b4:14:56:de:17:f4:99:4e:e7:b7:2e:1d:
         09:13:64:b1:4e:b1:24:f3:c0:1c:8b:e1:06:d4:fa:2e:45:3b:
         1e:83:ab:ea:d4:2d:19:75:ed:5b:67:d4:8f:f4:d0:8e:2b:5a:
         0d:41:85:bf:2e:48:2b:48:91:27:c5:d6:4d:a3:80:fb:3b:37:
         55:c2:bc:f0:23:61:cf:0e:b0:ec:96:be:73:00:7c:99:0a:66:
         35:f2:b3:b9:6e:41:45:cf:2c:9a:df:d4:2b:99:4a:93:97:3d:
         0d:2e:20:09:2b:99:e2:57:7b:99:6c:6c:4a:61:82:05:cc:f3:
         08:14:80:38:68:3c:a3:44:50:0f:d6:f2:8e:6f:e1:06:a6:ac:
         fb:b1:ef:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----