Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/B057C81ACCDD11EBB3F8311FF8AEA228.roa
File:                     B057C81ACCDD11EBB3F8311FF8AEA228.roa (raw, json)
Hash identifier:          XsaZQ1iHiPfZpeHMaTa/sXXH/fra2bwnbJZiPEVgZbs=
Subject key identifier:   20:E6:FB:E4:F8:0F:6A:07:95:80:4C:71:00:76:2F:75:B0:A1:1F:86
Certificate issuer:       /CN=F361E6A3AF/serialNumber=07A489F99E4A53D8292BF3C4D14E3A238F37637E
Certificate serial:       02F5
Authority key identifier: 07:A4:89:F9:9E:4A:53:D8:29:2B:F3:C4:D1:4E:3A:23:8F:37:63:7E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B6SJ-Z5KU9gpK_PE0U46I483Y34.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/B057C81ACCDD11EBB3F8311FF8AEA228.roa
Signing time:             Mon 14 Jun 2021 06:56:49 +0000
ROA not before:           Mon 14 Jun 2021 06:56:44 +0000
ROA not after:            Mon 30 Jun 2031 06:56:44 +0000
asID:                     328317
IP address blocks:        102.134.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/B6SJ-Z5KU9gpK_PE0U46I483Y34.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/B6SJ-Z5KU9gpK_PE0U46I483Y34.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B6SJ-Z5KU9gpK_PE0U46I483Y34.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Apr 2024 00:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757 (0x2f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361E6A3AF/serialNumber=07A489F99E4A53D8292BF3C4D14E3A238F37637E
        Validity
            Not Before: Jun 14 06:56:44 2021 GMT
            Not After : Jun 30 06:56:44 2031 GMT
        Subject: CN=60c6fdb1-3a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:29:fc:16:14:0a:2f:3b:3f:64:3a:86:52:
                    36:e7:de:48:f3:cb:26:d4:cf:d8:60:2f:6f:5a:9e:
                    a4:dd:49:3c:e7:0f:d5:c7:4f:d1:62:b7:c9:1f:b6:
                    9d:c6:c3:1a:b4:e4:f4:eb:d0:1c:14:92:4b:c2:b3:
                    4a:4b:2e:fe:4e:12:e9:7b:a3:46:ad:91:4d:4b:66:
                    3d:33:5d:0f:0f:d5:b3:b2:dd:45:ff:fa:25:92:de:
                    a7:9a:c3:68:8f:a4:c4:bc:22:a9:5b:c5:81:0b:61:
                    b5:d2:2a:5e:10:b8:c0:f0:82:c8:90:0d:e9:70:17:
                    bd:f3:6a:20:60:18:b8:53:4b:56:16:a0:f9:37:d0:
                    e4:e7:5c:62:5c:3c:7a:e0:9b:fa:42:41:b6:2c:f4:
                    99:1c:d9:f2:0d:18:8e:5b:8a:33:d4:0d:21:dd:bf:
                    34:80:26:35:87:ec:d4:73:c4:bd:2e:d8:35:a7:df:
                    73:55:b8:85:e0:1d:be:6d:46:ba:93:f5:cf:11:69:
                    15:6e:db:2e:e9:0c:7c:31:69:9e:c1:46:bd:ef:38:
                    be:d1:8d:39:c3:68:a8:e3:a1:c7:43:b5:b6:25:d5:
                    2c:4d:10:a0:84:83:c8:52:3e:f8:55:96:94:91:02:
                    9c:cf:14:e5:6b:70:69:91:8d:0b:4f:07:71:86:0e:
                    e2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E6:FB:E4:F8:0F:6A:07:95:80:4C:71:00:76:2F:75:B0:A1:1F:86
            X509v3 Authority Key Identifier:
                keyid:07:A4:89:F9:9E:4A:53:D8:29:2B:F3:C4:D1:4E:3A:23:8F:37:63:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/B6SJ-Z5KU9gpK_PE0U46I483Y34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B6SJ-Z5KU9gpK_PE0U46I483Y34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E6A3/ACF48D3886B811E9BEC99C2BF8AEA228/B057C81ACCDD11EBB3F8311FF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.134.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:05:e4:30:79:ef:05:ce:39:31:e8:8a:6d:ff:32:49:61:72:
         00:1a:4b:8f:27:55:ee:e6:8a:5c:e0:b1:c1:e7:6e:ff:06:fe:
         a0:61:62:e9:d7:13:a1:cc:a5:09:5e:de:99:14:4b:3a:d3:45:
         f1:6b:ff:68:e5:b6:82:77:3e:78:cb:0d:f5:4c:2c:7a:29:51:
         51:eb:5f:9a:24:fc:c7:20:af:21:ec:94:21:31:7e:89:79:ae:
         b1:a9:10:d7:a5:ee:e8:3b:21:c3:3e:a2:5a:32:a2:1a:65:a1:
         32:0b:20:85:98:f0:d5:fd:a2:de:df:9e:a1:81:57:9b:1d:20:
         de:74:4e:ad:78:da:70:39:05:d7:26:92:0e:fd:13:e1:35:8f:
         82:f3:a1:c3:cc:d2:fd:1f:46:40:3c:df:9b:d3:40:fa:47:9f:
         61:f5:90:1b:cc:e4:3a:28:33:a2:59:68:0a:68:af:f7:fe:43:
         9d:13:ee:45:f7:a5:ee:34:f6:5f:52:72:20:20:f7:cd:a1:19:
         8b:06:d0:35:5e:3a:95:09:b3:21:5e:35:30:b3:5b:5b:be:92:
         1e:ac:9b:87:c7:c2:7e:21:f8:07:e2:04:63:15:ff:3d:8a:3f:
         58:0b:20:41:85:7c:0f:bb:ce:c7:ba:b8:c6:8a:7b:74:11:15:
         fc:a8:c2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:38:45 2024 by rpki-client on console-ams.rpki-client.org