Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/C8D38FBE27B311EDB077A7D6F1222468.roa
File:                     C8D38FBE27B311EDB077A7D6F1222468.roa (raw, json)
Hash identifier:          G9sQK+DlJWD/Uk2F142+OLElQRvaRAHH3dgEDnmxnUE=
Subject key identifier:   DB:C1:38:A7:17:48:07:80:87:ED:82:8C:21:5E:62:B4:DF:53:81:5B
Certificate issuer:       /CN=F361F5C9AF/serialNumber=B7DEB01BACBB4B5A7E9C782FFF99FD8E5DC06CB2
Certificate serial:       020F
Authority key identifier: B7:DE:B0:1B:AC:BB:4B:5A:7E:9C:78:2F:FF:99:FD:8E:5D:C0:6C:B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/C8D38FBE27B311EDB077A7D6F1222468.roa
Signing time:             Mon 29 Aug 2022 16:01:04 +0000
ROA not before:           Mon 29 Aug 2022 16:01:01 +0000
ROA not after:            Fri 31 Dec 2049 16:01:01 +0000
asID:                     328475
IP address blocks:        102.215.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F5C9AF/serialNumber=B7DEB01BACBB4B5A7E9C782FFF99FD8E5DC06CB2
        Validity
            Not Before: Aug 29 16:01:01 2022 GMT
            Not After : Dec 31 16:01:01 2049 GMT
        Subject: CN=630ce2c0-ec20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:3e:f6:b4:62:de:0a:99:ed:05:d6:80:39:
                    27:b4:14:c4:f8:29:4e:6d:a0:96:28:37:78:cf:06:
                    26:c2:04:70:ab:f8:9a:30:d3:be:a1:67:51:20:be:
                    0a:ab:4a:fe:1b:11:a2:23:18:63:ae:78:04:ef:2c:
                    7f:3b:c3:4e:95:b1:3c:eb:88:6a:3a:6c:18:b0:90:
                    28:35:a2:d1:40:7e:94:c9:1b:e4:04:67:60:47:3c:
                    a8:fd:3f:3d:c7:e3:21:c5:fd:5e:bb:31:21:e8:a8:
                    1c:8b:96:42:a6:c6:05:12:18:39:e2:c1:18:4f:c1:
                    31:35:f8:8b:8e:f8:97:56:5e:19:b4:34:c4:de:d4:
                    72:d5:5f:37:04:b0:38:f0:58:79:88:a5:2b:c9:53:
                    78:87:2d:3a:f7:50:35:46:12:80:d2:15:bb:57:8f:
                    ca:a9:2d:5a:80:d5:e6:23:93:bd:e9:3b:6f:56:fb:
                    b1:3b:5f:5f:6f:e3:f4:31:4a:03:31:98:fb:f4:1f:
                    2c:87:88:34:6a:20:cc:31:17:82:40:d4:16:42:17:
                    30:ff:2f:04:97:03:49:4f:87:87:44:e5:5b:b7:59:
                    e5:54:3c:83:a9:ab:a9:5c:14:a0:57:f0:76:d3:a1:
                    6b:23:df:07:e8:3f:48:4f:b0:9b:14:4c:3a:49:75:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C1:38:A7:17:48:07:80:87:ED:82:8C:21:5E:62:B4:DF:53:81:5B
            X509v3 Authority Key Identifier:
                keyid:B7:DE:B0:1B:AC:BB:4B:5A:7E:9C:78:2F:FF:99:FD:8E:5D:C0:6C:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/C8D38FBE27B311EDB077A7D6F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:4b:45:3e:b3:ad:e9:80:7d:ab:e3:61:78:b2:db:ff:0d:7f:
         8e:09:e0:34:a5:3c:f7:60:3c:30:ff:98:4f:b9:18:65:31:41:
         f8:ba:fa:b1:9a:c8:e4:fd:a7:77:fe:84:71:1c:8d:4a:92:88:
         b0:ae:bd:76:1e:9d:e6:c1:f6:73:48:ac:41:6f:a9:80:2a:4d:
         40:d0:37:06:00:e0:17:9e:56:4a:a4:33:1d:06:b8:9b:90:c7:
         76:bc:23:f8:a8:86:71:17:57:ea:43:85:83:a6:34:fd:38:31:
         db:a9:79:09:29:5b:76:cc:97:a0:15:e5:cf:2f:b8:9f:55:40:
         11:42:97:47:e1:e4:0c:38:f1:a9:cd:f1:64:25:34:df:f6:bb:
         0d:62:fe:5b:48:b1:d3:3d:a9:50:4b:cd:7a:47:49:23:00:ab:
         58:9d:a0:6b:ca:57:99:ec:a9:63:47:c3:22:40:f9:f1:4f:ec:
         62:f5:03:08:03:ff:08:07:9a:7c:a7:7c:e8:f7:0c:c9:dc:01:
         eb:ea:45:12:73:08:8d:6e:39:cd:d2:8c:c5:ca:57:14:b4:73:
         40:23:33:06:a9:88:6a:88:53:5b:ea:c1:7f:b8:1b:c7:76:e9:
         0f:93:ed:6c:ee:69:18:70:e8:0d:5b:72:16:21:be:3a:9c:49:
         a7:a0:be:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:05:58 2024 by rpki-client on console-ams.rpki-client.org