Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/2C9312F421CF11EC9E0B1247D8A014CE.roa
File:                     2C9312F421CF11EC9E0B1247D8A014CE.roa (download)
Hash identifier:          rwCS8uWj0DvppYtq5zC8XlWINTCR6aj5mTX3UCz9Ig4=
Subject key identifier:   05:C0:18:9F:EA:38:7E:0F:8B:39:4E:8C:A4:EC:CF:44:63:D6:94:FE
Certificate issuer:       /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial:       23
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/2C9312F421CF11EC9E0B1247D8A014CE.roa
ROA valid until:          Sep 30 09:17:00 2023 GMT
asID:                     328327
IP address blocks:
    1: 102.140.76.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
        Validity
            Not Before: Sep 30 09:17:00 2021 GMT
            Not After : Sep 30 09:17:00 2023 GMT
        Subject: CN=6155808f-2a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ff:21:82:a2:99:35:9e:99:af:5c:67:05:71:
                    2d:34:a7:6a:99:91:ea:3c:02:f9:08:f7:3e:1f:75:
                    70:30:31:b6:4f:fb:af:21:2a:8d:9e:9c:a2:5a:de:
                    43:fc:88:05:f8:02:dc:71:fa:36:9c:1c:ef:05:6f:
                    14:e6:65:a2:ea:f4:3e:30:71:a6:81:0f:74:16:80:
                    6c:90:1c:e0:f3:94:35:8f:4b:1a:bb:42:3b:e0:42:
                    d4:f2:8a:51:bb:b4:01:22:64:61:aa:54:0b:d2:b8:
                    8f:e2:5b:c5:7b:f3:83:c8:e0:da:fd:df:29:e4:b7:
                    4f:47:20:ee:b3:83:b9:67:f3:a8:18:ea:ed:d7:5c:
                    16:22:8a:ba:2f:a6:67:1e:5e:af:3c:f5:3e:74:71:
                    6f:56:03:42:67:59:60:a3:0b:75:12:ad:68:42:b2:
                    98:4a:f1:cc:2c:07:bf:41:9a:f2:9d:55:82:1e:be:
                    87:d2:2a:79:96:75:28:ad:33:08:a3:ed:69:22:24:
                    e5:b4:b7:6a:54:68:73:fe:72:61:29:45:c2:0d:22:
                    80:f7:41:39:11:63:ef:96:3a:5c:04:e8:ed:37:80:
                    88:3d:71:0b:ad:23:65:b4:13:64:2a:25:a1:c9:2e:
                    ce:8c:04:fd:8c:61:26:5d:98:8b:48:20:47:a6:7f:
                    6a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                05:C0:18:9F:EA:38:7E:0F:8B:39:4E:8C:A4:EC:CF:44:63:D6:94:FE
            X509v3 Authority Key Identifier: 
                keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/2C9312F421CF11EC9E0B1247D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.140.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:01:e4:af:ee:6c:6b:41:62:49:e1:d0:82:b3:fe:62:00:60:
         a8:63:34:91:9a:9e:93:b8:d7:7c:f8:14:a9:86:83:24:c1:e2:
         cd:5c:34:3e:a0:f6:cc:dd:df:81:81:69:76:1f:a2:10:ff:b2:
         a6:22:cb:22:bd:f5:ae:cd:13:b8:af:1e:85:7c:df:13:f4:8c:
         ce:c2:a9:d0:26:54:6b:0b:26:5c:b4:23:d3:e6:4f:b6:7b:0a:
         17:97:da:ca:92:52:09:9b:0c:e9:38:20:61:82:d3:dc:7f:bc:
         3f:78:fd:73:e5:cd:2e:e2:75:e7:5f:9c:af:b1:12:dc:f9:da:
         f0:0e:5e:4f:4a:15:77:5d:b3:a5:e6:5d:90:c6:ae:00:b9:c0:
         a1:e6:90:1d:a9:c6:19:2b:4c:55:3b:19:2b:e3:d9:a2:f1:82:
         43:5d:65:71:e4:df:b6:fc:02:d9:95:97:3c:77:04:7d:58:76:
         62:ba:55:ca:e3:c2:0c:58:c4:c7:ef:1d:0e:79:aa:1a:20:fb:
         67:dd:16:fb:76:c3:4d:03:85:f9:7f:66:70:1d:8d:e4:03:cc:
         15:76:b4:4b:ad:80:c3:f6:1d:7c:ce:91:46:14:68:56:a1:fd:
         74:d1:f4:2b:be:4f:6b:f3:83:a4:4f:b1:12:5c:1c:ca:00:91:
         f4:ac:83:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 7 16:43:27 2022 by rpki-client.