Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/8D9276EA21CE11ECBAEDFD45D8A014CE.roa
File:                     8D9276EA21CE11ECBAEDFD45D8A014CE.roa (download)
Hash identifier:          tzlJZnHp53vL9Bm6Hn6zdq9LWu8AdbV/WQ2elYKEU4E=
Subject key identifier:   D4:D7:CD:ED:4D:67:9A:E3:11:DC:E0:C1:C8:AB:66:35:D9:E9:BF:C6
Certificate issuer:       /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial:       1B
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/8D9276EA21CE11ECBAEDFD45D8A014CE.roa
ROA valid until:          Sep 30 09:12:33 2023 GMT
asID:                     328327
IP address blocks:
    1: 102.140.74.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
        Validity
            Not Before: Sep 30 09:12:33 2021 GMT
            Not After : Sep 30 09:12:33 2023 GMT
        Subject: CN=61557f84-be81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:26:a9:0e:7f:db:fe:08:90:d9:c9:1b:7a:c1:
                    60:17:21:59:a9:20:1b:04:1c:07:8f:0b:70:1e:d8:
                    0c:3b:f3:f9:a7:e6:6f:5b:84:ec:34:f4:4e:8f:4e:
                    e3:37:b9:d6:c3:d4:f4:bd:eb:c7:19:79:35:56:8d:
                    2e:3b:be:1a:21:07:8b:79:7e:a5:bb:be:05:6e:d7:
                    ad:96:b9:da:7e:09:c6:2c:5b:e7:77:93:ea:45:82:
                    c1:8b:33:6b:fd:c5:de:5a:a2:2a:d0:64:7a:cc:6d:
                    b1:a2:84:a0:9e:8e:48:09:6e:a7:b9:28:1d:d2:13:
                    85:ab:6a:50:81:4f:1d:8a:ab:71:5b:23:a4:16:f2:
                    5b:6f:0e:6f:fc:a0:53:88:9c:de:1a:4c:b4:d0:94:
                    b9:34:2c:ee:f1:df:f8:e2:11:52:b2:fd:bd:98:56:
                    7d:00:4c:ca:80:74:39:ee:bd:1f:4b:4e:b8:93:77:
                    a0:ba:4f:b1:15:ea:e3:c3:5f:72:bf:7b:4c:8d:7a:
                    d7:97:f2:11:cd:3f:01:91:0d:b6:2b:d9:19:07:a9:
                    cf:a3:f5:26:f1:d8:e1:3e:2b:7e:c3:48:df:4e:93:
                    7b:da:12:c7:a7:c4:64:e5:06:0a:4c:89:08:f8:7b:
                    fb:7d:62:01:fe:6b:5c:da:a0:ac:7a:40:a1:ef:bb:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D4:D7:CD:ED:4D:67:9A:E3:11:DC:E0:C1:C8:AB:66:35:D9:E9:BF:C6
            X509v3 Authority Key Identifier: 
                keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/8D9276EA21CE11ECBAEDFD45D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.140.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:36:ce:d5:47:b7:ae:91:af:29:ee:4e:76:67:bd:29:54:71:
         33:9d:ec:45:00:e2:5e:68:d1:8b:ff:71:96:7c:62:74:e1:d5:
         78:94:f5:43:21:1d:53:ce:93:64:5b:47:de:67:42:1f:cb:f4:
         f3:70:bf:94:ac:7d:b4:0a:93:f6:61:db:a1:8e:ec:26:61:28:
         2b:92:92:3e:cd:a1:59:ef:92:88:47:00:a7:35:6c:4a:63:e8:
         50:3a:61:ab:64:f1:86:84:ca:73:1a:4f:1a:74:5b:f8:c3:f9:
         a4:28:f4:95:8e:08:94:bf:4d:64:dc:bc:04:64:a9:90:42:58:
         4d:d1:81:27:b9:f5:a0:f1:77:34:aa:0b:29:26:3e:e0:82:42:
         5e:f9:20:ec:51:8d:39:55:a6:28:82:d8:1e:61:73:d7:66:44:
         1a:fb:1b:53:ce:2e:9a:51:80:78:b0:29:22:81:0a:ad:b1:59:
         54:09:37:3c:cb:9d:54:1e:74:7e:12:90:2c:83:59:d1:1f:ac:
         8c:3f:ab:26:ca:fb:58:68:bf:72:e1:b0:f4:29:8c:40:6f:19:
         0a:8e:11:f4:57:51:73:30:51:13:1a:16:b8:9a:6b:83:b9:dd:
         a5:7e:7c:3b:65:02:e4:05:93:6f:88:81:62:2c:e8:9f:45:cc:
         2e:da:4e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 7 16:05:57 2022 by rpki-client.