Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/A6CBD14621CA11EC8BE41840D8A014CE.roa
File:                     A6CBD14621CA11EC8BE41840D8A014CE.roa (download)
Hash identifier:          6bVIwAA7c+QdDat3w72O8KEr1+WW/JiTHcBbydb5nE8=
Subject key identifier:   0D:F9:D7:65:2D:73:FD:97:C6:9C:C3:5A:C4:43:16:AB:73:A8:8B:59
Certificate issuer:       /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial:       0F
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/A6CBD14621CA11EC8BE41840D8A014CE.roa
ROA valid until:          Sep 30 08:44:37 2023 GMT
asID:                     328327
IP address blocks:
    1: 102.140.67.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
        Validity
            Not Before: Sep 30 08:44:37 2021 GMT
            Not After : Sep 30 08:44:37 2023 GMT
        Subject: CN=615578f9-7d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a1:4f:08:fd:d8:4f:25:70:9a:e8:ec:23:6b:
                    8c:70:9c:b9:0d:b7:c6:5d:4a:95:50:77:48:c9:76:
                    f3:8b:03:72:8e:d9:62:ad:bb:4e:d6:04:fd:12:ed:
                    76:82:dc:e2:55:70:da:7e:dc:f5:b2:8e:44:9b:f8:
                    0c:79:45:bd:33:55:96:c6:91:4c:89:f0:dd:17:4a:
                    4f:8d:fe:d9:e0:7f:12:1a:b6:36:5a:99:45:55:6e:
                    e1:00:b5:df:be:c7:a6:6b:7c:a6:d8:f3:63:5a:2f:
                    69:39:6a:f1:03:50:4e:7a:9e:8a:85:a0:31:25:06:
                    e0:33:1a:2d:96:c8:ed:ea:0a:35:37:64:46:9b:95:
                    8b:8d:fe:a7:1b:8f:16:5e:2a:c4:ca:7c:63:be:9f:
                    f1:89:c7:29:76:b1:bb:21:a0:38:8e:33:ee:3d:10:
                    f0:ae:b4:35:48:01:af:04:e9:bb:40:c6:a0:83:b9:
                    39:6f:ef:b8:cf:5c:1b:4c:4b:71:57:6b:ed:60:04:
                    68:ba:af:ad:bb:0e:61:c0:d8:5e:f8:90:85:95:90:
                    46:bf:79:f9:c0:ae:3f:16:1f:bb:38:09:b2:e6:da:
                    4a:ca:56:c5:15:d3:7e:52:03:e1:cb:65:17:66:78:
                    c1:7e:03:d4:90:6f:b9:80:38:7b:c5:3c:22:37:30:
                    88:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0D:F9:D7:65:2D:73:FD:97:C6:9C:C3:5A:C4:43:16:AB:73:A8:8B:59
            X509v3 Authority Key Identifier: 
                keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/A6CBD14621CA11EC8BE41840D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.140.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:5f:91:35:65:1b:53:33:45:e4:05:6d:cf:d7:18:92:37:dc:
         87:d9:69:99:d5:73:e1:b7:a9:15:d0:6b:fe:ab:cf:99:22:35:
         d8:51:dc:6f:3e:87:e7:9d:6c:10:bd:ea:44:f8:af:bb:01:14:
         37:53:c2:80:ba:30:b0:22:df:3c:88:f9:66:b7:b4:7a:c2:7f:
         98:e8:80:f7:3b:41:00:4e:8a:e9:27:64:18:59:ef:77:7f:f6:
         1e:c8:54:fa:5f:b9:5d:a2:4f:c3:10:2d:73:16:9a:e9:8e:8d:
         22:cd:76:6d:08:ca:34:75:b9:19:df:dc:7c:2b:6e:4e:7a:1f:
         78:8a:1e:90:7b:a2:9f:80:b8:6c:a2:a6:f8:53:13:58:52:96:
         e9:3c:49:ff:6f:c2:56:03:3b:a3:3e:8a:f6:07:d9:3a:3e:49:
         82:57:82:7c:a9:57:dd:67:5d:96:4a:9d:45:a4:a9:d8:f6:12:
         6f:a2:f7:a4:f3:d2:90:3c:08:45:19:7e:56:75:72:12:06:cf:
         e2:f6:16:06:2a:85:f5:0b:c8:f4:03:00:23:cf:b8:e9:05:ab:
         d5:38:f4:45:51:ba:45:f0:d8:0c:19:72:14:69:90:37:b7:a4:
         5b:80:4c:ea:e6:55:0a:8b:7c:37:3a:41:c0:2a:21:06:4d:7a:
         74:aa:0c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 7 16:05:57 2022 by rpki-client.