Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/166BF55A4D4611EE9234EF264AD9E6FC.roa
File:                     166BF55A4D4611EE9234EF264AD9E6FC.roa (raw, json)
Hash identifier:          YnrKGNDcxHVCROfa7PEhMDoQoVV9/fo99xlEU5dhWXM=
Subject key identifier:   39:E9:D2:0F:C0:93:9E:D8:19:F6:6B:21:4E:C6:26:73:0B:51:E9:90
Certificate issuer:       /CN=F3623193AF/serialNumber=227B6B37E17EB0094C0304939B2FC588E1E66E99
Certificate serial:       0529
Authority key identifier: 22:7B:6B:37:E1:7E:B0:09:4C:03:04:93:9B:2F:C5:88:E1:E6:6E:99
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/166BF55A4D4611EE9234EF264AD9E6FC.roa
Signing time:             Thu 07 Sep 2023 06:16:31 +0000
ROA not before:           Thu 07 Sep 2023 06:16:28 +0000
ROA not after:            Mon 07 Sep 2048 06:16:28 +0000
asID:                     328358
IP address blocks:        102.134.150.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 May 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1321 (0x529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623193AF/serialNumber=227B6B37E17EB0094C0304939B2FC588E1E66E99
        Validity
            Not Before: Sep  7 06:16:28 2023 GMT
            Not After : Sep  7 06:16:28 2048 GMT
        Subject: CN=64f96abf-5140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:26:fc:15:0c:dc:fd:72:ec:7a:45:3e:05:e9:
                    1d:f5:7b:e6:fe:f9:a6:48:c7:d3:fb:f1:84:50:66:
                    32:c4:d3:6e:ed:6a:d3:ce:57:46:f8:15:9f:12:7e:
                    4d:a9:93:5d:98:f9:94:fb:e8:ea:3f:c0:82:12:9a:
                    ad:f0:4d:d6:94:ec:aa:92:58:99:0d:7c:d1:c9:60:
                    ae:d7:be:db:54:3c:6e:ae:ab:19:ff:09:b9:39:f6:
                    b7:7e:c9:2a:b3:f6:78:8a:77:a2:38:a3:d5:f8:cb:
                    ca:2f:27:3d:0f:1f:08:bc:35:39:f9:c0:6f:db:a3:
                    e6:2f:17:01:fb:3d:d0:3e:82:c2:a7:5e:fa:e3:5b:
                    f8:d3:9d:06:42:aa:70:7e:53:c5:16:ad:61:cb:6e:
                    02:7f:dd:d8:b8:8b:b6:47:5d:68:cb:f4:8f:9d:ad:
                    89:32:ae:26:4e:44:2b:34:1f:db:a8:57:aa:2c:fc:
                    2b:66:9a:81:cf:57:36:22:32:55:16:76:5a:5a:c7:
                    c5:bd:fd:39:02:7a:d1:4c:a1:11:39:8d:bd:0f:27:
                    78:f2:b3:a0:a5:0a:fb:88:08:65:e5:82:71:c7:16:
                    5c:d7:8a:01:51:8a:42:13:70:48:13:70:b6:71:93:
                    86:0b:72:b7:59:f1:11:77:7a:e8:72:f8:40:d2:3c:
                    6e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E9:D2:0F:C0:93:9E:D8:19:F6:6B:21:4E:C6:26:73:0B:51:E9:90
            X509v3 Authority Key Identifier:
                keyid:22:7B:6B:37:E1:7E:B0:09:4C:03:04:93:9B:2F:C5:88:E1:E6:6E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/166BF55A4D4611EE9234EF264AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.134.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:b7:0a:5a:14:d3:63:a0:ec:e2:92:11:89:fd:63:bb:b3:f2:
         a5:54:2b:01:97:0b:68:24:58:8b:fa:d7:e2:77:f5:94:03:97:
         61:7c:03:b8:ec:8c:bc:e9:70:6e:71:88:81:e4:63:f4:f9:c4:
         83:66:4f:5f:49:22:5b:f9:91:9e:88:6b:bf:e9:f6:d3:d9:c8:
         2b:21:6e:6a:b7:14:d9:15:15:07:ab:3e:c0:68:86:c2:c2:f1:
         e4:38:24:9c:30:48:b2:4f:31:67:86:d2:59:aa:2f:d4:eb:1f:
         00:ab:98:8d:2e:5e:b8:14:b5:8f:b3:f0:27:77:53:9a:fa:ca:
         51:fb:d7:26:c0:dd:f9:f2:75:70:5a:a4:5b:43:10:b1:2e:06:
         bc:32:c6:ef:5e:39:43:47:53:b4:b8:d9:2d:0c:f7:1d:c4:b5:
         7c:ef:77:f2:f8:9a:e6:61:07:2e:30:e9:c8:74:b0:b2:d8:c2:
         31:a6:52:92:1d:cb:51:3e:6f:ba:1b:3d:ea:9b:90:3e:ad:55:
         89:60:b5:53:ec:3d:16:08:71:ee:21:7e:8e:d9:62:a4:18:2d:
         dd:d7:02:5e:e0:c8:d4:13:18:39:4f:e1:46:64:de:06:35:e0:
         51:34:6a:75:72:ab:b5:57:32:e5:64:23:fe:14:d3:a8:49:94:
         00:2b:5c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:03:35 2024 by rpki-client on console-ams.rpki-client.org