Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/3AF75FBE4D4511EE813B1A244AD9E6FC.roa
File:                     3AF75FBE4D4511EE813B1A244AD9E6FC.roa (raw, json)
Hash identifier:          XqojoxDH+1YMt/1tOfPBIKEzHRoMcMMXujH/r67XSkE=
Subject key identifier:   94:E2:65:FC:57:8D:B7:E1:4E:50:A0:98:DE:48:B1:22:B8:43:81:95
Certificate issuer:       /CN=F3623193AF/serialNumber=227B6B37E17EB0094C0304939B2FC588E1E66E99
Certificate serial:       0521
Authority key identifier: 22:7B:6B:37:E1:7E:B0:09:4C:03:04:93:9B:2F:C5:88:E1:E6:6E:99
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/3AF75FBE4D4511EE813B1A244AD9E6FC.roa
Signing time:             Thu 07 Sep 2023 06:10:23 +0000
ROA not before:           Thu 07 Sep 2023 06:10:20 +0000
ROA not after:            Mon 07 Sep 2048 06:10:20 +0000
asID:                     328358
IP address blocks:        102.134.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 May 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1313 (0x521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623193AF/serialNumber=227B6B37E17EB0094C0304939B2FC588E1E66E99
        Validity
            Not Before: Sep  7 06:10:20 2023 GMT
            Not After : Sep  7 06:10:20 2048 GMT
        Subject: CN=64f9694f-70f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:aa:6b:32:16:2c:85:18:41:5a:3c:32:85:
                    7a:75:84:ba:b2:11:37:13:5b:b6:a5:75:39:55:48:
                    ed:13:5f:df:f7:32:b5:67:33:4c:6a:92:44:69:ca:
                    e4:40:6c:d4:5d:90:2a:9e:f6:6d:be:22:33:da:e7:
                    31:e9:86:e8:66:11:61:84:45:b4:13:e7:f3:cc:ce:
                    73:b1:7e:d7:64:f5:27:79:e6:16:d1:2b:00:af:71:
                    ed:54:be:a3:c4:05:09:21:93:ce:07:9a:b8:4c:92:
                    13:2e:be:e0:c0:94:4e:c8:51:a5:88:7a:84:55:a7:
                    95:fd:31:22:28:6a:a0:3c:a2:fa:0e:d0:58:32:2d:
                    c5:d5:92:0d:c9:a2:67:2a:ff:92:e0:28:0d:eb:45:
                    0b:a1:ec:f6:79:13:c3:03:9b:03:d5:c8:d3:aa:7b:
                    cf:a2:cd:f6:6f:63:9a:28:7d:6d:ed:55:f3:d9:3d:
                    b7:ad:fd:22:ae:b6:68:a3:7c:68:3a:e8:f5:18:36:
                    f3:5f:1c:76:1e:1e:51:b8:98:1e:70:71:8f:1e:3a:
                    49:46:bd:09:c6:1a:d3:02:f0:6d:89:7f:1a:e0:45:
                    87:6a:6f:73:e0:87:42:8b:5e:b9:0d:8b:33:46:5f:
                    c4:c0:17:c9:09:6a:83:52:87:9c:3c:99:21:39:e3:
                    06:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E2:65:FC:57:8D:B7:E1:4E:50:A0:98:DE:48:B1:22:B8:43:81:95
            X509v3 Authority Key Identifier:
                keyid:22:7B:6B:37:E1:7E:B0:09:4C:03:04:93:9B:2F:C5:88:E1:E6:6E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/3AF75FBE4D4511EE813B1A244AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.134.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:8a:53:60:6c:a0:65:b4:cf:2e:67:fd:24:62:3b:c9:9e:a5:
         94:c2:6e:a6:97:42:93:34:22:2e:a1:13:e8:c2:8a:7e:0f:e4:
         d5:00:1a:a0:e7:d5:1e:9f:e3:ab:8b:f9:82:48:39:fd:d9:d3:
         3d:10:dd:ec:33:48:a9:af:83:e7:8a:83:30:2d:49:cf:77:94:
         d4:73:48:20:81:5b:8f:5a:93:f3:b4:00:d8:7d:ba:16:4b:94:
         43:67:49:31:1d:a4:7d:f1:94:e2:ff:f5:34:33:0a:7e:e3:58:
         29:25:13:97:60:96:c1:1b:73:35:87:90:f7:77:a9:51:49:46:
         74:8f:6d:31:ad:b4:f0:c9:63:ae:f6:4f:1e:11:9b:9a:59:4b:
         ed:1e:1e:30:fd:bf:23:eb:7f:d8:94:3b:d2:23:09:58:d2:e7:
         98:82:88:53:fb:ea:ff:74:b4:99:be:5b:ee:d7:36:90:4d:5c:
         34:48:5e:76:40:d2:d1:61:c0:03:42:c5:b8:4f:02:37:47:4a:
         77:12:d3:ea:30:44:dd:3c:1f:a9:52:63:26:4a:57:b3:26:41:
         ae:14:b8:a2:6c:10:98:f5:49:95:3f:2f:f7:71:38:97:99:15:
         d5:e8:92:80:31:22:dd:47:bc:8c:04:f4:61:4d:41:04:92:ba:
         51:5c:7a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:03:35 2024 by rpki-client on console-ams.rpki-client.org