Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/83C792224D4511EEA7BC0C254AD9E6FC.roa
File:                     83C792224D4511EEA7BC0C254AD9E6FC.roa (raw, json)
Hash identifier:          2Q/bfEB9STaafKKdRiRUEltz/CMWbtFgCLYiLPDaJ9Y=
Subject key identifier:   D2:26:39:3F:F5:97:17:7D:C8:51:D2:40:50:DA:F0:B1:81:04:2E:01
Certificate issuer:       /CN=F3623193AF/serialNumber=227B6B37E17EB0094C0304939B2FC588E1E66E99
Certificate serial:       0523
Authority key identifier: 22:7B:6B:37:E1:7E:B0:09:4C:03:04:93:9B:2F:C5:88:E1:E6:6E:99
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/83C792224D4511EEA7BC0C254AD9E6FC.roa
Signing time:             Thu 07 Sep 2023 06:12:25 +0000
ROA not before:           Thu 07 Sep 2023 06:12:22 +0000
ROA not after:            Mon 07 Sep 2048 06:12:22 +0000
asID:                     328358
IP address blocks:        102.134.144.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 24 May 2024 00:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1315 (0x523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623193AF/serialNumber=227B6B37E17EB0094C0304939B2FC588E1E66E99
        Validity
            Not Before: Sep  7 06:12:22 2023 GMT
            Not After : Sep  7 06:12:22 2048 GMT
        Subject: CN=64f969c9-6a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b1:1d:94:9c:82:b2:28:11:cf:bd:f1:a2:56:
                    d7:24:50:bc:ae:f4:76:b8:cf:a8:90:a8:65:9d:b8:
                    01:e4:c7:3e:db:87:21:e1:13:cc:3f:63:5d:28:75:
                    ba:7e:2b:f7:42:85:80:8e:92:33:5c:64:41:fa:18:
                    35:fd:05:3f:61:2f:1f:44:d7:89:54:4e:b9:0f:95:
                    fb:c8:be:e5:6e:e7:10:6c:e2:53:51:59:7e:01:7d:
                    26:09:8a:e6:d3:f1:3b:0a:39:c3:5a:12:20:e7:b8:
                    77:d6:f0:3b:90:82:5d:0f:2c:70:7a:9f:24:46:5f:
                    a7:f7:13:5f:95:26:2c:7e:3c:99:cf:38:d3:5c:86:
                    1e:5f:13:4b:b6:fe:a5:e6:f1:d0:41:81:f8:b8:f8:
                    b5:7b:78:a7:26:a3:30:07:c9:13:60:b0:ef:ab:97:
                    47:59:9d:3a:3a:96:22:52:06:bd:93:4a:93:52:90:
                    bc:0f:c7:c9:c7:f0:6d:3f:b9:0c:f8:e1:95:44:b7:
                    d0:6f:b1:7e:16:e7:b0:6e:a0:c0:d4:5d:2e:14:14:
                    f0:c4:85:34:60:40:28:9e:8b:1d:98:a8:84:3e:68:
                    9f:0b:10:27:a7:70:29:e8:e3:56:6d:ec:16:a9:27:
                    97:02:3a:fe:e0:de:3b:56:a9:42:5c:12:26:dd:1d:
                    2e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:26:39:3F:F5:97:17:7D:C8:51:D2:40:50:DA:F0:B1:81:04:2E:01
            X509v3 Authority Key Identifier:
                keyid:22:7B:6B:37:E1:7E:B0:09:4C:03:04:93:9B:2F:C5:88:E1:E6:6E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/83C792224D4511EEA7BC0C254AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.134.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:95:db:74:a4:3c:35:fe:af:fc:1a:d3:1d:4f:9f:aa:d3:6c:
         b1:c7:77:77:0a:d4:b3:a7:96:15:95:c4:bd:01:02:aa:f3:aa:
         8a:5b:f2:2b:6f:8f:d9:80:b6:5b:7a:0c:18:17:ab:e5:33:ae:
         fa:a3:08:3f:8a:06:aa:65:35:c4:49:05:ed:91:e0:30:13:4d:
         03:a4:03:70:bd:da:d8:67:79:6f:83:22:a8:67:49:bd:cd:0e:
         a9:63:c6:81:53:91:bf:2d:98:2f:1e:4f:ea:f4:39:6a:d7:8c:
         6d:ef:d0:62:bb:b2:9c:73:c8:2e:bd:61:36:61:0c:22:ba:a0:
         2d:be:7e:69:b1:92:2e:e5:2c:63:7b:e4:fb:c0:6d:35:26:45:
         52:12:3e:63:93:56:92:9e:98:49:da:e7:17:48:cd:2c:a5:05:
         3a:bf:36:c0:12:4f:af:be:7e:5e:56:23:91:b3:e6:a8:9f:4e:
         ac:ce:20:60:93:77:97:22:29:18:7f:1a:a5:ed:c2:c0:ce:c5:
         5a:83:f9:f4:04:b1:16:68:67:65:09:68:ed:37:5a:ad:66:ae:
         f7:02:d1:3c:91:17:71:a5:85:54:74:ad:95:23:95:0c:53:72:
         f2:b0:ec:b8:f3:27:ef:d9:78:b1:12:ba:9d:d7:46:a3:6f:ff:
         1f:bc:38:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 01:45:57 2024 by rpki-client on console-fra.rpki-client.org