Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/EAA0DC244D4511EEAA0F39264AD9E6FC.roa
File:                     EAA0DC244D4511EEAA0F39264AD9E6FC.roa (raw, json)
Hash identifier:          jxIn0OqmNvxh35X/kvtpt95IlV+mCnhRk4GzrXgvmkc=
Subject key identifier:   EE:3A:CE:EF:FD:65:23:F7:B8:AC:E1:50:28:EB:D5:A5:58:0D:AC:A2
Certificate issuer:       /CN=F3623193AF/serialNumber=227B6B37E17EB0094C0304939B2FC588E1E66E99
Certificate serial:       0527
Authority key identifier: 22:7B:6B:37:E1:7E:B0:09:4C:03:04:93:9B:2F:C5:88:E1:E6:6E:99
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/EAA0DC244D4511EEAA0F39264AD9E6FC.roa
Signing time:             Thu 07 Sep 2023 06:15:18 +0000
ROA not before:           Thu 07 Sep 2023 06:15:15 +0000
ROA not after:            Mon 07 Sep 2048 06:15:15 +0000
asID:                     328358
IP address blocks:        102.134.148.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 May 2024 00:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1319 (0x527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623193AF/serialNumber=227B6B37E17EB0094C0304939B2FC588E1E66E99
        Validity
            Not Before: Sep  7 06:15:15 2023 GMT
            Not After : Sep  7 06:15:15 2048 GMT
        Subject: CN=64f96a76-0fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4a:68:25:d8:e7:2b:86:30:1c:a3:4d:55:a5:
                    ab:cf:65:d3:b9:d3:fc:b2:f2:96:8f:18:13:df:ab:
                    d4:16:96:56:51:cb:ff:68:f8:bf:71:e3:a1:03:b2:
                    8f:6f:3c:68:6a:44:93:fd:7d:a4:13:a6:46:57:36:
                    1d:2a:3e:a3:33:07:0e:06:4d:25:c5:40:50:57:48:
                    76:9f:76:40:d3:0c:11:98:b9:19:21:f3:43:50:e4:
                    70:8d:98:be:cf:71:d7:04:ec:ae:3d:b7:a3:05:a4:
                    23:59:93:ad:fc:81:e7:00:35:13:c0:7f:e0:ae:13:
                    88:9d:c4:b9:d4:4a:c4:0c:1c:35:13:a9:2b:de:a9:
                    ad:26:63:5f:55:8c:f3:90:02:71:3b:b1:b5:5c:fb:
                    cf:dd:16:4d:03:dc:32:07:68:2a:98:c6:45:ee:7a:
                    07:ff:18:4b:1c:ec:33:24:2c:87:b9:d2:8b:ec:c6:
                    21:8c:56:9e:f5:43:48:cd:6f:7b:93:4b:02:98:4c:
                    fd:65:91:67:bb:89:6f:6e:2e:86:c0:bc:6d:97:e1:
                    fd:30:d2:29:2f:10:56:9a:9c:7e:b2:ce:e9:18:48:
                    ac:e2:f6:fd:7e:9d:8f:65:48:58:33:0f:60:ce:ac:
                    38:92:50:57:2b:f3:0f:0d:ec:a7:be:81:32:ab:1e:
                    2c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3A:CE:EF:FD:65:23:F7:B8:AC:E1:50:28:EB:D5:A5:58:0D:AC:A2
            X509v3 Authority Key Identifier:
                keyid:22:7B:6B:37:E1:7E:B0:09:4C:03:04:93:9B:2F:C5:88:E1:E6:6E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/EAA0DC244D4511EEAA0F39264AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.134.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:e8:7f:71:a9:61:7c:0a:03:de:c0:cd:3b:e7:aa:de:27:31:
         42:0f:3d:b5:f8:d6:d4:f8:3c:18:3a:88:bb:d9:1a:f4:8d:4d:
         c5:27:6c:ca:fc:c1:bc:81:46:08:08:d6:83:40:04:81:c7:24:
         7e:e5:da:77:fc:50:d0:3f:e8:1c:5e:2e:9a:ea:09:8c:7f:2f:
         0a:45:ba:82:7a:3f:cb:cc:9c:d2:b9:5e:72:34:cd:97:78:44:
         65:3d:5e:11:b3:22:ec:85:be:66:f2:7c:91:e0:7b:a7:17:4d:
         86:93:0a:27:a0:02:9d:fb:4d:bb:ae:37:3d:f4:8a:6e:4b:05:
         c6:19:be:6d:49:47:84:33:c6:09:ea:f0:03:59:e8:21:f1:49:
         5b:8b:4d:b9:7a:3a:79:81:2b:82:f7:29:42:c0:03:0b:29:25:
         24:51:56:24:51:71:18:68:53:f7:56:dd:89:7e:7c:c4:8f:8f:
         ac:b8:84:2f:a9:e2:0b:28:6b:47:f2:45:fc:34:d5:b4:08:b3:
         c8:75:c6:2e:c1:a8:d0:26:0b:3e:8a:72:21:4c:16:a4:f4:5b:
         2e:c3:0e:0c:27:92:88:8a:d4:38:80:35:3f:59:83:1d:9d:7f:
         c1:ed:96:7b:bd:ab:95:37:91:79:db:ce:18:d1:fc:3f:6f:31:
         27:04:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:38:56 2024 by rpki-client on console-ams.rpki-client.org