Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/5491A80AAD3411EDA19800A2F1222468.roa
File:                     5491A80AAD3411EDA19800A2F1222468.roa (raw, json)
Hash identifier:          6a4E96TgRBG5fQKA2aU/mjbQ67DgfGyLZwZMLGFF474=
Subject key identifier:   33:75:A2:F7:00:11:A8:8F:C8:17:04:7F:B6:E7:3A:77:14:05:D0:83
Certificate issuer:       /CN=F3627A02AF/serialNumber=56952EF930F44FFE912770E3DBC163049F5AFDB7
Certificate serial:       068F
Authority key identifier: 56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/5491A80AAD3411EDA19800A2F1222468.roa
Signing time:             Wed 15 Feb 2023 13:26:19 +0000
ROA not before:           Wed 15 Feb 2023 13:26:14 +0000
ROA not after:            Thu 14 Feb 2030 13:26:14 +0000
asID:                     37734
IP address blocks:        102.212.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 May 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1679 (0x68f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A02AF/serialNumber=56952EF930F44FFE912770E3DBC163049F5AFDB7
        Validity
            Not Before: Feb 15 13:26:14 2023 GMT
            Not After : Feb 14 13:26:14 2030 GMT
        Subject: CN=63ecdd7b-6a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:a4:98:d0:b4:2a:95:62:fb:9e:e5:c0:b6:
                    12:b9:76:16:98:7d:18:fd:fc:2e:57:b6:ac:18:92:
                    d0:13:23:63:2a:ff:7e:3b:aa:b3:9d:33:69:0f:2f:
                    89:8e:9f:3b:17:75:c0:c5:79:1a:65:17:9d:2d:d8:
                    a1:cb:74:c5:6b:82:82:34:a1:02:91:90:60:65:78:
                    7f:6b:57:9c:67:aa:f6:5a:02:f4:55:03:b2:3c:1c:
                    e0:10:88:41:f3:89:59:46:8b:23:18:f7:04:35:13:
                    0a:c6:52:a8:78:6b:5f:f8:01:17:40:82:e3:3c:e3:
                    53:9f:c4:bb:07:c0:b2:98:07:cf:f5:c4:be:28:3c:
                    1e:df:b0:64:08:e5:9f:40:0c:f3:08:3e:e7:09:f2:
                    62:94:69:c0:26:e4:0f:1d:66:bc:ba:e6:77:19:d1:
                    60:be:65:d5:8d:0d:af:5d:4f:0e:a2:a3:58:e4:cb:
                    b4:e5:34:e2:06:58:c5:c0:fd:10:8e:4c:ce:36:31:
                    7d:6d:e1:0c:fc:98:b6:18:02:e4:55:58:98:3c:46:
                    09:78:88:ab:9d:99:b3:89:12:73:83:f0:5c:c0:4e:
                    99:32:71:de:0a:93:81:ab:06:d0:74:3d:a3:cf:de:
                    04:13:f3:99:51:f8:5d:af:a9:29:89:e1:a9:d0:1e:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:75:A2:F7:00:11:A8:8F:C8:17:04:7F:B6:E7:3A:77:14:05:D0:83
            X509v3 Authority Key Identifier:
                keyid:56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/5491A80AAD3411EDA19800A2F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:57:4a:a1:cd:d5:22:48:e7:b6:26:32:97:b5:b8:e3:2c:fc:
         0c:1b:ee:48:2c:f6:32:d8:0c:24:70:c3:fa:dc:3c:48:c7:f9:
         f6:25:9c:c1:44:8b:a9:9c:ea:21:45:42:39:99:a0:52:33:1d:
         a5:a7:2f:00:36:a4:c4:fa:9e:d8:c0:ad:6a:6e:ad:2e:48:f2:
         4e:c4:6b:b7:48:ee:e5:8e:77:72:ac:8a:5e:f4:24:e0:7b:41:
         85:91:96:a1:7a:77:70:13:e9:b0:54:95:be:fe:b5:2b:dc:0f:
         cd:54:fb:73:7e:83:17:b3:6a:41:34:86:8b:88:43:98:ee:fd:
         36:2f:3f:89:4a:1f:5b:d4:94:6f:bf:de:9f:4e:34:bf:cd:11:
         dc:e0:67:70:89:07:e8:c2:28:11:63:ab:00:b5:46:af:e8:bb:
         72:ee:e6:21:9c:a6:3c:f0:66:f7:1a:10:6b:2f:ea:cb:8d:8f:
         7e:b0:cb:63:47:88:6c:06:dc:63:8c:92:95:a6:3f:1c:b5:8b:
         96:5a:27:7d:da:0b:ff:b4:fe:60:85:f6:3a:fb:f5:d4:c2:5e:
         4d:f8:18:84:06:f4:87:f6:11:6b:76:7a:9b:64:85:8c:9f:3f:
         3e:fe:b6:d0:41:fe:ef:26:47:d0:e7:38:3b:9b:b1:45:f7:c0:
         02:70:f5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:31:19 2024 by rpki-client on console-fra.rpki-client.org