Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/8FF0A1FAA02011EEBF2D9B5FD25BE465.roa
File:                     8FF0A1FAA02011EEBF2D9B5FD25BE465.roa (raw, json)
Hash identifier:          UF1KCPGK9tM1Z2PPwZCkRuGrpdODO42msXnVo7S4ZYU=
Subject key identifier:   96:20:E2:DC:6E:94:B9:D9:91:55:2D:95:93:0A:9B:EB:BB:2D:E6:3A
Certificate issuer:       /CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Certificate serial:       03ED
Authority key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/8FF0A1FAA02011EEBF2D9B5FD25BE465.roa
Signing time:             Thu 21 Dec 2023 16:47:01 +0000
ROA not before:           Thu 21 Dec 2023 16:46:57 +0000
ROA not after:            Tue 31 Dec 2024 16:46:57 +0000
asID:                     212238
IP address blocks:        102.218.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Apr 2024 00:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1005 (0x3ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
        Validity
            Not Before: Dec 21 16:46:57 2023 GMT
            Not After : Dec 31 16:46:57 2024 GMT
        Subject: CN=65846c05-5aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9a:1f:ac:a0:4c:db:71:ef:1e:ec:98:df:f3:
                    f2:1e:af:e0:69:67:f9:c4:e3:b2:42:37:4f:70:80:
                    0d:fc:f7:12:b4:e5:54:f6:6d:e9:d9:b5:fa:96:42:
                    c6:0a:a8:98:12:f9:62:a8:f7:63:fb:11:67:8b:a7:
                    dc:af:d1:ea:01:0e:3a:a6:03:f2:f3:f3:d8:31:06:
                    2e:ae:db:12:e9:3c:6b:a5:59:40:fc:c0:ec:22:ef:
                    9b:af:f6:a5:63:96:38:cd:53:c2:82:16:e1:9d:52:
                    a8:05:42:37:09:76:b9:af:76:75:b8:e6:2a:75:29:
                    1d:59:eb:ee:51:b7:39:f5:46:65:78:0f:c2:e5:6e:
                    e8:21:7f:bf:30:52:67:58:59:de:d4:22:d4:e2:44:
                    5f:44:fa:90:ca:3a:e6:f6:4d:50:9c:42:91:a0:ca:
                    0e:19:1f:e4:74:a0:34:f4:50:55:02:ae:b2:df:4b:
                    13:94:2a:78:c9:81:72:10:d0:54:91:a3:21:81:0e:
                    76:be:21:d6:5b:31:df:e0:98:c6:c2:a0:7e:75:7e:
                    ea:65:e9:c7:52:18:fa:db:d2:78:db:1d:f6:36:42:
                    8c:14:23:a5:f3:a7:90:69:27:ad:09:81:38:ba:dd:
                    ec:ca:46:2b:8e:d6:50:7c:03:bb:d3:53:6c:72:25:
                    eb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:20:E2:DC:6E:94:B9:D9:91:55:2D:95:93:0A:9B:EB:BB:2D:E6:3A
            X509v3 Authority Key Identifier:
                keyid:63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/8FF0A1FAA02011EEBF2D9B5FD25BE465.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:78:ec:df:b4:ab:b7:39:22:07:ff:58:6e:7a:25:c6:27:90:
         56:41:d2:c1:ad:a4:fe:ca:0f:62:de:cb:72:17:f3:03:39:a3:
         de:64:fb:89:d9:ae:5f:45:5b:fc:23:ba:c9:30:fa:92:48:9f:
         01:f7:0c:48:32:cd:c4:bc:9d:79:dd:96:20:d2:53:ae:b4:b3:
         f2:a3:b2:88:4b:7f:bb:e6:71:09:ab:75:2f:a5:b4:4e:2e:fd:
         df:3f:6d:ee:4d:fa:f8:5e:f7:e0:2e:0d:26:e4:d7:47:ad:ab:
         95:02:7a:ed:d2:aa:8c:c0:09:5c:e6:d0:8d:1f:56:4c:7a:38:
         0e:f3:ce:63:11:35:46:e5:1e:40:6d:c4:dc:70:4b:bb:ea:e1:
         d8:8c:76:7d:9e:34:cf:15:3c:17:89:a8:4b:de:bf:3a:b2:03:
         91:c5:b2:4f:30:67:b6:9f:2d:c2:2b:69:35:9c:a4:a2:dc:ae:
         21:99:74:e5:3b:d4:75:83:c6:33:af:04:bb:2a:a9:0d:7b:18:
         1a:99:01:e0:e7:e0:5e:8d:78:25:a4:d1:ac:07:36:dc:c2:bd:
         81:34:63:dc:df:cc:6c:8a:97:40:ce:57:c5:f7:e7:e8:ca:7e:
         1f:67:1d:83:14:33:8f:01:b3:1f:43:c1:63:d2:1d:72:74:f9:
         c0:58:f9:7a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA+0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkMxOENBRjExMC8GA1UEBRMoNjNFMEJCNkIzNDMzQ0Q1RDcxQTQyQjAxNjlCREIw
MUUyMEU0NTU3RjAeFw0yMzEyMjExNjQ2NTdaFw0yNDEyMzExNjQ2NTdaMBgxFjAU
BgNVBAMTDTY1ODQ2YzA1LTVhYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUmh+soEzbce8e7Jjf8/Ier+BpZ/nE47JCN09wgA389xK05VT2benZtfqW
QsYKqJgS+WKo92P7EWeLp9yv0eoBDjqmA/Lz89gxBi6u2xLpPGulWUD8wOwi75uv
9qVjljjNU8KCFuGdUqgFQjcJdrmvdnW45ip1KR1Z6+5Rtzn1RmV4D8Llbughf78w
UmdYWd7UItTiRF9E+pDKOub2TVCcQpGgyg4ZH+R0oDT0UFUCrrLfSxOUKnjJgXIQ
0FSRoyGBDna+IdZbMd/gmMbCoH51fupl6cdSGPrb0njbHfY2QowUI6Xzp5BpJ60J
gTi63ezKRiuO1lB8A7vTU2xyJevTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUliDi
3G6UudmRVS2Vkwqb67st5jowHwYDVR0jBBgwFoAUY+C7azQzzV1xpCsBab2wHiDk
VX8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJDMThDLzQ1ODgzMjkwQUJEMTExRUJCMUE2NzE1RUY4QUVBMjI4L1ktQzdh
elF6elYxeHBDc0JhYjJ3SGlEa1ZYOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1ktQzdhelF6elYxeHBDc0JhYjJ3SGlEa1ZYOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJDMThDLzQ1ODgzMjkwQUJEMTExRUJCMUE2NzE1RUY4
QUVBMjI4LzhGRjBBMUZBQTAyMDExRUVCRjJEOUI1RkQyNUJFNDY1LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2mcwDQYJKoZIhvcNAQEL
BQADggEBAL547N+0q7c5Igf/WG56JcYnkFZB0sGtpP7KD2Ley3IX8wM5o95k+4nZ
rl9FW/wjuskw+pJInwH3DEgyzcS8nXndliDSU660s/KjsohLf7vmcQmrdS+ltE4u
/d8/be5N+vhe9+AuDSbk10etq5UCeu3SqozACVzm0I0fVkx6OA7zzmMRNUblHkBt
xNxwS7vq4diMdn2eNM8VPBeJqEvevzqyA5HFsk8wZ7afLcIraTWcpKLcriGZdOU7
1HWDxjOvBLsqqQ17GBqZAeDn4F6NeCWk0awHNtzCvYE0Y9zfzGyKl0DOV8X35+jK
fh9nHYMUM48Bsx9DwWPSHXJ0+cBY+Xo=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:10:29 2024 by rpki-client on console-ams.rpki-client.org