Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/32AA96508D2211EF8E79A392762E951A.roa
File:                     32AA96508D2211EF8E79A392762E951A.roa (raw, json)
Hash identifier:          +cqpwCorjrgix2lFr0wAINZEe+QRaw7XNhLsOSU4kYs=
Subject key identifier:   73:56:36:F4:4A:C8:C8:90:92:E9:63:CC:09:80:C1:71:C3:92:18:14
Certificate issuer:       /CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Certificate serial:       034B
Authority key identifier: 03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/32AA96508D2211EF8E79A392762E951A.roa
Signing time:             Fri 18 Oct 2024 07:25:49 +0000
ROA not before:           Fri 18 Oct 2024 07:25:46 +0000
ROA not after:            Sat 18 Oct 2025 07:25:46 +0000
asID:                     328660
IP address blocks:        102.223.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843 (0x34b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
        Validity
            Not Before: Oct 18 07:25:46 2024 GMT
            Not After : Oct 18 07:25:46 2025 GMT
        Subject: CN=67120d7d-668e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b8:79:a1:02:c9:a5:e4:57:4f:43:eb:05:62:
                    0f:5a:1f:73:ef:39:de:c0:fe:23:41:41:65:68:08:
                    8c:07:50:f9:d8:f3:cb:6b:69:44:92:77:09:c8:4e:
                    0c:ee:63:12:3b:e1:72:01:87:38:1f:7d:2c:65:c7:
                    e0:96:87:42:9e:a4:17:81:e6:27:ef:e3:91:21:48:
                    1a:ea:35:1e:d8:2a:64:44:55:98:b6:34:c0:c2:80:
                    8b:63:90:07:13:a0:84:bc:08:fa:c5:49:89:9b:7b:
                    43:46:29:46:74:82:b6:b4:d0:64:4e:83:0c:80:c7:
                    58:2a:3e:d6:75:a4:f0:ee:ba:5c:46:fc:82:a1:78:
                    d1:10:9c:50:4b:0c:7d:94:4e:d6:d1:02:2d:f3:08:
                    12:e5:9f:df:bf:66:5b:9b:a6:58:47:54:2a:ca:0e:
                    f9:e7:be:72:5a:73:fb:f3:3e:8e:e3:57:00:08:66:
                    8c:bd:9f:70:71:18:5d:65:ba:52:f4:c8:82:61:9f:
                    1e:67:ac:c2:3d:d6:b7:83:4b:5c:bb:13:e2:19:56:
                    37:65:07:9e:53:43:eb:75:01:54:16:e6:78:dc:16:
                    ba:ec:2b:64:57:1d:b6:83:3b:76:81:76:e5:1e:4a:
                    4b:37:b0:4d:94:2a:bf:ee:79:8c:61:d9:f0:fb:b4:
                    49:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:56:36:F4:4A:C8:C8:90:92:E9:63:CC:09:80:C1:71:C3:92:18:14
            X509v3 Authority Key Identifier:
                keyid:03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/32AA96508D2211EF8E79A392762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.223.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:e0:18:12:3f:32:9e:49:56:26:1e:ba:5d:e3:e6:41:18:c2:
         02:70:7f:93:64:ec:57:50:0f:4c:6c:b2:37:b2:1e:f8:b9:69:
         c0:c2:2f:f1:ee:df:75:55:af:91:1c:31:d6:6a:13:c5:8d:e9:
         ae:08:30:e3:d1:79:9b:c4:27:71:6d:d9:2c:43:b9:43:93:7d:
         82:68:c6:ab:18:84:cc:74:08:2e:99:d0:38:b8:54:71:8e:30:
         df:38:cb:4f:9e:82:44:c3:77:08:88:95:a6:12:26:e0:ae:69:
         2e:80:5f:f3:0a:e8:7f:8b:7a:31:dc:26:42:58:ea:c8:9d:b3:
         5a:df:2b:71:06:c3:fe:4e:34:ff:be:e5:1c:2d:bc:89:b7:b5:
         09:fd:ab:4d:53:1b:89:91:04:25:4d:0d:7a:32:21:a5:bc:ab:
         c2:64:21:c3:cb:b8:fc:28:43:f5:ca:d8:55:f5:20:c2:85:fa:
         d0:a7:47:cf:b3:12:48:b9:e2:c5:33:52:63:19:8c:83:d3:fb:
         bc:62:a4:e4:4b:e2:51:19:10:ad:7e:5d:fa:3a:9e:fc:d1:00:
         13:f6:e3:23:80:08:62:5b:4f:20:87:f4:bf:46:d5:bf:a9:05:
         e1:ec:b5:b9:f1:05:1b:f5:3f:0f:a8:af:78:d2:81:a7:eb:ff:
         33:a3:94:56
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA0swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTQzOTdBRjExMC8GA1UEBRMoMDNFMjBFRUYxNTA1MDNBMEIxOTUxMThBRTg4NzY4
N0Y1QTQyNzlDMjAeFw0yNDEwMTgwNzI1NDZaFw0yNTEwMTgwNzI1NDZaMBgxFjAU
BgNVBAMTDTY3MTIwZDdkLTY2OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHuHmhAsml5FdPQ+sFYg9aH3PvOd7A/iNBQWVoCIwHUPnY88traUSSdwnI
TgzuYxI74XIBhzgffSxlx+CWh0KepBeB5ifv45EhSBrqNR7YKmREVZi2NMDCgItj
kAcToIS8CPrFSYmbe0NGKUZ0gra00GROgwyAx1gqPtZ1pPDuulxG/IKheNEQnFBL
DH2UTtbRAi3zCBLln9+/ZlubplhHVCrKDvnnvnJac/vzPo7jVwAIZoy9n3BxGF1l
ulL0yIJhnx5nrMI91reDS1y7E+IZVjdlB55TQ+t1AVQW5njcFrrsK2RXHbaDO3aB
duUeSks3sE2UKr/ueYxh2fD7tEnFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUc1Y2
9ErIyJCS6WPMCYDBccOSGBQwHwYDVR0jBBgwFoAUA+IO7xUFA6CxlRGK6Idof1pC
ecIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0Mzk3LzhEN0IzMTgwMUY5NjExRUQ4MjMzRjI4Q0YxMjIyNDY4L0EtSU83
eFVGQTZDeGxSR0s2SWRvZjFwQ2VjSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0EtSU83eFVGQTZDeGxSR0s2SWRvZjFwQ2VjSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjU0Mzk3LzhEN0IzMTgwMUY5NjExRUQ4MjMzRjI4Q0Yx
MjIyNDY4LzMyQUE5NjUwOEQyMjExRUY4RTc5QTM5Mjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm3+YwDQYJKoZIhvcNAQEL
BQADggEBAIDgGBI/Mp5JViYeul3j5kEYwgJwf5Nk7FdQD0xssjeyHvi5acDCL/Hu
33VVr5EcMdZqE8WN6a4IMOPReZvEJ3Ft2SxDuUOTfYJoxqsYhMx0CC6Z0Di4VHGO
MN84y0+egkTDdwiIlaYSJuCuaS6AX/MK6H+LejHcJkJY6sids1rfK3EGw/5ONP++
5RwtvIm3tQn9q01TG4mRBCVNDXoyIaW8q8JkIcPLuPwoQ/XK2FX1IMKF+tCnR8+z
Eki54sUzUmMZjIPT+7xipORL4lEZEK1+Xfo6nvzRABP24yOACGJbTyCH9L9G1b+p
BeHstbnxBRv1Pw+or3jSgafr/zOjlFY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:54 2024 by rpki-client on console-fra.rpki-client.org