Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/441FBD96F62211ECAEA706CEF1222468.roa
File:                     441FBD96F62211ECAEA706CEF1222468.roa (raw, json)
Hash identifier:          eOgo72NBB1TzX9MDNE5guVogIR1WbLYMRiu06PhqwRs=
Subject key identifier:   8F:4B:D2:BA:22:D8:B2:B4:14:A0:69:43:F6:AB:C2:BB:3A:F8:74:C4
Certificate issuer:       /CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Certificate serial:       06
Authority key identifier: 2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/441FBD96F62211ECAEA706CEF1222468.roa
Signing time:             Mon 27 Jun 2022 14:05:57 +0000
ROA not before:           Mon 27 Jun 2022 14:05:53 +0000
ROA not after:            Sun 27 Jun 2032 14:05:53 +0000
asID:                     328915
IP address blocks:        102.218.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 28 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
        Validity
            Not Before: Jun 27 14:05:53 2022 GMT
            Not After : Jun 27 14:05:53 2032 GMT
        Subject: CN=62b9b945-0e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a6:8f:8c:89:27:0f:7b:be:d7:82:bc:2a:89:
                    46:c4:34:78:5b:fa:ed:09:b6:ce:3e:48:28:ba:92:
                    d8:50:b0:e1:c6:05:26:46:2e:14:3f:4c:7c:5a:84:
                    aa:44:32:98:5e:7d:99:7c:b7:da:07:d8:ab:e3:74:
                    7f:56:3f:e3:a2:c6:b0:7c:d2:c1:68:71:91:bb:24:
                    33:c0:9f:ff:10:71:a4:4e:60:3c:00:68:75:8f:f0:
                    26:40:35:60:1c:c7:b0:65:88:9c:44:15:a6:43:e2:
                    58:bc:ae:60:bb:9d:2e:7f:87:a3:42:39:9d:67:d9:
                    c5:5d:09:1b:14:75:c5:2e:48:85:1c:ed:d9:86:11:
                    bb:94:d6:ac:07:c7:bf:44:10:64:b8:52:28:ba:e9:
                    68:65:93:cc:b0:f6:c8:95:dc:a1:ae:8f:e6:f1:a0:
                    68:35:93:c4:c3:3b:2a:43:2c:97:e4:16:8a:60:ae:
                    42:45:7f:e8:07:93:2b:93:4a:51:4e:26:fd:87:77:
                    95:8a:15:52:7b:2c:b0:40:59:7e:95:6b:90:c7:be:
                    2d:02:4a:ee:52:2d:b2:8f:ac:1c:55:5b:30:c1:8c:
                    47:e7:de:7a:32:4e:22:1c:dd:d0:5d:23:ea:3f:e8:
                    50:36:3f:a7:74:eb:d8:14:db:23:81:ac:be:85:d0:
                    c3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4B:D2:BA:22:D8:B2:B4:14:A0:69:43:F6:AB:C2:BB:3A:F8:74:C4
            X509v3 Authority Key Identifier:
                keyid:2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/441FBD96F62211ECAEA706CEF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:f6:81:66:b3:69:69:63:bc:cb:de:a0:39:e9:48:92:fa:d0:
         dc:9e:11:75:ab:4e:a7:9f:ab:fa:5a:07:9f:30:8f:17:29:29:
         42:f2:ae:c2:1c:15:e9:6d:b9:5f:e4:50:c0:8f:f2:e1:84:88:
         8e:42:b4:ab:be:c7:52:fd:eb:c2:61:5a:5d:71:ff:4b:4b:f5:
         79:8f:e7:f1:7d:a5:d5:e8:46:8c:b7:26:53:82:00:1f:6f:ad:
         67:b2:87:77:d2:30:48:2b:17:2b:4f:7f:53:7a:ae:df:cd:eb:
         ca:d7:0c:3c:83:6a:f4:aa:c4:fd:74:a0:1b:cf:df:2f:24:9d:
         8e:b9:bc:67:7d:0c:ff:19:1e:89:a6:d9:85:73:90:b8:37:7d:
         6c:c7:c0:76:e1:79:44:eb:c6:c8:6a:9a:a2:e2:05:04:3e:3d:
         ce:82:21:b4:0c:8e:b7:60:90:70:92:b2:94:41:d8:67:01:e6:
         b1:24:d6:4d:f3:d6:d7:5e:da:01:f5:e6:9c:16:a6:76:b2:af:
         4f:5b:26:41:3c:d2:f1:22:1f:22:92:43:18:69:00:ed:d3:bc:
         69:6f:63:cf:33:63:8e:2b:7e:8f:17:6d:05:0a:d2:23:11:9c:
         4c:57:80:e5:a2:bf:07:64:2b:17:00:2e:58:4b:2d:e9:85:96:
         b6:8e:2b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 03:27:14 2024 by rpki-client on console-ams.rpki-client.org