Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/5AD2351EF62211ECA5384CCEF1222468.roa
File:                     5AD2351EF62211ECA5384CCEF1222468.roa (raw, json)
Hash identifier:          O2TbmJ0oluer0UrOj7dugRw2nzmfuIBjrJGzVgObtfc=
Subject key identifier:   67:06:54:E1:0B:E7:7E:91:27:FB:AA:91:83:72:AC:8D:55:ED:44:B5
Certificate issuer:       /CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Certificate serial:       08
Authority key identifier: 2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/5AD2351EF62211ECA5384CCEF1222468.roa
Signing time:             Mon 27 Jun 2022 14:06:35 +0000
ROA not before:           Mon 27 Jun 2022 14:06:32 +0000
ROA not after:            Sun 27 Jun 2032 14:06:32 +0000
asID:                     328915
IP address blocks:        102.218.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 28 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
        Validity
            Not Before: Jun 27 14:06:32 2022 GMT
            Not After : Jun 27 14:06:32 2032 GMT
        Subject: CN=62b9b96b-e0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b7:49:f7:de:37:ff:3f:f8:f5:4a:70:22:f8:
                    e4:2e:c1:67:ba:ef:9b:89:11:da:ea:06:f3:8a:de:
                    c5:14:bd:b2:47:79:1c:b7:cc:24:27:18:5d:0e:1a:
                    63:de:3b:cc:0e:0a:5a:67:bc:40:7a:87:f0:29:87:
                    98:1c:12:51:a3:1c:1b:eb:dd:e0:93:18:d3:1d:46:
                    2d:4b:c1:2e:c4:e5:d3:98:03:2b:c4:79:dc:24:60:
                    64:61:5f:e2:10:b1:37:f1:a3:3c:05:51:40:10:17:
                    24:14:41:9c:d0:4a:83:0d:13:f9:ae:3f:30:30:04:
                    a4:74:61:05:8f:55:d7:63:cf:72:f2:f4:01:16:6c:
                    eb:f4:83:d1:0d:36:ee:e5:2e:c2:d7:fc:62:72:17:
                    52:d7:17:83:2e:1f:e6:54:ad:a3:b2:60:84:55:5a:
                    4a:0a:39:01:15:fc:3d:90:dc:78:0d:69:df:d7:62:
                    a5:e0:6c:9a:60:98:2f:b1:7f:8f:60:63:ce:35:94:
                    f0:26:ca:c9:fb:77:9e:5b:79:81:ed:ce:b9:b1:51:
                    08:58:96:7e:72:92:8e:70:5e:b2:83:ec:aa:27:ef:
                    cb:64:c6:28:9c:cf:41:bd:f8:68:8f:7d:dd:8c:85:
                    64:a4:96:d3:42:87:ce:23:9e:3f:c2:94:54:d7:87:
                    5c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:06:54:E1:0B:E7:7E:91:27:FB:AA:91:83:72:AC:8D:55:ED:44:B5
            X509v3 Authority Key Identifier:
                keyid:2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/5AD2351EF62211ECA5384CCEF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:2f:3b:20:b0:92:27:48:31:2a:e8:87:30:71:f2:2d:0a:cb:
         f9:12:53:b4:19:13:c1:64:bd:10:17:f3:1e:e2:25:ec:e3:06:
         b6:7b:76:ef:7b:57:a7:d1:7f:10:05:1d:2f:2e:d6:71:60:d3:
         e5:db:e2:f2:8c:58:17:ae:b4:9f:dd:0c:db:f1:fc:70:a6:a7:
         d0:ac:fc:f5:55:ea:f6:f6:a9:e0:57:aa:10:b0:0d:98:1d:fb:
         39:43:91:fc:ea:8a:bc:04:d2:b6:3c:f0:b7:1c:bd:15:3a:6d:
         32:b8:58:da:89:20:c3:be:ab:9d:11:87:ef:6b:a0:76:94:5f:
         0f:dc:80:3d:55:19:29:9d:b4:b7:da:5e:12:41:ad:09:37:91:
         73:5f:d3:f4:ac:a2:27:2f:e1:fa:57:4a:b4:ab:24:a3:e8:1e:
         6c:df:ca:dd:a0:cf:98:03:15:f8:ea:f4:38:57:39:e4:c6:59:
         73:78:8a:2d:76:f0:61:d9:5f:55:33:fd:5e:9e:10:85:50:3a:
         e1:82:26:a6:59:6d:62:b2:7b:f7:c5:67:7b:d8:e2:32:9a:a5:
         04:54:1c:3c:86:65:92:43:c2:85:bc:84:63:bd:a0:ea:2e:5e:
         ea:89:92:a6:ee:92:16:08:b1:ac:b3:38:7c:78:f4:5c:bd:ff:
         29:50:10:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 02:15:12 2024 by rpki-client on console-fra.rpki-client.org