Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/72363EB671BE11EF838644A0762E951A.roa
File:                     72363EB671BE11EF838644A0762E951A.roa (raw, json)
Hash identifier:          PA/h5ekoPNUQiLuqHkxlB+THQPCIzkVE47Cb2Ae6PV4=
Subject key identifier:   4B:AA:C4:7E:A0:57:1F:7E:AE:18:53:7B:C9:D4:FA:61:82:B9:42:E8
Certificate issuer:       /CN=F3662367AF/serialNumber=0BD00848F838FD90B99EDC37690720955FB00906
Certificate serial:       033F
Authority key identifier: 0B:D0:08:48:F8:38:FD:90:B9:9E:DC:37:69:07:20:95:5F:B0:09:06
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/72363EB671BE11EF838644A0762E951A.roa
Signing time:             Fri 13 Sep 2024 10:53:45 +0000
ROA not before:           Fri 13 Sep 2024 10:53:41 +0000
ROA not after:            Wed 13 Sep 2034 10:53:41 +0000
asID:                     328178
IP address blocks:        102.207.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831 (0x33f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662367AF/serialNumber=0BD00848F838FD90B99EDC37690720955FB00906
        Validity
            Not Before: Sep 13 10:53:41 2024 GMT
            Not After : Sep 13 10:53:41 2034 GMT
        Subject: CN=66e419b8-f03f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:87:e0:69:30:f9:c5:c1:75:eb:cc:ef:ce:59:
                    88:29:04:6d:fe:75:7e:48:6d:c4:09:29:31:ad:88:
                    f9:fc:72:46:bf:4c:11:c8:6d:86:c5:8e:7e:72:ac:
                    56:70:b2:1b:33:a5:76:c6:e3:86:a1:51:49:ff:c7:
                    fa:9c:38:b7:52:e0:b2:bf:26:96:c8:eb:96:03:39:
                    b6:59:15:7a:5b:4d:c5:fd:4b:da:50:b2:ee:63:02:
                    e8:c5:c2:c0:81:2b:40:22:ae:ae:af:1c:fd:67:90:
                    ab:3c:d0:71:b5:56:eb:ad:54:33:65:d4:dd:50:ec:
                    00:7b:19:af:e9:30:99:1d:49:d2:cd:78:a4:6c:0c:
                    ee:0c:bc:a3:5b:83:dd:61:a9:85:ce:20:40:ae:da:
                    f5:1e:e1:c8:1f:b6:70:93:c5:af:e2:e9:39:36:5d:
                    33:40:32:89:c5:c1:d8:2c:b5:c0:06:ea:8d:e4:2c:
                    a6:8e:ac:2f:a1:0d:b7:b3:86:9c:08:5d:80:9a:85:
                    29:78:01:c5:b9:10:02:3c:06:45:24:fd:0d:a2:fd:
                    85:e8:51:66:9e:a3:bd:0a:09:d0:16:2c:55:28:36:
                    17:e6:1c:0a:49:35:a2:ec:90:4a:cc:c3:cb:9d:21:
                    4d:46:06:2e:4c:51:66:c5:13:ff:ca:59:14:db:10:
                    de:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AA:C4:7E:A0:57:1F:7E:AE:18:53:7B:C9:D4:FA:61:82:B9:42:E8
            X509v3 Authority Key Identifier:
                keyid:0B:D0:08:48:F8:38:FD:90:B9:9E:DC:37:69:07:20:95:5F:B0:09:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/72363EB671BE11EF838644A0762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.207.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:70:39:b7:24:43:d9:1d:e6:39:2d:06:ec:b1:df:1b:bd:f7:
         75:3e:83:d0:77:f4:9a:e1:13:21:71:26:14:34:7b:9d:49:4e:
         3f:07:cf:24:65:03:95:21:e9:63:2d:be:2a:10:8e:de:ea:8a:
         2f:13:7a:e2:6e:ac:0d:1f:4a:7e:3c:22:59:c7:2e:77:a9:58:
         4e:12:f8:57:e3:58:4e:9d:da:e0:ff:81:08:ec:99:70:33:b0:
         a3:59:8f:0d:61:10:a5:aa:43:17:8a:19:64:f6:98:8c:47:a3:
         c6:c5:15:e9:fd:e9:fd:fb:d3:4d:35:27:39:77:66:61:b9:2a:
         9b:52:07:b1:4c:8b:53:7d:1d:16:ea:4a:37:bf:57:dc:6f:91:
         f0:4a:f3:bb:b3:f3:b2:7a:e6:40:f3:23:50:89:f0:cf:0a:e9:
         43:d0:aa:4e:f0:52:30:c8:25:b0:b5:47:da:94:77:77:b9:c1:
         af:e6:c9:69:04:b1:12:5a:ed:57:1c:70:31:6c:cc:69:cb:8e:
         1d:f0:3b:bb:6f:9e:83:a9:6e:ab:b0:05:6b:f4:4a:7e:e4:29:
         3c:fb:c6:c6:b8:d1:02:aa:ae:6c:fe:7d:68:23:3b:06:9e:56:
         36:d1:e0:ae:ca:b0:25:ee:cd:5e:b0:e6:69:39:ac:98:12:2e:
         ba:38:3d:61
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjIzNjdBRjExMC8GA1UEBRMoMEJEMDA4NDhGODM4RkQ5MEI5OUVEQzM3NjkwNzIw
OTU1RkIwMDkwNjAeFw0yNDA5MTMxMDUzNDFaFw0zNDA5MTMxMDUzNDFaMBgxFjAU
BgNVBAMTDTY2ZTQxOWI4LWYwM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZh+BpMPnFwXXrzO/OWYgpBG3+dX5IbcQJKTGtiPn8cka/TBHIbYbFjn5y
rFZwshszpXbG44ahUUn/x/qcOLdS4LK/JpbI65YDObZZFXpbTcX9S9pQsu5jAujF
wsCBK0Airq6vHP1nkKs80HG1VuutVDNl1N1Q7AB7Ga/pMJkdSdLNeKRsDO4MvKNb
g91hqYXOIECu2vUe4cgftnCTxa/i6Tk2XTNAMonFwdgstcAG6o3kLKaOrC+hDbez
hpwIXYCahSl4AcW5EAI8BkUk/Q2i/YXoUWaeo70KCdAWLFUoNhfmHApJNaLskErM
w8udIU1GBi5MUWbFE//KWRTbEN4DAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUS6rE
fqBXH36uGFN7ydT6YYK5QugwHwYDVR0jBBgwFoAUC9AISPg4/ZC5ntw3aQcglV+w
CQYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyMzY3L0I0NTA4Q0U4MDgyMDExRUQ4Mjg1ODhGN0YxMjIyNDY4L0M5QUlT
UGc0X1pDNW50dzNhUWNnbFYtd0NRWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0M5QUlTUGc0X1pDNW50dzNhUWNnbFYtd0NRWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjYyMzY3L0I0NTA4Q0U4MDgyMDExRUQ4Mjg1ODhGN0Yx
MjIyNDY4LzcyMzYzRUI2NzFCRTExRUY4Mzg2NDRBMDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmz+QwDQYJKoZIhvcNAQEL
BQADggEBAA9wObckQ9kd5jktBuyx3xu993U+g9B39JrhEyFxJhQ0e51JTj8HzyRl
A5Uh6WMtvioQjt7qii8TeuJurA0fSn48IlnHLnepWE4S+FfjWE6d2uD/gQjsmXAz
sKNZjw1hEKWqQxeKGWT2mIxHo8bFFen96f370001Jzl3ZmG5KptSB7FMi1N9HRbq
Sje/V9xvkfBK87uz87J65kDzI1CJ8M8K6UPQqk7wUjDIJbC1R9qUd3e5wa/myWkE
sRJa7VcccDFszGnLjh3wO7tvnoOpbquwBWv0Sn7kKTz7xsa40QKqrmz+fWgjOwae
VjbR4K7KsCXuzV6w5mk5rJgSLro4PWE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:55 2024 by rpki-client on console-fra.rpki-client.org