Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/A864F076BE9611EE998D299D775412E6.roa
File:                     A864F076BE9611EE998D299D775412E6.roa (raw, json)
Hash identifier:          1SOFM20prFpQpyBQ79yS3b8vfUM/+4DhWbKvJj39ado=
Subject key identifier:   CB:76:5D:37:A7:D6:47:21:EC:74:CA:2A:45:0F:C7:E4:80:38:F1:EB
Certificate issuer:       /CN=F366E62BAF/serialNumber=929F8CB72242DC03F11768C7FF165C6832B753B5
Certificate serial:       02
Authority key identifier: 92:9F:8C:B7:22:42:DC:03:F1:17:68:C7:FF:16:5C:68:32:B7:53:B5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/A864F076BE9611EE998D299D775412E6.roa
Signing time:             Mon 29 Jan 2024 11:07:57 +0000
ROA not before:           Mon 29 Jan 2024 11:07:54 +0000
ROA not after:            Mon 29 Jan 2029 11:07:54 +0000
asID:                     329336
IP address blocks:        102.210.254.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 04 Jun 2024 00:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366E62BAF/serialNumber=929F8CB72242DC03F11768C7FF165C6832B753B5
        Validity
            Not Before: Jan 29 11:07:54 2024 GMT
            Not After : Jan 29 11:07:54 2029 GMT
        Subject: CN=65b7870d-92ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:72:39:b0:fd:7d:4b:61:22:d7:ca:3b:6f:
                    fb:14:82:67:26:74:46:de:94:3d:1d:97:05:b8:b3:
                    9d:57:50:02:e6:bd:b6:b4:84:c9:89:b7:fc:fd:06:
                    ef:0c:a3:90:0e:75:92:cc:1e:a5:bd:1f:d6:41:e3:
                    b1:6b:ba:94:c6:49:ff:ce:6d:10:58:a0:ac:f3:ed:
                    a5:60:e0:fe:d9:3c:d3:52:62:51:30:cc:f2:d4:cd:
                    95:b9:ba:53:4f:6e:88:db:fb:94:c8:5d:28:e1:c5:
                    67:a4:b0:6c:b8:23:20:b6:f6:fc:eb:a7:8c:b8:8f:
                    16:82:ae:3d:0a:79:fb:c8:88:49:3b:d6:fc:e7:bd:
                    32:e9:68:3c:aa:04:90:40:c3:fb:bc:58:58:69:84:
                    33:3b:85:42:5f:e7:48:a3:57:02:10:5e:d4:96:23:
                    76:89:e0:ef:8f:98:1c:1c:3c:a0:8c:b9:bc:72:87:
                    2a:1a:f8:16:69:64:37:29:e3:f9:b6:83:f9:d3:1c:
                    ac:65:7a:26:fd:e7:e2:70:8e:a5:12:cb:47:d4:22:
                    c0:9e:71:4f:2b:9e:c2:ba:30:f5:d2:9b:e1:ce:4c:
                    1a:15:1a:31:e9:c1:2a:a1:3e:9b:fe:c2:df:f9:32:
                    8a:ba:04:c2:fa:7f:75:f4:68:f3:d7:19:83:77:0a:
                    e3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:76:5D:37:A7:D6:47:21:EC:74:CA:2A:45:0F:C7:E4:80:38:F1:EB
            X509v3 Authority Key Identifier:
                keyid:92:9F:8C:B7:22:42:DC:03:F1:17:68:C7:FF:16:5C:68:32:B7:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/A864F076BE9611EE998D299D775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.210.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:6d:44:43:f1:1d:49:4b:7f:49:13:46:a7:b4:ad:05:9d:3e:
         21:4c:dd:d4:e2:fe:ed:36:52:1b:93:07:71:2f:86:40:d2:b4:
         db:9d:82:61:7e:1d:ac:b1:42:c8:a7:5b:1f:9c:da:79:88:00:
         b9:d6:0e:a7:d2:75:65:15:2f:67:3d:58:f8:cc:10:4c:03:80:
         05:e3:ff:23:a8:cb:6f:d4:85:0c:ff:93:b5:a4:97:3e:85:93:
         af:41:bb:05:3d:25:5f:9e:00:27:a1:c6:34:ee:ca:5a:69:9f:
         5b:e6:b5:90:d0:b7:62:79:f6:a5:aa:2b:99:7a:a3:65:f9:52:
         8e:cd:ac:9c:b7:9d:b2:8e:4c:66:6e:08:63:50:de:3e:b9:ee:
         da:fa:e6:1c:48:b4:a1:6c:ce:1f:a5:07:71:5d:1b:06:c2:d9:
         67:3f:80:a5:ed:5c:5c:f4:e1:d2:df:65:5a:1c:5f:27:d5:31:
         33:ef:f3:ee:1e:73:3d:88:22:fd:1a:cc:b3:94:9b:dd:05:ca:
         c4:a6:b1:03:7a:72:ef:a0:19:21:8e:a8:ed:23:9a:01:e9:14:
         18:00:04:8e:4c:18:45:91:45:8f:6f:78:bc:3f:90:fa:bb:22:
         34:b5:11:ea:d0:8f:54:d1:ad:c0:49:3d:e8:c7:90:f1:0d:5e:
         83:ef:5b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:41 2024 by rpki-client on console-ams.rpki-client.org