Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/12A476563A2911EFA2721E48762E951A.roa
File:                     12A476563A2911EFA2721E48762E951A.roa (raw, json)
Hash identifier:          e3V5AAsj+AntU1+tap+GSIMt0rdBfXlp80uPXMWrRDA=
Subject key identifier:   84:E1:82:BF:01:7C:26:D1:E9:E4:91:B9:F2:F7:A4:B6:91:D1:16:58
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       055C
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/12A476563A2911EFA2721E48762E951A.roa
Signing time:             Thu 04 Jul 2024 17:15:55 +0000
ROA not before:           Thu 04 Jul 2024 17:15:49 +0000
ROA not after:            Thu 10 Jul 2025 17:15:49 +0000
asID:                     328608
IP address blocks:        102.177.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1372 (0x55c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Jul  4 17:15:49 2024 GMT
            Not After : Jul 10 17:15:49 2025 GMT
        Subject: CN=6686d8cb-afce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:d7:fe:a1:7e:6b:b1:d0:b6:12:73:a0:86:
                    1d:a7:eb:fe:b8:24:0c:67:59:b8:ea:18:43:dc:71:
                    df:e3:1d:68:01:8d:1f:da:ad:f4:bc:3b:2c:26:2f:
                    c3:e4:a2:67:79:37:7f:3d:59:a5:61:3f:f2:f1:80:
                    fd:f7:27:a3:c1:77:9a:0a:c3:34:df:51:66:38:b5:
                    90:48:88:12:44:93:23:47:94:7b:88:ce:39:07:60:
                    ff:37:64:90:49:02:5a:d9:22:06:99:4c:f7:84:ad:
                    5b:3b:12:3e:ca:46:ff:90:c3:81:65:ab:f5:e0:d1:
                    8b:ad:c6:18:d5:5a:26:3b:d2:74:7c:cb:0f:e5:65:
                    c5:cb:93:ea:85:29:c2:3a:92:bd:c9:c9:58:1e:05:
                    c7:4a:4c:7e:60:fe:99:c0:03:61:c6:a0:34:d6:64:
                    9c:94:35:58:76:6c:02:1b:50:f7:dd:8e:06:c4:a0:
                    fc:c2:de:fe:06:a7:a0:44:ae:ac:48:4a:b8:ea:90:
                    62:cd:0b:83:a1:3f:04:b6:df:87:4f:4f:d3:99:e1:
                    8e:87:7e:9e:e3:d1:85:0a:19:55:8a:f0:29:45:fc:
                    24:87:d6:ee:6c:0f:a0:66:16:2c:79:48:da:26:da:
                    51:02:4a:c8:87:ca:34:07:d8:21:3b:b6:54:8f:61:
                    d8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E1:82:BF:01:7C:26:D1:E9:E4:91:B9:F2:F7:A4:B6:91:D1:16:58
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/12A476563A2911EFA2721E48762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:ac:71:96:58:d5:af:88:58:96:fc:74:e2:2b:71:f8:5e:6b:
         c2:ec:e9:b7:06:08:9e:83:a0:a9:48:21:dc:d4:07:af:61:ff:
         9b:b4:c3:cc:7a:07:07:4a:c2:3b:38:83:83:4d:5c:d8:65:c1:
         eb:79:de:5c:f7:b5:ca:51:68:fe:4c:a4:c8:d0:48:6e:31:14:
         c9:53:b5:18:fa:f3:1e:70:9e:df:94:88:a4:56:99:1d:4f:3c:
         a6:7e:b2:1c:06:7e:05:1a:27:f1:ff:79:f1:02:bd:85:89:06:
         3f:f5:74:11:99:b3:dc:45:48:2b:fd:31:3e:f4:cd:5c:be:e0:
         2d:91:4b:fa:db:c5:d8:19:a3:fe:de:82:d0:a7:70:3c:e3:48:
         bd:ac:73:66:6d:2f:65:7b:27:db:6c:95:39:64:b1:61:17:b0:
         61:c8:64:50:cc:92:6f:9d:0a:2c:a0:27:29:f9:60:63:da:33:
         da:67:fe:16:a5:97:c9:e0:ff:38:6e:77:b1:d2:fd:f5:9b:76:
         18:a1:17:e3:ae:68:4d:70:9c:20:b9:b0:3a:6f:e9:69:1d:0f:
         8d:49:f7:b8:59:54:6a:9b:9e:e8:6f:90:23:25:7b:5c:85:5a:
         67:21:82:63:8e:6a:2f:ed:a5:c5:1c:eb:17:5d:40:30:79:c9:
         9c:72:d3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:45 2024 by rpki-client on console-ams.rpki-client.org