Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/781C12E636D811EEA590B3444AD9E6FC.roa
File:                     781C12E636D811EEA590B3444AD9E6FC.roa (raw, json)
Hash identifier:          Js2yPxnRr8TnD2VHTvWz7stmjZ4nVcG6c5WJuOI5UGA=
Subject key identifier:   9E:FB:15:20:2D:A7:F9:16:96:04:38:A3:2D:8A:95:38:3F:A9:02:BA
Certificate issuer:       /CN=F367E135AF/serialNumber=34E837F9C42B4E64D0274E86B7DA0C928931630F
Certificate serial:       0E
Authority key identifier: 34:E8:37:F9:C4:2B:4E:64:D0:27:4E:86:B7:DA:0C:92:89:31:63:0F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/781C12E636D811EEA590B3444AD9E6FC.roa
Signing time:             Wed 09 Aug 2023 17:16:25 +0000
ROA not before:           Wed 09 Aug 2023 17:16:21 +0000
ROA not after:            Tue 09 Aug 2033 17:16:21 +0000
asID:                     329270
IP address blocks:        102.212.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 17 Jun 2024 00:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367E135AF/serialNumber=34E837F9C42B4E64D0274E86B7DA0C928931630F
        Validity
            Not Before: Aug  9 17:16:21 2023 GMT
            Not After : Aug  9 17:16:21 2033 GMT
        Subject: CN=64d3c9e9-e5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0a:29:93:d3:c1:c3:6b:b6:f9:b1:a1:26:e8:
                    20:2a:62:c7:c5:56:76:d5:e8:54:ca:9c:59:98:de:
                    13:0b:48:70:d3:b2:ea:eb:25:36:91:e3:37:4b:db:
                    66:15:7f:94:5c:65:86:b0:b0:e5:e7:9b:82:83:d6:
                    63:75:99:fb:c1:af:e4:02:d1:ff:06:d8:cf:53:04:
                    65:06:b3:f2:fa:97:71:14:ce:b0:72:4c:2c:00:34:
                    8a:93:d3:48:e5:02:4d:cf:49:1c:a8:e4:48:44:2a:
                    7c:08:5c:71:ac:38:53:d4:c8:81:60:68:53:3e:03:
                    20:32:5e:e4:b1:b6:42:ed:a2:dc:c0:47:a6:48:19:
                    a9:37:1f:8e:49:72:eb:39:d2:7f:cb:38:6c:47:c4:
                    d4:44:c1:88:81:0b:9a:5a:aa:d3:f2:9f:68:da:d0:
                    2b:d6:f5:38:2b:7d:71:08:ec:c1:7a:6a:97:36:15:
                    b2:f8:cd:b6:87:97:1e:5c:5c:44:9e:d0:a7:31:70:
                    a1:0a:67:b1:25:e8:ef:0a:ec:35:af:50:bc:05:cc:
                    04:0a:37:47:d4:df:90:98:f3:f0:e3:dc:07:f5:85:
                    43:6f:78:27:29:6b:c5:5e:65:f0:69:dc:35:3b:e9:
                    83:5b:e7:aa:47:a2:41:56:2a:6e:92:14:f0:70:c9:
                    e1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FB:15:20:2D:A7:F9:16:96:04:38:A3:2D:8A:95:38:3F:A9:02:BA
            X509v3 Authority Key Identifier:
                keyid:34:E8:37:F9:C4:2B:4E:64:D0:27:4E:86:B7:DA:0C:92:89:31:63:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/781C12E636D811EEA590B3444AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:e6:6e:01:c7:b6:87:df:99:63:e6:7a:d0:e4:80:35:cd:74:
         eb:9e:2d:ee:75:ca:d2:60:81:29:3a:b5:b2:27:d7:e2:08:0c:
         fd:d8:10:54:7d:e6:fd:00:7f:28:1b:db:83:9c:da:90:fb:7d:
         90:06:e4:3b:47:84:8a:50:73:e2:70:72:76:69:28:a6:c8:90:
         29:47:83:34:f4:56:87:87:18:08:13:7d:8a:dc:0d:66:3a:2f:
         0f:58:53:87:ba:60:88:0f:bd:50:4c:67:65:b1:8d:00:cb:92:
         18:68:2e:6a:ef:6b:99:50:0b:74:10:5a:66:00:84:17:6d:71:
         69:81:d6:df:b5:5f:45:ca:27:8b:22:b3:56:3b:7c:21:33:0e:
         94:e7:84:70:95:5e:6d:04:cd:53:9f:bd:04:c7:93:af:f2:22:
         a6:bb:98:45:4e:1e:2e:ab:a8:8c:71:e4:b4:1b:b2:b4:aa:5d:
         73:ec:df:0c:6c:6a:cd:61:29:da:96:07:bb:4e:eb:0c:71:12:
         47:d0:5a:dd:d3:d7:ea:4d:5b:4c:a6:f0:37:27:68:32:cf:7f:
         73:21:df:18:c5:14:eb:59:a9:e5:ab:b8:82:f9:1b:81:d6:45:
         93:07:d3:29:5d:10:b1:28:71:70:1b:84:70:95:e1:0e:42:42:
         d6:48:b0:35
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBDjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
RTEzNUFGMTEwLwYDVQQFEygzNEU4MzdGOUM0MkI0RTY0RDAyNzRFODZCN0RBMEM5
Mjg5MzE2MzBGMB4XDTIzMDgwOTE3MTYyMVoXDTMzMDgwOTE3MTYyMVowGDEWMBQG
A1UEAxMNNjRkM2M5ZTktZTVkNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJsKKZPTwcNrtvmxoSboICpix8VWdtXoVMqcWZjeEwtIcNOy6uslNpHjN0vb
ZhV/lFxlhrCw5eebgoPWY3WZ+8Gv5ALR/wbYz1MEZQaz8vqXcRTOsHJMLAA0ipPT
SOUCTc9JHKjkSEQqfAhccaw4U9TIgWBoUz4DIDJe5LG2Qu2i3MBHpkgZqTcfjkly
6znSf8s4bEfE1ETBiIELmlqq0/KfaNrQK9b1OCt9cQjswXpqlzYVsvjNtoeXHlxc
RJ7QpzFwoQpnsSXo7wrsNa9QvAXMBAo3R9TfkJjz8OPcB/WFQ294JylrxV5l8Gnc
NTvpg1vnqkeiQVYqbpIU8HDJ4Z8CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSe+xUg
Laf5FpYEOKMtipU4P6kCujAfBgNVHSMEGDAWgBQ06Df5xCtOZNAnToa32gySiTFj
DzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0UxMzUvRjZFODEyNTgyRkFBMTFFRThENjA5NTYxNEFEOUU2RkMvTk9nMy1j
UXJUbVRRSjA2R3Q5b01rb2t4WXc4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvTk9nMy1jUXJUbVRRSjA2R3Q5b01rb2t4WXc4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0UxMzUvRjZFODEyNTgyRkFBMTFFRThENjA5NTYxNEFE
OUU2RkMvNzgxQzEyRTYzNkQ4MTFFRUE1OTBCMzQ0NEFEOUU2RkMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbU2DANBgkqhkiG9w0BAQsF
AAOCAQEAZeZuAce2h9+ZY+Z60OSANc10654t7nXK0mCBKTq1sifX4ggM/dgQVH3m
/QB/KBvbg5zakPt9kAbkO0eEilBz4nBydmkopsiQKUeDNPRWh4cYCBN9itwNZjov
D1hTh7pgiA+9UExnZbGNAMuSGGguau9rmVALdBBaZgCEF21xaYHW37VfRconiyKz
Vjt8ITMOlOeEcJVebQTNU5+9BMeTr/IipruYRU4eLquojHHktBuytKpdc+zfDGxq
zWEp2pYHu07rDHESR9Ba3dPX6k1bTKbwNydoMs9/cyHfGMUU61mp5au4gvkbgdZF
kwfTKV0QsShxcBuEcJXhDkJC1kiwNQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 03:05:53 2024 by rpki-client on console-fra.rpki-client.org