Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/E82D503C32D611EEB0CB67854AD9E6FC.roa
File:                     E82D503C32D611EEB0CB67854AD9E6FC.roa (raw, json)
Hash identifier:          bctspn/KtgLTzAkf9/RykTiEOapAVACtA+NxhsbPwMk=
Subject key identifier:   F3:61:93:95:5B:74:C0:40:2E:34:F4:EA:74:62:8C:2B:F6:DC:F9:71
Certificate issuer:       /CN=F367E135AF/serialNumber=34E837F9C42B4E64D0274E86B7DA0C928931630F
Certificate serial:       06
Authority key identifier: 34:E8:37:F9:C4:2B:4E:64:D0:27:4E:86:B7:DA:0C:92:89:31:63:0F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/E82D503C32D611EEB0CB67854AD9E6FC.roa
Signing time:             Fri 04 Aug 2023 14:55:10 +0000
ROA not before:           Fri 04 Aug 2023 14:55:06 +0000
ROA not after:            Thu 04 Aug 2033 14:55:06 +0000
asID:                     329270
IP address blocks:        102.212.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Jun 2024 00:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367E135AF/serialNumber=34E837F9C42B4E64D0274E86B7DA0C928931630F
        Validity
            Not Before: Aug  4 14:55:06 2023 GMT
            Not After : Aug  4 14:55:06 2033 GMT
        Subject: CN=64cd114d-21e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:95:93:ef:0f:f6:e0:ad:4e:df:f4:1c:d7:
                    e2:f6:71:ce:f6:d4:20:7f:1d:7d:3c:5a:4a:3d:11:
                    e0:fd:97:ae:37:6b:a7:31:b2:19:2a:56:4c:59:d6:
                    dc:20:32:5f:05:00:6c:0b:32:6c:13:b6:4a:a0:30:
                    57:57:1a:ab:b8:d8:8a:75:8c:46:a7:db:10:d5:bb:
                    d3:67:94:8e:44:c8:16:00:5f:1a:1f:97:4c:be:8f:
                    eb:d0:69:d2:5f:f7:3c:3d:a2:29:40:dc:93:2b:4f:
                    0e:e0:ff:65:b0:de:50:73:20:3a:ec:73:e1:25:a3:
                    43:97:d5:31:be:28:f7:96:da:5d:b0:de:84:ea:c8:
                    0a:0f:5c:0a:1a:f6:0d:b2:9d:e5:fe:c3:5c:48:35:
                    bc:2e:c0:f0:c9:92:4a:a8:f9:9b:53:fa:0c:09:31:
                    37:9f:61:97:6d:c6:a2:20:32:e6:5f:7c:30:e9:4c:
                    ce:57:d7:77:25:c0:72:f9:68:72:35:b3:7d:3b:ca:
                    53:cf:c6:0a:71:68:ef:d3:20:4b:a7:10:e6:c0:c8:
                    ef:ae:c3:4d:2f:7a:85:2a:8e:98:7a:40:28:1f:3e:
                    69:3c:c3:3e:f4:1d:de:78:50:ef:01:d0:7d:11:c0:
                    9d:60:d8:c6:04:5f:d6:9f:68:c9:16:a7:e8:3b:37:
                    7e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:61:93:95:5B:74:C0:40:2E:34:F4:EA:74:62:8C:2B:F6:DC:F9:71
            X509v3 Authority Key Identifier:
                keyid:34:E8:37:F9:C4:2B:4E:64:D0:27:4E:86:B7:DA:0C:92:89:31:63:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/E82D503C32D611EEB0CB67854AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:21:7c:57:09:48:10:5a:0c:27:db:df:eb:d1:c9:61:db:96:
         46:68:df:fa:02:e1:b4:ee:a1:08:ba:49:5f:d9:dd:f8:eb:9e:
         c5:73:43:4f:8b:14:a6:23:1c:c0:5b:b8:b8:6a:41:d2:74:d6:
         a1:54:ef:40:5b:63:eb:b6:3b:4b:d2:7f:f9:12:b9:b2:0e:bf:
         6c:a7:a6:ac:6a:e1:8b:1e:06:fb:87:40:f5:19:69:38:e9:41:
         15:77:c7:10:44:6c:51:49:5e:b8:8c:f9:a6:47:77:97:bd:31:
         db:fb:90:b7:c9:d7:ef:a2:2e:88:3f:9d:23:10:e0:29:62:6c:
         69:4d:c5:45:8e:f2:66:9b:8a:de:e1:37:d1:47:fd:ac:b9:e4:
         34:15:20:75:91:9e:d1:81:0a:a9:8f:e5:a5:d0:c5:0d:05:d3:
         3c:60:ad:a3:a8:8c:86:3e:8d:ac:12:ed:3e:62:2c:cc:4a:3e:
         49:cf:eb:3d:2f:c5:ec:39:05:72:20:0c:9b:21:1b:cf:53:54:
         6d:17:6a:53:48:8b:64:05:2d:58:97:70:c9:64:0e:5e:0b:69:
         f8:8d:40:26:e3:1b:a6:7d:04:79:84:9e:a6:82:18:c7:23:59:
         64:17:39:47:30:50:48:d3:79:65:94:bd:34:5b:7c:cb:2e:b4:
         0d:8f:96:aa
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
RTEzNUFGMTEwLwYDVQQFEygzNEU4MzdGOUM0MkI0RTY0RDAyNzRFODZCN0RBMEM5
Mjg5MzE2MzBGMB4XDTIzMDgwNDE0NTUwNloXDTMzMDgwNDE0NTUwNlowGDEWMBQG
A1UEAxMNNjRjZDExNGQtMjFlOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKCMlZPvD/bgrU7f9BzX4vZxzvbUIH8dfTxaSj0R4P2XrjdrpzGyGSpWTFnW
3CAyXwUAbAsybBO2SqAwV1caq7jYinWMRqfbENW702eUjkTIFgBfGh+XTL6P69Bp
0l/3PD2iKUDckytPDuD/ZbDeUHMgOuxz4SWjQ5fVMb4o95baXbDehOrICg9cChr2
DbKd5f7DXEg1vC7A8MmSSqj5m1P6DAkxN59hl23GoiAy5l98MOlMzlfXdyXAcvlo
cjWzfTvKU8/GCnFo79MgS6cQ5sDI767DTS96hSqOmHpAKB8+aTzDPvQd3nhQ7wHQ
fRHAnWDYxgRf1p9oyRan6Ds3fuECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTzYZOV
W3TAQC409Op0Yowr9tz5cTAfBgNVHSMEGDAWgBQ06Df5xCtOZNAnToa32gySiTFj
DzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0UxMzUvRjZFODEyNTgyRkFBMTFFRThENjA5NTYxNEFEOUU2RkMvTk9nMy1j
UXJUbVRRSjA2R3Q5b01rb2t4WXc4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvTk9nMy1jUXJUbVRRSjA2R3Q5b01rb2t4WXc4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0UxMzUvRjZFODEyNTgyRkFBMTFFRThENjA5NTYxNEFE
OUU2RkMvRTgyRDUwM0MzMkQ2MTFFRUIwQ0I2Nzg1NEFEOUU2RkMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbU2DANBgkqhkiG9w0BAQsF
AAOCAQEAYCF8VwlIEFoMJ9vf69HJYduWRmjf+gLhtO6hCLpJX9nd+OuexXNDT4sU
piMcwFu4uGpB0nTWoVTvQFtj67Y7S9J/+RK5sg6/bKemrGrhix4G+4dA9RlpOOlB
FXfHEERsUUleuIz5pkd3l70x2/uQt8nX76IuiD+dIxDgKWJsaU3FRY7yZpuK3uE3
0Uf9rLnkNBUgdZGe0YEKqY/lpdDFDQXTPGCto6iMhj6NrBLtPmIszEo+Sc/rPS/F
7DkFciAMmyEbz1NUbRdqU0iLZAUtWJdwyWQOXgtp+I1AJuMbpn0EeYSepoIYxyNZ
ZBc5RzBQSNN5ZZS9NFt8yy60DY+Wqg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:43:28 2024 by rpki-client on console-fra.rpki-client.org