Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/951EA1701F7811ECB1D1961AD8A014CE.roa
File:                     951EA1701F7811ECB1D1961AD8A014CE.roa (raw, json)
Hash identifier:          1vZMKT9K0+T6pwn8OE0g59G7GIGSdRRo7NEdcXkRfVc=
Subject key identifier:   79:BF:DC:2E:10:87:72:36:BC:E8:E2:56:05:1B:1A:5C:27:F6:F9:AA
Certificate issuer:       /CN=F3683A54AF/serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
Certificate serial:       02
Authority key identifier: 91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/951EA1701F7811ECB1D1961AD8A014CE.roa
Signing time:             Mon 27 Sep 2021 09:52:10 +0000
ROA not before:           Mon 27 Sep 2021 09:52:06 +0000
ROA not after:            Tue 23 Sep 2031 09:52:06 +0000
asID:                     36924
IP address blocks:        102.218.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 30 Mar 2024 00:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683A54AF/serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
        Validity
            Not Before: Sep 27 09:52:06 2021 GMT
            Not After : Sep 23 09:52:06 2031 GMT
        Subject: CN=6151944a-2129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:70:77:f3:a0:3b:08:18:d9:7c:ff:1f:f7:40:
                    ad:5e:f3:f2:72:8d:c8:39:e8:7f:26:7a:69:90:4d:
                    a3:bb:ba:0c:3c:e7:b4:30:f4:af:13:cc:c5:4d:7d:
                    b8:15:6c:f8:ea:52:b7:e1:ba:51:05:05:cd:84:c9:
                    54:26:f8:69:9c:91:5c:fb:c8:95:42:ac:77:f9:f5:
                    50:d8:b3:9f:6b:59:3e:8c:b2:39:8a:11:b2:fd:d2:
                    54:e7:6b:a7:ef:bf:50:75:c6:04:0f:8c:3d:7b:04:
                    c3:c3:90:f3:d2:c2:ba:53:52:0f:76:68:df:c8:be:
                    2c:5e:4b:28:c5:2c:45:0f:32:80:35:45:0a:86:2d:
                    a5:9e:b3:24:b8:8f:42:e0:ae:70:21:59:95:5b:8d:
                    2f:98:2e:49:3b:64:90:46:9f:a0:dc:17:8a:44:6b:
                    f4:47:4d:82:66:88:b7:f1:2b:ca:94:a4:2a:2c:6e:
                    78:95:c1:d7:79:df:f6:ba:97:02:d3:a4:d0:6e:ec:
                    03:f5:55:24:bc:e2:96:01:7d:89:8a:c2:84:43:03:
                    c8:a2:9d:33:3a:43:02:d9:a0:f1:f7:80:f7:47:97:
                    4e:ef:b4:55:e1:b2:f2:ff:2f:90:5f:32:7d:24:ce:
                    05:87:76:2d:ae:61:ba:9b:fc:97:f3:b9:78:d5:c2:
                    54:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BF:DC:2E:10:87:72:36:BC:E8:E2:56:05:1B:1A:5C:27:F6:F9:AA
            X509v3 Authority Key Identifier:
                keyid:91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/951EA1701F7811ECB1D1961AD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:64:e6:fc:cc:d1:f5:43:fe:fa:87:2f:3a:10:71:5a:8c:2f:
         e4:81:ac:8f:e5:12:fa:e2:13:be:af:0e:a4:eb:fa:1a:aa:cf:
         3f:ee:f1:c7:89:3f:2a:b4:1e:dd:b5:4d:43:01:a6:1f:89:9f:
         92:e5:36:8e:db:89:fb:6d:eb:f6:78:67:00:28:f0:ea:15:66:
         2f:01:1b:ed:a0:b2:0e:8f:78:b2:bb:b6:4d:08:d7:1d:6b:94:
         50:d5:69:f8:24:88:2e:5c:74:0e:d1:bd:4d:21:12:ec:58:21:
         68:08:4b:7c:fb:ef:9b:f7:b1:e3:cc:41:52:10:9e:99:77:ec:
         79:65:11:64:04:56:4c:c3:c4:6f:b8:fd:50:17:58:51:3d:80:
         4c:f5:17:14:32:9c:8a:72:0a:5b:94:98:58:1e:c2:6b:f2:29:
         e3:8e:fb:7b:3c:97:9c:11:c6:91:13:1d:62:c9:c5:6f:fa:2a:
         5d:ce:04:0a:b6:cf:0e:31:e3:a9:e9:a6:7e:ca:d3:54:62:56:
         fc:53:1e:ae:7e:da:c4:d4:05:56:31:4c:0d:19:3b:3c:ff:36:
         02:7e:c7:2a:34:e6:2b:ed:eb:27:ad:ed:0a:58:d4:6c:4e:67:
         03:6b:fa:d4:ff:50:80:2d:cd:ce:23:2e:ce:99:e3:89:81:6f:
         c0:c3:c2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 03:12:53 2024 by rpki-client on console-fra.rpki-client.org