Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/9AECDB08EE3411ED9B086D5C4AD9E6FC.roa
File:                     9AECDB08EE3411ED9B086D5C4AD9E6FC.roa (raw, json)
Hash identifier:          7TbXwTAAA29/ssAknCIxCJNoExHtrE/m255Mx4kSiPE=
Subject key identifier:   EE:E9:E5:AC:28:7C:B3:1B:88:76:2C:9C:AA:DE:D8:7B:CF:F3:39:A7
Certificate issuer:       /CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Certificate serial:       0265
Authority key identifier: D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/9AECDB08EE3411ED9B086D5C4AD9E6FC.roa
Signing time:             Tue 09 May 2023 06:42:02 +0000
ROA not before:           Tue 09 May 2023 06:41:59 +0000
ROA not after:            Tue 30 Jun 2026 06:41:59 +0000
asID:                     329181
IP address blocks:        102.219.12.0/22 maxlen: 24
                          2c0f:1900::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
        Validity
            Not Before: May  9 06:41:59 2023 GMT
            Not After : Jun 30 06:41:59 2026 GMT
        Subject: CN=6459eb3a-6e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:46:c4:70:f9:98:69:25:51:b9:d5:95:ce:c4:
                    99:ab:6e:be:bd:27:fc:41:08:91:24:60:0d:8b:44:
                    40:88:dc:6c:b1:5c:c8:13:81:72:56:e1:9b:43:f7:
                    fd:88:f4:1a:ec:db:46:97:18:0e:74:56:2b:f5:83:
                    2e:d5:93:3a:dd:cc:52:4a:85:53:36:b2:8b:67:6c:
                    9e:ca:a5:0e:5c:6f:f0:ac:ce:60:eb:c3:d1:29:18:
                    3c:81:c5:2e:1d:c1:2e:3a:f5:53:ff:a9:b3:b4:a0:
                    25:6f:39:d9:86:e0:eb:8c:0f:58:8d:c7:2f:b2:5c:
                    4f:85:e8:3e:87:65:57:e3:f0:52:d1:65:e1:22:8f:
                    c8:b3:7e:01:78:d8:45:dc:a3:69:7a:83:fe:c4:1f:
                    30:a7:5d:49:7a:f2:fa:c4:43:e8:5c:5a:91:7f:82:
                    d4:51:8f:03:7f:b5:f3:55:e6:88:d4:22:ad:c1:46:
                    5c:8d:f2:cf:b1:83:58:aa:b0:ba:70:fd:61:e7:8e:
                    7d:5e:dc:a2:76:42:ad:ff:da:cf:54:f9:ca:54:41:
                    c0:d1:3d:04:00:15:1d:f6:c0:99:85:ad:ba:b5:1b:
                    57:1f:51:88:6d:26:71:c5:8a:9c:c1:b4:ea:5a:68:
                    8d:d3:9c:c0:42:ac:2a:d7:f6:30:1b:3c:c4:ad:c9:
                    90:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E9:E5:AC:28:7C:B3:1B:88:76:2C:9C:AA:DE:D8:7B:CF:F3:39:A7
            X509v3 Authority Key Identifier:
                keyid:D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/9AECDB08EE3411ED9B086D5C4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.12.0/22
                IPv6:
                  2c0f:1900::/32

    Signature Algorithm: sha256WithRSAEncryption
         cb:26:38:95:47:65:fa:43:3f:d7:25:05:f2:f9:08:66:1f:7d:
         9e:e1:4e:ee:de:13:b9:20:5f:de:5d:94:7f:ff:7b:3e:89:1b:
         c2:21:1f:bb:d9:d5:07:5a:ba:11:05:e0:28:27:bd:af:e3:15:
         d8:43:36:91:b6:8d:ab:24:0b:9b:d0:8c:f1:80:73:69:0a:d1:
         6c:ed:ab:07:d9:a9:65:a9:f3:90:9b:db:e5:c4:68:fb:03:a2:
         c5:ae:4d:f4:51:90:97:85:29:c2:e7:20:01:af:1d:a2:07:ee:
         aa:c5:e9:69:d9:1c:10:8c:a9:05:a7:d6:6b:06:ca:fc:51:d1:
         9f:95:8d:93:73:4d:b2:22:b1:92:1b:c7:9a:eb:98:5b:92:40:
         fb:1d:7e:62:75:92:c4:4b:04:e9:43:8a:0f:49:c6:9b:88:e8:
         ce:13:bb:00:9c:f2:04:39:db:0c:6d:38:d2:dc:1f:53:9f:0f:
         6a:c8:f1:23:b0:5b:c9:c6:36:e1:f4:c5:df:5d:40:90:2e:9b:
         df:95:00:30:cc:e2:a7:a1:c5:da:a5:14:60:3c:95:f2:97:d4:
         82:f0:96:cb:32:90:05:bd:50:98:42:87:18:17:c4:58:da:65:
         58:d8:c9:46:68:f8:67:0c:eb:db:b9:6f:6b:82:bd:e4:86:79:
         33:22:46:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----