Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/FE6EB5FE1A4311ED966281A5F1222468.roa
File:                     FE6EB5FE1A4311ED966281A5F1222468.roa (raw, json)
Hash identifier:          lfZWe5DsRVIlTxGTn/2XYFuZb+ctw8ovU8wMMSRVTV8=
Subject key identifier:   52:15:86:4E:52:33:3A:BF:F8:EB:12:9C:23:95:37:FF:6B:1D:7D:1B
Certificate issuer:       /CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Certificate serial:       0147
Authority key identifier: D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/FE6EB5FE1A4311ED966281A5F1222468.roa
Signing time:             Fri 12 Aug 2022 13:38:05 +0000
ROA not before:           Fri 12 Aug 2022 13:38:01 +0000
ROA not after:            Thu 12 Aug 2032 13:38:01 +0000
asID:                     328317
IP address blocks:        102.217.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
        Validity
            Not Before: Aug 12 13:38:01 2022 GMT
            Not After : Aug 12 13:38:01 2032 GMT
        Subject: CN=62f657bd-ff0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0a:cf:9a:26:87:f5:df:0a:a0:ba:12:c7:03:
                    b3:0b:eb:be:6d:f1:b4:4b:29:01:ea:75:0a:34:dd:
                    f3:46:67:d9:68:8a:df:29:76:4c:dd:61:48:aa:62:
                    fd:84:33:30:c9:97:09:07:c3:d3:28:cc:39:f3:b4:
                    2e:92:22:f4:19:85:de:18:f0:48:24:94:c9:4c:c5:
                    75:2f:00:28:53:89:a2:d2:7b:49:85:41:35:ed:a8:
                    8b:27:de:ae:bf:bb:4b:ea:34:94:35:72:83:82:d4:
                    4c:3a:07:65:98:b8:77:c8:18:95:cb:82:0b:9e:b9:
                    f6:1b:3b:9e:64:f4:c4:63:66:30:f0:b4:ed:54:29:
                    4a:bb:42:99:9a:cd:40:4d:a5:56:d7:7f:53:24:2e:
                    9e:44:04:0c:2f:5c:bb:f1:3b:85:36:8b:fb:76:a8:
                    0a:7c:1c:87:5b:e9:9d:06:0f:fa:5d:4d:2c:fd:a8:
                    0a:d4:7b:be:f0:a3:f3:7d:01:c4:9d:86:e2:6a:6d:
                    16:4d:14:8f:30:17:46:54:ad:32:e0:fb:19:5e:3a:
                    59:96:62:b9:6b:32:ed:f6:f8:63:49:c4:35:46:9f:
                    46:d0:14:25:84:6a:9b:c9:92:ed:9f:3a:64:9e:70:
                    e1:34:bb:d8:c0:86:f4:1a:4f:03:78:97:ce:5a:35:
                    6d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:15:86:4E:52:33:3A:BF:F8:EB:12:9C:23:95:37:FF:6B:1D:7D:1B
            X509v3 Authority Key Identifier:
                keyid:D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/FE6EB5FE1A4311ED966281A5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:36:9f:24:0d:ac:f8:bc:68:00:ca:85:58:5d:f4:65:89:32:
         a7:c2:10:88:0f:7c:7d:ff:f8:6b:75:ca:2f:3e:3b:81:53:fd:
         9f:27:66:ae:4f:9f:e2:9d:47:26:5b:e6:40:e7:54:81:95:6a:
         ed:e8:50:ff:29:9b:92:d8:5b:78:3f:3e:32:c1:e1:33:6a:79:
         0c:85:e2:3c:ed:72:0d:b2:48:5e:af:56:8b:a1:f5:24:2b:21:
         17:b7:13:0d:68:58:7d:87:62:79:4b:3d:db:dd:77:a3:9d:17:
         9b:29:f9:db:62:07:db:18:70:2e:05:64:a0:48:5e:1e:57:83:
         79:ca:80:00:a0:3e:56:c0:ba:d9:8d:4d:ff:1d:30:00:71:55:
         94:47:c4:2c:03:10:69:fd:2a:7c:f8:15:6f:07:cc:04:3f:33:
         dc:2c:51:ef:1e:52:eb:85:1f:a9:dc:0f:8e:a2:db:cd:06:5e:
         3f:e6:9e:d1:4a:58:0a:c7:e8:29:e8:33:b6:b7:5b:8b:5f:6e:
         de:92:9f:6d:ba:48:c0:85:fa:86:0f:fc:76:84:cc:81:b8:26:
         5e:f1:15:f0:8e:b9:f1:6c:ab:f3:3f:35:36:f2:18:b6:4c:e1:
         9e:ed:3b:42:04:5b:59:29:be:7c:14:10:a7:75:1e:52:08:2b:
         0f:f8:93:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org