Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/6A08039C101011EFA385055B017001B1.roa
File:                     6A08039C101011EFA385055B017001B1.roa (raw, json)
Hash identifier:          A6nZPy/mB+rYQKkTcDrcj6TrmIhozwVdv/FBstEbirU=
Subject key identifier:   46:A0:AC:C0:9B:02:16:96:A7:86:80:E1:65:BD:49:F8:BD:D6:B7:B9
Certificate issuer:       /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial:       26
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/6A08039C101011EFA385055B017001B1.roa
Signing time:             Sun 12 May 2024 03:33:36 +0000
ROA not before:           Sun 12 May 2024 03:33:30 +0000
ROA not after:            Fri 12 May 2034 03:33:30 +0000
asID:                     328586
IP address blocks:        102.22.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Jun 2024 00:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
        Validity
            Not Before: May 12 03:33:30 2024 GMT
            Not After : May 12 03:33:30 2034 GMT
        Subject: CN=6640388f-8c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:7f:74:ea:54:f3:38:d3:c4:99:0b:f6:ff:
                    e9:a4:4c:a8:cc:25:f3:70:65:99:ac:d4:e5:af:e7:
                    48:9d:17:bb:f4:e2:68:0e:42:95:50:f8:2f:61:66:
                    63:2f:e3:3d:fc:c0:c9:3f:10:7d:f6:67:90:d4:11:
                    18:92:d4:06:e1:87:e4:7e:92:e5:ce:eb:c2:0f:d7:
                    93:93:fd:49:29:cf:d3:f1:1a:b6:c3:6f:16:f1:a8:
                    61:08:d1:8c:d0:2b:94:cf:f8:18:24:4f:93:8a:38:
                    65:75:74:ce:c8:a3:ec:62:1b:25:06:6e:11:1b:ad:
                    ac:71:c1:25:62:62:8c:e2:ed:13:3b:04:9a:eb:1b:
                    e7:84:37:73:bb:cf:1c:d9:52:b3:eb:29:b5:fe:d1:
                    c7:62:ca:45:ef:19:5e:ef:d1:c7:2a:26:45:13:71:
                    d8:52:fa:18:9b:dd:d1:93:8a:17:ea:2f:c0:4e:39:
                    68:f6:18:2d:73:6f:44:c1:7c:08:c5:b4:ec:07:d3:
                    fc:84:f3:20:65:23:11:04:a6:19:6f:dd:d9:a3:48:
                    00:1a:04:9c:c9:be:c1:95:9f:25:4c:5c:16:d3:13:
                    24:4d:81:f9:d1:a7:fe:a0:71:bc:d8:7e:95:10:5e:
                    28:04:ff:6f:f9:5b:6d:24:a7:f1:a9:a0:91:43:d7:
                    6c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A0:AC:C0:9B:02:16:96:A7:86:80:E1:65:BD:49:F8:BD:D6:B7:B9
            X509v3 Authority Key Identifier:
                keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/6A08039C101011EFA385055B017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.22.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:3f:a3:01:5b:e5:e7:88:e0:29:1e:57:b2:11:a8:9b:ec:98:
         dd:b6:5d:98:20:a4:d8:7c:f5:2d:1e:25:67:a5:aa:e5:83:4d:
         d9:1d:e2:60:7f:0f:0e:cb:67:23:5e:82:c8:2f:c5:e8:03:b8:
         aa:2b:10:c4:d5:63:66:c1:61:62:f5:a4:00:98:63:cc:7f:68:
         15:57:e7:29:6c:21:44:9a:53:31:75:18:07:a0:57:51:0c:cd:
         54:77:9e:f0:a6:b7:d9:0c:28:4c:53:a6:78:70:36:cf:08:86:
         1d:5f:61:29:97:28:12:58:39:e4:82:68:9e:20:f4:d0:b1:fe:
         1a:5a:52:7b:d0:e8:a8:d4:a1:d1:34:e7:1f:f7:5e:19:fa:37:
         c7:62:ac:28:e5:99:1f:03:4d:43:9d:44:40:63:3e:25:80:e4:
         d0:31:c8:4c:67:f8:23:71:1b:41:45:82:19:02:35:6b:69:79:
         c4:60:cb:ca:89:0c:39:80:de:e0:03:52:c2:0f:31:59:cf:58:
         f3:08:f4:e6:c9:3d:d0:ef:09:d3:c3:89:df:78:e1:9b:d5:2b:
         0a:14:81:55:69:10:c5:86:12:46:5e:07:cc:48:48:e1:56:c8:
         7c:45:ff:ba:a5:6f:f3:a0:22:82:bc:f6:db:99:ac:38:dd:f9:
         4b:98:ae:5d
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBJjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
M0FFMEFGMTEwLwYDVQQFEygwOUIzNEUxMzM2MzlEM0I0RUUzNTE2MTNCOEE2MEQ2
QjE5MDJBRDYzMB4XDTI0MDUxMjAzMzMzMFoXDTM0MDUxMjAzMzMzMFowGDEWMBQG
A1UEAxMNNjY0MDM4OGYtOGMzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANB9f3TqVPM408SZC/b/6aRMqMwl83BlmazU5a/nSJ0Xu/TiaA5ClVD4L2Fm
Yy/jPfzAyT8QffZnkNQRGJLUBuGH5H6S5c7rwg/Xk5P9SSnP0/EatsNvFvGoYQjR
jNArlM/4GCRPk4o4ZXV0zsij7GIbJQZuERutrHHBJWJijOLtEzsEmusb54Q3c7vP
HNlSs+sptf7Rx2LKRe8ZXu/RxyomRRNx2FL6GJvd0ZOKF+ovwE45aPYYLXNvRMF8
CMW07AfT/ITzIGUjEQSmGW/d2aNIABoEnMm+wZWfJUxcFtMTJE2B+dGn/qBxvNh+
lRBeKAT/b/lbbSSn8amgkUPXbNECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRGoKzA
mwIWlqeGgOFlvUn4vda3uTAfBgNVHSMEGDAWgBQJs04TNjnTtO41FhO4pg1rGQKt
YzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTNBRTAvQkJFNTJGRjIwMEUxMTFFRkFGODRENjA3MDE3MDAxQjEvQ2JOT0V6
WTUwN1R1TlJZVHVLWU5heGtDcldNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvQ2JOT0V6WTUwN1R1TlJZVHVLWU5heGtDcldNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTNBRTAvQkJFNTJGRjIwMEUxMTFFRkFGODRENjA3MDE3
MDAxQjEvNkEwODAzOUMxMDEwMTFFRkEzODUwNTVCMDE3MDAxQjEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmYW6DANBgkqhkiG9w0BAQsF
AAOCAQEATz+jAVvl54jgKR5XshGom+yY3bZdmCCk2Hz1LR4lZ6Wq5YNN2R3iYH8P
DstnI16CyC/F6AO4qisQxNVjZsFhYvWkAJhjzH9oFVfnKWwhRJpTMXUYB6BXUQzN
VHee8Ka32QwoTFOmeHA2zwiGHV9hKZcoElg55IJoniD00LH+GlpSe9DoqNSh0TTn
H/deGfo3x2KsKOWZHwNNQ51EQGM+JYDk0DHITGf4I3EbQUWCGQI1a2l5xGDLyokM
OYDe4ANSwg8xWc9Y8wj05sk90O8J08OJ33jhm9UrChSBVWkQxYYSRl4HzEhI4VbI
fEX/uqVv86Aigrz225msON35S5iuXQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:31:05 2024 by rpki-client on console-ams.rpki-client.org