Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/7319A346865311EFBF9C838D762E951A.roa
File:                     7319A346865311EFBF9C838D762E951A.roa (raw, json)
Hash identifier:          lo3g6X3ubdXC9HjeAdNZwt2kyeKYY3nM3ILNgfq1PjI=
Subject key identifier:   C4:89:1F:1A:70:68:4A:4E:BA:94:AE:AD:2C:BD:19:81:7F:09:39:68
Certificate issuer:       /CN=F3695083AF/serialNumber=E5103ED119E6479BB036B7C3F48DCC9E62C17424
Certificate serial:       07
Authority key identifier: E5:10:3E:D1:19:E6:47:9B:B0:36:B7:C3:F4:8D:CC:9E:62:C1:74:24
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/7319A346865311EFBF9C838D762E951A.roa
Signing time:             Wed 09 Oct 2024 15:30:44 +0000
ROA not before:           Wed 09 Oct 2024 15:30:41 +0000
ROA not after:            Thu 09 Oct 2025 15:30:41 +0000
asID:                     329303
IP address blocks:        102.211.132.0/22 maxlen: 24
                          2c0f:1440::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695083AF/serialNumber=E5103ED119E6479BB036B7C3F48DCC9E62C17424
        Validity
            Not Before: Oct  9 15:30:41 2024 GMT
            Not After : Oct  9 15:30:41 2025 GMT
        Subject: CN=6706a1a4-e9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:b7:94:bd:79:5a:71:e3:c9:54:ac:66:38:
                    96:01:34:84:51:51:9e:af:db:51:cc:90:77:28:f3:
                    9d:49:ff:91:4f:d9:5a:e7:0e:f3:c3:c7:d9:aa:fa:
                    26:4c:e4:37:bc:a1:3c:6e:a8:cb:f0:84:81:60:0f:
                    e6:63:c6:49:fc:4e:44:c3:3b:2e:08:52:c9:5b:f1:
                    96:1a:1d:00:0a:31:74:19:2d:e3:05:a5:93:d6:bf:
                    f4:b8:da:47:15:92:d5:35:58:7a:9d:95:37:69:2e:
                    41:e0:99:55:c8:69:ea:de:34:13:77:dd:bf:8d:96:
                    87:6e:1d:97:32:d4:be:ee:8b:82:6c:3c:39:fb:11:
                    f3:15:ff:ea:b1:54:19:a2:90:7e:59:8b:9e:58:87:
                    cf:6a:4f:78:7b:88:11:75:fb:27:72:dd:9f:ed:c8:
                    4b:a2:65:f4:be:a7:bf:20:eb:2e:c2:96:4d:bd:d7:
                    b5:e0:87:94:da:bc:02:4c:20:77:1a:65:62:f5:17:
                    df:f5:29:1f:e2:4a:b4:8c:db:5c:21:27:d2:c2:0d:
                    f3:f4:b0:c5:cc:97:af:7f:35:ad:c2:0e:32:18:fb:
                    f8:c9:66:ad:0f:ce:28:7b:b9:ef:8e:0e:62:01:55:
                    cd:d5:5b:d1:d2:ca:b3:b8:21:d3:17:85:57:55:9f:
                    d6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:89:1F:1A:70:68:4A:4E:BA:94:AE:AD:2C:BD:19:81:7F:09:39:68
            X509v3 Authority Key Identifier:
                keyid:E5:10:3E:D1:19:E6:47:9B:B0:36:B7:C3:F4:8D:CC:9E:62:C1:74:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/7319A346865311EFBF9C838D762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.211.132.0/22
                IPv6:
                  2c0f:1440::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:01:cc:71:df:0a:46:f0:f0:33:0b:e2:58:e8:11:ba:45:09:
         e4:60:b5:e5:20:0e:67:c8:c0:3b:93:1c:c6:95:94:bc:d6:4f:
         f7:02:73:cf:34:02:39:f8:83:13:3f:f0:05:28:70:f1:ba:73:
         d9:67:7b:78:93:92:3c:a9:47:b0:ea:23:03:73:30:a4:6f:94:
         fa:6b:6a:58:06:e6:e0:cf:cf:c4:47:7a:ff:46:fc:9a:d6:c6:
         3c:ad:d7:1c:4e:31:34:c8:90:05:46:e7:61:1f:b8:2d:c6:34:
         0f:ad:f0:8f:fc:70:66:69:6e:65:41:02:39:5c:71:7e:9d:e7:
         92:cf:80:48:27:de:c2:83:0f:fa:f2:b3:a3:ce:df:a8:eb:7a:
         d4:64:73:d7:6c:3a:08:29:83:ee:62:c3:f4:4a:9f:d8:f2:2e:
         a6:bc:63:a4:9b:0b:5d:be:58:c4:43:3b:94:35:45:f5:8b:1b:
         45:8f:8d:2e:3e:09:92:b8:2b:89:8c:2f:f2:f0:a4:36:c2:f2:
         07:41:7e:16:fc:7f:95:19:89:99:be:65:d9:c2:e9:16:91:06:
         5b:35:58:03:68:18:38:af:63:61:3d:b5:e1:bd:57:ec:72:91:
         49:db:c6:5f:ca:9b:de:b2:37:36:f4:eb:f3:c4:ca:52:0c:0f:
         8e:8e:bc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----