Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/C90FF62AA8CA11EBBB067F7DF8AEA228.roa
File:                     C90FF62AA8CA11EBBB067F7DF8AEA228.roa (raw, json)
Hash identifier:          7gE3ZmR31Vf8XT8pHiCTn2tBLPm5HPmYasDasMsyy0g=
Subject key identifier:   AF:39:F4:92:44:2A:C8:88:58:B2:97:D4:51:E6:DA:35:72:4A:20:A7
Certificate issuer:       /CN=F36997F0AF/serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
Certificate serial:       02
Authority key identifier: 8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/C90FF62AA8CA11EBBB067F7DF8AEA228.roa
Signing time:             Thu 29 Apr 2021 09:10:48 +0000
ROA not before:           Thu 29 Apr 2021 09:10:42 +0000
ROA not after:            Mon 29 Apr 2030 09:10:42 +0000
asID:                     328843
IP address blocks:        102.220.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36997F0AF/serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
        Validity
            Not Before: Apr 29 09:10:42 2021 GMT
            Not After : Apr 29 09:10:42 2030 GMT
        Subject: CN=608a7817-ac4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:02:48:c2:50:b3:9a:09:16:7a:b2:77:9a:
                    c7:1e:75:3c:e8:14:f6:f4:33:c7:95:ea:a6:be:11:
                    c7:9a:ef:42:2f:86:7e:50:d1:7d:02:4d:24:02:77:
                    41:06:50:eb:51:09:c0:a1:f7:90:6e:62:ec:f2:4f:
                    77:06:49:44:80:69:f3:22:2f:3b:68:20:f7:20:58:
                    e7:a7:17:93:1d:43:eb:ed:c8:2d:b2:c1:23:0a:1c:
                    f5:b2:92:20:3c:7d:66:51:55:f9:39:76:db:4c:b3:
                    23:54:01:0a:07:95:ce:5a:12:05:02:6c:40:bf:30:
                    9e:b2:ae:0e:30:80:4d:66:79:dd:8f:6d:09:5f:ad:
                    41:bd:1e:9d:c2:23:b0:18:a8:e0:cb:90:35:cd:b7:
                    42:97:7b:52:35:32:b1:c7:f8:d7:49:02:57:0e:21:
                    dc:46:b4:bd:31:46:7d:f4:4c:e3:aa:28:f2:b9:6c:
                    d1:f2:c4:1d:6b:5c:f1:11:80:07:71:67:57:87:93:
                    21:0c:83:0f:83:3b:91:11:b3:71:c8:58:de:1c:d7:
                    e8:a1:62:da:ae:ab:40:8f:23:45:a7:1f:a5:28:58:
                    00:36:30:42:24:6a:a0:5d:3c:57:cb:86:9c:ad:44:
                    44:2c:93:b8:60:d9:75:74:26:1b:86:e6:fa:41:8e:
                    5f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:39:F4:92:44:2A:C8:88:58:B2:97:D4:51:E6:DA:35:72:4A:20:A7
            X509v3 Authority Key Identifier:
                keyid:8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/C90FF62AA8CA11EBBB067F7DF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.220.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:43:a7:50:27:89:af:46:8d:f2:b8:20:89:c4:4d:e3:ee:0c:
         50:cc:f7:86:f2:55:9c:32:35:96:96:a4:c4:df:bb:4c:01:5b:
         df:4a:3e:5b:d7:06:31:da:1c:2f:42:96:bb:17:0f:b4:25:85:
         cf:d6:87:87:f5:7e:3a:a1:0b:76:5d:fa:5a:33:33:ef:ce:ec:
         0a:9a:78:e2:bf:02:8f:1c:e0:dc:d6:21:0a:c3:39:fc:72:ad:
         cc:95:21:b6:47:27:80:5c:bc:13:01:89:9c:32:29:e3:31:42:
         c8:23:42:c4:9a:49:f6:6d:20:53:4e:75:c4:f8:10:8f:ac:49:
         89:ec:e1:48:db:13:f9:9a:6f:04:f3:00:ed:f9:d7:56:11:ae:
         fb:45:38:a5:45:99:ae:38:05:0a:9b:f8:6f:4d:14:78:9a:d6:
         83:a3:a5:a2:ef:4b:24:ab:e4:ee:5b:09:71:76:a4:a1:7a:33:
         f5:d6:20:3b:03:5e:18:49:80:5b:d9:ea:8e:7d:8d:8e:19:1c:
         46:a6:3b:be:d9:d2:0f:24:6f:c0:5b:ee:32:4e:b0:29:51:85:
         dc:71:16:56:d1:25:f8:3a:8c:ff:39:73:e2:30:00:06:ac:ab:
         04:24:48:ef:fc:c9:c2:8f:ba:2a:dc:d7:66:ab:34:f6:c7:ac:
         a2:98:f8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:19:14 2024 by rpki-client on console-ams.rpki-client.org