Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BAF0/129844362CBB11ECB2D8366ED8A014CE/6E041F923E2C11EDA29BD77CF1222468.roa
File:                     6E041F923E2C11EDA29BD77CF1222468.roa (raw, json)
Hash identifier:          KkAOdwznbx84C1TUMJA/kWxrXDX2vsAjgB6hAz88TGU=
Subject key identifier:   2E:6D:30:4C:01:07:71:9A:B9:0B:3C:2D:F9:66:18:C7:04:C3:44:21
Certificate issuer:       /CN=F369BAF0AF/serialNumber=27319BFD9C6EC5953E5629599AFFE2D26A9404F2
Certificate serial:       0166
Authority key identifier: 27:31:9B:FD:9C:6E:C5:95:3E:56:29:59:9A:FF:E2:D2:6A:94:04:F2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JzGb_ZxuxZU-VilZmv_i0mqUBPI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BAF0/129844362CBB11ECB2D8366ED8A014CE/6E041F923E2C11EDA29BD77CF1222468.roa
Signing time:             Tue 27 Sep 2022 06:20:06 +0000
ROA not before:           Tue 27 Sep 2022 06:20:02 +0000
ROA not after:            Mon 18 Jan 2027 06:20:02 +0000
asID:                     328068
IP address blocks:        102.130.104.0/23 maxlen: 23
                          102.130.105.0/24 maxlen: 24
                          102.130.106.0/23 maxlen: 23
                          102.130.106.0/24 maxlen: 24
                          102.130.107.0/24 maxlen: 24
                          102.130.108.0/24 maxlen: 24
                          102.130.109.0/24 maxlen: 24
                          102.130.110.0/24 maxlen: 24
                          102.130.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369BAF0/129844362CBB11ECB2D8366ED8A014CE/JzGb_ZxuxZU-VilZmv_i0mqUBPI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369BAF0/129844362CBB11ECB2D8366ED8A014CE/JzGb_ZxuxZU-VilZmv_i0mqUBPI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JzGb_ZxuxZU-VilZmv_i0mqUBPI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BAF0AF/serialNumber=27319BFD9C6EC5953E5629599AFFE2D26A9404F2
        Validity
            Not Before: Sep 27 06:20:02 2022 GMT
            Not After : Jan 18 06:20:02 2027 GMT
        Subject: CN=63329616-f6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:6b:da:81:dc:cc:72:80:8d:d7:6e:ba:fa:86:
                    2c:78:bb:1e:e0:66:d4:24:da:3d:b8:0b:eb:65:bc:
                    81:47:d7:09:6e:29:d2:0b:a3:8e:0c:c0:a5:22:6d:
                    fc:b3:02:d0:e6:72:bd:de:09:b2:2a:5e:58:a8:b3:
                    08:b8:b4:e3:1a:91:da:89:e0:44:77:6b:34:f4:08:
                    50:bf:8f:07:e1:de:db:e6:a0:b0:1e:ff:4a:43:e9:
                    a6:c7:24:6c:c1:5c:c4:c8:eb:b6:61:a9:74:77:f3:
                    88:54:d5:f3:3b:80:c2:de:cd:90:e1:23:73:58:25:
                    62:3d:b3:33:56:78:09:57:ec:97:15:e3:66:91:ba:
                    3d:38:08:25:a0:24:7a:01:64:b8:ac:a3:8e:0b:0b:
                    37:e0:93:c7:f0:9f:1c:0d:50:d4:f8:bc:8e:44:44:
                    a7:52:b8:7b:22:84:d7:9a:b6:b6:40:9d:e5:1f:f4:
                    b3:99:77:84:b9:98:72:92:3b:bf:86:9e:2f:20:48:
                    40:90:3d:5d:0b:5b:cc:6e:8d:70:2d:e4:1d:be:27:
                    a0:f9:1f:b8:25:ef:92:44:0b:17:de:ee:de:ce:27:
                    37:fc:f8:3f:fc:ae:d0:4f:cd:8e:dc:dd:a2:2f:a9:
                    a3:4d:06:08:47:78:4f:1e:7d:f5:7e:1f:7e:78:58:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6D:30:4C:01:07:71:9A:B9:0B:3C:2D:F9:66:18:C7:04:C3:44:21
            X509v3 Authority Key Identifier:
                keyid:27:31:9B:FD:9C:6E:C5:95:3E:56:29:59:9A:FF:E2:D2:6A:94:04:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BAF0/129844362CBB11ECB2D8366ED8A014CE/JzGb_ZxuxZU-VilZmv_i0mqUBPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JzGb_ZxuxZU-VilZmv_i0mqUBPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BAF0/129844362CBB11ECB2D8366ED8A014CE/6E041F923E2C11EDA29BD77CF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.130.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b4:3f:33:84:f4:3f:b1:8d:40:04:40:8c:e6:46:2a:fe:6a:36:
         65:03:18:07:ac:7a:7d:4a:0b:ba:27:d2:09:9e:eb:44:80:3a:
         c2:1f:07:ab:d5:3d:9c:1a:f6:82:8b:0c:3f:75:b0:c9:38:06:
         c5:b2:50:79:b4:94:9c:f3:34:9d:5f:4d:1f:c4:2f:a7:2b:c8:
         89:1c:07:fe:24:2d:e6:31:d8:21:b5:c7:ee:a8:ff:78:75:f1:
         82:63:1a:43:ac:e4:1e:ad:97:a4:7b:01:d3:95:c1:79:bf:b1:
         e4:f9:11:c1:f9:96:7f:f4:f9:dd:a2:51:49:cf:af:46:1e:5f:
         1b:bd:99:9a:fd:2a:24:a0:e6:dc:c2:48:06:6b:c0:d3:15:f1:
         5a:95:85:a9:5b:15:87:df:60:a5:08:94:3d:0b:58:32:4f:c0:
         7f:41:0d:b2:61:ea:d2:0d:79:f3:ea:09:27:9d:8c:64:97:30:
         88:62:c8:bb:0e:8c:29:8b:c0:f3:3a:67:0d:b3:4f:3e:99:aa:
         65:43:e4:c2:5a:42:30:04:1c:37:45:7c:38:6a:aa:86:30:1e:
         7d:c0:cb:68:0b:e5:ba:68:14:02:56:bc:9c:08:cb:d3:74:8b:
         50:db:b2:a4:ea:6e:36:dd:4c:c3:d4:9b:36:a0:0c:c2:02:c6:
         1d:aa:30:8f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OUJBRjBBRjExMC8GA1UEBRMoMjczMTlCRkQ5QzZFQzU5NTNFNTYyOTU5OUFGRkUy
RDI2QTk0MDRGMjAeFw0yMjA5MjcwNjIwMDJaFw0yNzAxMTgwNjIwMDJaMBgxFjAU
BgNVBAMMDTYzMzI5NjE2LWY2ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD4a9qB3MxygI3Xbrr6hix4ux7gZtQk2j24C+tlvIFH1wluKdILo44MwKUi
bfyzAtDmcr3eCbIqXlioswi4tOMakdqJ4ER3azT0CFC/jwfh3tvmoLAe/0pD6abH
JGzBXMTI67ZhqXR384hU1fM7gMLezZDhI3NYJWI9szNWeAlX7JcV42aRuj04CCWg
JHoBZLiso44LCzfgk8fwnxwNUNT4vI5ERKdSuHsihNeatrZAneUf9LOZd4S5mHKS
O7+Gni8gSECQPV0LW8xujXAt5B2+J6D5H7gl75JECxfe7t7OJzf8+D/8rtBPzY7c
3aIvqaNNBghHeE8effV+H354WNBXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQULm0w
TAEHcZq5Czwt+WYYxwTDRCEwHwYDVR0jBBgwFoAUJzGb/ZxuxZU+VilZmv/i0mqU
BPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlCQUYwLzEyOTg0NDM2MkNCQjExRUNCMkQ4MzY2RUQ4QTAxNENFL0p6R2Jf
Wnh1eFpVLVZpbFptdl9pMG1xVUJQSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0p6R2JfWnh1eFpVLVZpbFptdl9pMG1xVUJQSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlCQUYwLzEyOTg0NDM2MkNCQjExRUNCMkQ4MzY2RUQ4
QTAxNENFLzZFMDQxRjkyM0UyQzExRURBMjlCRDc3Q0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANmgmgwDQYJKoZIhvcNAQEL
BQADggEBALQ/M4T0P7GNQARAjOZGKv5qNmUDGAesen1KC7on0gme60SAOsIfB6vV
PZwa9oKLDD91sMk4BsWyUHm0lJzzNJ1fTR/EL6cryIkcB/4kLeYx2CG1x+6o/3h1
8YJjGkOs5B6tl6R7AdOVwXm/seT5EcH5ln/0+d2iUUnPr0YeXxu9mZr9KiSg5tzC
SAZrwNMV8VqVhalbFYffYKUIlD0LWDJPwH9BDbJh6tINefPqCSedjGSXMIhiyLsO
jCmLwPM6Zw2zTz6ZqmVD5MJaQjAEHDdFfDhqqoYwHn3Ay2gL5bpoFAJWvJwIy9N0
i1DbsqTqbjbdTMPUmzagDMICxh2qMI8=
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:07 2024 by rpki-client on console-ams.rpki-client.org