Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/F3961630123611EF80C92C51017001B1.roa
File:                     F3961630123611EF80C92C51017001B1.roa (raw, json)
Hash identifier:          P7zmLDBytjro0KKIgTEyZppS7BdxrGwBEJ1mm2r94Gc=
Subject key identifier:   BD:B1:D4:B3:12:8C:F2:1F:FF:0D:AA:FC:02:38:CC:D2:4C:71:3D:57
Certificate issuer:       /CN=F369F058AF/serialNumber=C92E885827C67619E13175703017C4442DDFEACF
Certificate serial:       0789
Authority key identifier: C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/F3961630123611EF80C92C51017001B1.roa
Signing time:             Tue 14 May 2024 21:14:30 +0000
ROA not before:           Tue 14 May 2024 21:14:25 +0000
ROA not after:            Tue 31 Dec 2030 21:14:25 +0000
asID:                     328114
IP address blocks:        102.134.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929 (0x789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F058AF/serialNumber=C92E885827C67619E13175703017C4442DDFEACF
        Validity
            Not Before: May 14 21:14:25 2024 GMT
            Not After : Dec 31 21:14:25 2030 GMT
        Subject: CN=6643d435-ee19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c4:c6:82:56:ec:a3:ef:bf:28:22:f3:21:78:
                    2c:d3:fa:7d:43:8d:6f:1e:8c:2e:75:13:d3:40:a8:
                    65:ce:e7:76:d3:73:8c:6c:e3:ec:bd:af:07:1b:75:
                    de:f5:73:1b:86:84:c4:31:04:ce:3d:0a:f6:85:34:
                    e5:b6:1a:17:2a:94:06:5a:8d:e3:7a:7a:c0:41:90:
                    37:43:ee:21:fb:27:7d:c0:19:3a:21:d7:28:c6:2b:
                    ef:38:c8:87:dc:c5:4e:3a:62:6d:ac:1c:0a:a9:6c:
                    db:12:b2:8c:60:34:f6:80:0a:da:90:51:d8:90:3e:
                    57:fa:e5:61:fa:ea:f0:a6:2e:48:d4:08:c7:32:7e:
                    38:41:3d:72:17:fd:40:68:f2:3d:0b:d5:16:cc:b1:
                    85:d1:44:3a:2d:61:4a:33:64:66:5b:fe:7f:e1:2c:
                    e7:9d:34:25:3c:3c:f0:a9:d7:f5:a7:6e:99:a4:2a:
                    06:1e:b6:b3:24:73:fd:93:9f:a7:bd:48:02:b8:dc:
                    fc:3b:a1:82:b7:72:fa:3d:48:20:4b:31:9e:7d:ef:
                    e7:7e:20:da:98:5c:ee:24:48:dc:01:16:9c:72:dc:
                    4c:33:77:5d:ae:fb:f6:7e:47:7c:11:d5:39:c0:7e:
                    46:f7:ca:3c:55:7b:11:ab:4a:8f:ec:7a:a1:c1:ad:
                    2d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B1:D4:B3:12:8C:F2:1F:FF:0D:AA:FC:02:38:CC:D2:4C:71:3D:57
            X509v3 Authority Key Identifier:
                keyid:C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/F3961630123611EF80C92C51017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.134.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         78:06:ef:8a:64:65:56:b4:86:66:c5:e5:95:71:f7:cc:4b:3e:
         09:59:c5:05:08:70:3e:a5:d8:54:c7:b7:68:64:e0:36:92:cd:
         34:99:a1:f7:4a:1b:86:5b:99:3a:20:96:ff:9d:3a:6e:e8:d5:
         29:39:ce:cc:94:01:4b:87:f6:39:bc:f7:df:04:d6:de:92:ab:
         07:aa:ca:1d:b2:77:44:22:11:be:1a:1a:4b:fc:56:01:e1:df:
         e1:9d:d2:c6:5c:11:bf:aa:e0:67:e6:b7:1c:03:8a:a4:0c:05:
         4c:1f:c5:58:d8:b6:46:7b:3e:89:81:a7:43:2e:4c:2c:30:56:
         7a:e6:cf:fa:53:76:ce:04:42:0c:48:71:f0:a1:0b:f0:72:1f:
         ea:e7:15:5c:b8:e6:17:5a:b5:89:8f:86:c8:c6:d7:4d:97:12:
         11:07:2d:b4:2a:68:50:d3:19:57:b9:59:bd:39:7f:b1:3e:b3:
         38:31:95:22:f5:6a:6f:85:43:db:e8:19:3e:db:aa:81:d1:78:
         c6:bd:be:74:08:7a:18:a1:32:fe:0d:98:9a:74:39:5c:28:e5:
         3f:2c:e0:3c:97:7f:42:37:aa:a8:7a:c1:95:6f:55:89:0e:6c:
         73:44:4f:2c:fd:76:0c:23:b3:bf:5b:30:25:25:5a:d2:21:d3:
         5c:53:c8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:13 2024 by rpki-client on console-fra.rpki-client.org