Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/FCFB2C46429311EF932F40BD762E951A.roa
File:                     FCFB2C46429311EF932F40BD762E951A.roa (raw, json)
Hash identifier:          aj7dKtZkdlsVdxJmDsYKu4bL2W4gvGpRJEhdeSSyuFM=
Subject key identifier:   93:26:8E:C9:AC:5A:AC:58:C0:FC:9C:5A:20:89:C2:B3:0A:CA:F4:9A
Certificate issuer:       /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial:       04B5
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/FCFB2C46429311EF932F40BD762E951A.roa
Signing time:             Mon 15 Jul 2024 10:21:24 +0000
ROA not before:           Mon 15 Jul 2024 10:21:21 +0000
ROA not after:            Sat 15 Jul 2034 10:21:21 +0000
asID:                     37645
IP address blocks:        102.208.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1205 (0x4b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
        Validity
            Not Before: Jul 15 10:21:21 2024 GMT
            Not After : Jul 15 10:21:21 2034 GMT
        Subject: CN=6694f824-0ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:91:4c:33:2c:93:8c:d1:63:c4:0f:e9:6f:
                    7e:2c:17:e9:14:f8:0f:f2:dd:3d:38:bd:6b:3a:50:
                    0b:c5:51:4d:91:78:5d:69:27:b3:3c:52:83:56:52:
                    45:10:f0:61:49:fa:1e:59:df:f4:38:a2:f9:76:76:
                    7d:a1:10:0a:5c:3d:3c:0b:f8:66:ca:74:2b:14:81:
                    76:be:25:5e:91:01:13:da:82:09:94:e0:85:f6:05:
                    06:a8:16:47:2f:8e:0f:58:3b:f9:d1:6c:48:f3:c4:
                    0d:d5:d6:ae:32:61:0e:26:05:55:c2:3d:a6:77:b2:
                    0c:09:4a:48:e2:24:83:64:aa:d6:c4:21:a2:b7:3a:
                    3e:29:cc:74:ed:bf:c8:45:1f:9c:3a:0f:36:c7:0c:
                    0c:9a:64:8c:6c:8e:b0:1f:62:e3:1d:59:60:86:ba:
                    da:57:3d:9b:34:2e:b5:e2:ed:c3:c1:c3:5f:c9:19:
                    e3:70:65:87:c6:0b:0a:2f:05:f7:c8:e3:f9:98:2c:
                    de:b5:51:cf:f8:60:0f:72:56:62:af:e4:6c:db:05:
                    82:b4:c6:fc:79:e7:f3:6a:a9:ce:ac:1c:ef:9f:52:
                    38:ed:b9:ea:bb:81:52:c3:dc:22:cb:60:89:f0:4a:
                    b9:61:46:5d:69:4c:d7:7b:21:23:33:dc:f8:70:5e:
                    48:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:26:8E:C9:AC:5A:AC:58:C0:FC:9C:5A:20:89:C2:B3:0A:CA:F4:9A
            X509v3 Authority Key Identifier:
                keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/FCFB2C46429311EF932F40BD762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.208.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:23:43:53:4c:b4:4f:1b:03:63:cf:dd:86:73:72:03:d1:2e:
         21:96:3c:1b:c9:29:47:17:5b:87:9e:78:76:6a:b3:ef:bc:1f:
         1e:20:88:37:22:34:db:5e:ca:f1:4c:78:00:f7:a2:ca:27:11:
         b6:e8:4b:be:9e:21:32:49:f2:91:40:fd:b2:22:c2:d4:6f:d7:
         32:05:67:02:75:26:a5:02:1a:6b:52:db:3e:8f:df:83:ea:11:
         30:3c:5a:c2:62:19:20:4f:16:06:3d:54:68:40:66:e8:70:a4:
         4a:73:00:c1:09:55:a1:39:fa:0d:9e:13:77:03:9a:92:00:73:
         24:4d:af:25:fc:5b:b6:2a:29:78:a9:cb:fb:9f:a2:bc:e4:63:
         ba:f5:db:80:92:4a:39:2c:19:a7:f0:34:17:0f:b6:43:ce:a0:
         04:f0:c7:96:63:a3:36:bf:59:fb:3d:9a:5c:97:53:f2:a7:29:
         66:7c:9e:f0:6c:85:18:17:e5:9c:d1:df:37:7b:37:1d:ab:e7:
         5b:42:43:71:7f:5b:80:2c:9e:88:de:e6:53:2c:17:78:01:b2:
         64:bd:07:dc:ee:3f:94:48:29:b5:dd:a2:e3:ad:c5:9e:50:44:
         b9:1a:60:01:80:4b:fb:5a:37:f8:3c:c9:ac:57:f8:9d:47:92:
         3a:b7:7f:cf
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTFDRUZBRjExMC8GA1UEBRMoODJGMUM2NjExQTNBMTQ2N0RCM0Q3OEE0QTVGRUQ1
MEEwOEE1N0IxMzAeFw0yNDA3MTUxMDIxMjFaFw0zNDA3MTUxMDIxMjFaMBgxFjAU
BgNVBAMTDTY2OTRmODI0LTBlYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC27ZFMMyyTjNFjxA/pb34sF+kU+A/y3T04vWs6UAvFUU2ReF1pJ7M8UoNW
UkUQ8GFJ+h5Z3/Q4ovl2dn2hEApcPTwL+GbKdCsUgXa+JV6RARPaggmU4IX2BQao
Fkcvjg9YO/nRbEjzxA3V1q4yYQ4mBVXCPaZ3sgwJSkjiJINkqtbEIaK3Oj4pzHTt
v8hFH5w6DzbHDAyaZIxsjrAfYuMdWWCGutpXPZs0LrXi7cPBw1/JGeNwZYfGCwov
BffI4/mYLN61Uc/4YA9yVmKv5GzbBYK0xvx55/Nqqc6sHO+fUjjtueq7gVLD3CLL
YInwSrlhRl1pTNd7ISMz3PhwXkj/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUkyaO
yaxarFjA/JxaIInCswrK9JowHwYDVR0jBBgwFoAUgvHGYRo6FGfbPXikpf7VCgil
exMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4QTAxNENFL2d2SEdZ
Um82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2d2SEdZUm82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4
QTAxNENFL0ZDRkIyQzQ2NDI5MzExRUY5MzJGNDBCRDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm0JQwDQYJKoZIhvcNAQEL
BQADggEBAE0jQ1NMtE8bA2PP3YZzcgPRLiGWPBvJKUcXW4eeeHZqs++8Hx4giDci
NNteyvFMeAD3osonEbboS76eITJJ8pFA/bIiwtRv1zIFZwJ1JqUCGmtS2z6P34Pq
ETA8WsJiGSBPFgY9VGhAZuhwpEpzAMEJVaE5+g2eE3cDmpIAcyRNryX8W7YqKXip
y/uforzkY7r124CSSjksGafwNBcPtkPOoATwx5Zjoza/Wfs9mlyXU/KnKWZ8nvBs
hRgX5ZzR3zd7Nx2r51tCQ3F/W4Asnoje5lMsF3gBsmS9B9zuP5RIKbXdouOtxZ5Q
RLkaYAGAS/taN/g8yaxX+J1Hkjq3f88=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:18 2024 by rpki-client on console-ams.rpki-client.org