Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/9ABA216AF2BB11EC81733F82F1222468.roa
File:                     9ABA216AF2BB11EC81733F82F1222468.roa (raw, json)
Hash identifier:          6FiCP8b3kWEY92TY9AhpbuVK5DAe1gKHF9Zfm6ybL6Q=
Subject key identifier:   81:A7:74:56:16:8B:C7:6E:D5:BF:06:04:A0:94:9A:25:E3:4C:96:93
Certificate issuer:       /CN=F36A2303AF/serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
Certificate serial:       038B
Authority key identifier: 5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/9ABA216AF2BB11EC81733F82F1222468.roa
Signing time:             Thu 23 Jun 2022 06:13:31 +0000
ROA not before:           Thu 23 Jun 2022 06:13:26 +0000
ROA not after:            Wed 23 Jun 2032 06:13:26 +0000
asID:                     328631
IP address blocks:        102.22.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Apr 2024 01:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907 (0x38b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2303AF/serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
        Validity
            Not Before: Jun 23 06:13:26 2022 GMT
            Not After : Jun 23 06:13:26 2032 GMT
        Subject: CN=62b4048b-83f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:c8:ad:5c:97:ab:5b:9f:c4:73:a4:a0:62:
                    5a:4f:68:14:f4:a8:55:38:e7:b8:d1:ec:05:f4:a3:
                    4e:f1:f4:cf:c7:5a:cc:74:de:fc:be:20:6c:bb:7d:
                    2e:c2:53:53:71:64:df:2f:28:de:8f:56:f3:4d:0f:
                    df:f7:57:d3:5b:15:08:6d:09:e5:32:c5:b8:1f:54:
                    cb:f8:35:61:63:48:c3:84:79:25:60:46:04:b5:95:
                    35:d7:21:f9:66:09:9c:78:11:1a:d8:77:56:8c:8d:
                    fe:7d:3e:e7:ae:f3:64:15:9d:d1:0e:25:01:76:04:
                    14:f6:19:a3:54:59:95:fe:f1:3d:5d:e7:05:c1:2c:
                    ff:b5:8b:89:96:ba:96:c8:07:72:d8:af:99:22:f8:
                    59:9e:cb:75:1b:58:b2:3f:e6:80:08:5a:bc:c7:1f:
                    7c:45:4a:95:08:d4:d7:e9:44:e2:ca:01:2a:da:bb:
                    ad:86:c3:a7:1b:83:e0:ac:36:67:bc:4a:0c:e8:6d:
                    72:31:5c:b6:af:60:39:03:02:69:8e:9f:da:5d:38:
                    f9:04:52:b1:51:4f:fc:7c:54:82:14:c2:35:4f:25:
                    7e:d7:e9:67:75:a1:c5:e4:32:7c:15:e0:ce:c3:2f:
                    03:fa:48:e5:f2:7b:5f:73:9b:c6:ea:d8:7d:bc:de:
                    c8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A7:74:56:16:8B:C7:6E:D5:BF:06:04:A0:94:9A:25:E3:4C:96:93
            X509v3 Authority Key Identifier:
                keyid:5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/9ABA216AF2BB11EC81733F82F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.22.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:78:55:4b:fb:44:e3:ae:1c:b0:71:d8:0c:43:6e:0a:4e:49:
         2a:40:bc:65:fc:67:22:a6:71:d6:75:4f:ac:b5:fe:f9:3f:f6:
         52:af:79:47:2e:9a:98:f4:2d:27:5e:8e:a3:2e:bc:f0:d5:88:
         4e:c1:25:b4:ac:6b:89:ea:40:2e:cb:41:d5:f1:a7:de:6b:c0:
         d9:11:64:8b:95:79:bd:e1:aa:92:95:f7:ae:9a:1b:e3:01:85:
         41:e8:f3:45:e1:a3:99:db:03:10:67:ec:7c:4d:88:f5:aa:e7:
         30:1b:98:e5:d2:ce:e8:04:3e:2a:d3:5a:66:3f:a7:a2:98:b6:
         dc:a7:3a:7e:19:bf:12:0b:7c:98:9c:fa:94:f2:95:18:d9:49:
         16:7f:1c:7a:91:44:9b:3f:c1:90:25:2b:88:8d:32:3d:1c:d6:
         e4:f0:b0:33:ac:b8:c0:d7:15:cd:85:71:6d:3d:d7:4b:df:9f:
         4a:29:8b:12:6d:d9:0b:f7:2b:0f:6f:6e:13:95:89:e5:78:95:
         04:f6:59:20:62:91:c9:cd:93:84:16:de:a2:09:ce:38:30:c3:
         a3:3a:2f:cb:12:53:36:b6:ff:61:63:22:e6:6a:34:41:4f:ec:
         bc:20:bc:a3:e9:c3:1e:bb:f8:49:f6:dd:dd:47:26:48:21:c5:
         76:e5:10:06
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA4swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QTIzMDNBRjExMC8GA1UEBRMoNUVCODhERjRCRjkwODlENzA0OUExRkJFODAwNUU2
MjFFQUFFODYyQjAeFw0yMjA2MjMwNjEzMjZaFw0zMjA2MjMwNjEzMjZaMBgxFjAU
BgNVBAMMDTYyYjQwNDhiLTgzZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5IsitXJerW5/Ec6SgYlpPaBT0qFU457jR7AX0o07x9M/HWsx03vy+IGy7
fS7CU1NxZN8vKN6PVvNND9/3V9NbFQhtCeUyxbgfVMv4NWFjSMOEeSVgRgS1lTXX
IflmCZx4ERrYd1aMjf59Pueu82QVndEOJQF2BBT2GaNUWZX+8T1d5wXBLP+1i4mW
upbIB3LYr5ki+Fmey3UbWLI/5oAIWrzHH3xFSpUI1NfpROLKASrau62Gw6cbg+Cs
Nme8SgzobXIxXLavYDkDAmmOn9pdOPkEUrFRT/x8VIIUwjVPJX7X6Wd1ocXkMnwV
4M7DLwP6SOXye19zm8bq2H283sgjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUgad0
VhaLx27VvwYEoJSaJeNMlpMwHwYDVR0jBBgwFoAUXriN9L+QidcEmh++gAXmIequ
hiswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEyMzAzLzY1NzE1Rjc4NTk0MzExRUFCMzBGNDI2MUY4QUVBMjI4L1hyaU45
TC1RaWRjRW1oLS1nQVhtSWVxdWhpcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hyaU45TC1RaWRjRW1oLS1nQVhtSWVxdWhpcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkEyMzAzLzY1NzE1Rjc4NTk0MzExRUFCMzBGNDI2MUY4
QUVBMjI4LzlBQkEyMTZBRjJCQjExRUM4MTczM0Y4MkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmFvgwDQYJKoZIhvcNAQEL
BQADggEBAFd4VUv7ROOuHLBx2AxDbgpOSSpAvGX8ZyKmcdZ1T6y1/vk/9lKveUcu
mpj0LSdejqMuvPDViE7BJbSsa4nqQC7LQdXxp95rwNkRZIuVeb3hqpKV966aG+MB
hUHo80Xho5nbAxBn7HxNiPWq5zAbmOXSzugEPirTWmY/p6KYttynOn4ZvxILfJic
+pTylRjZSRZ/HHqRRJs/wZAlK4iNMj0c1uTwsDOsuMDXFc2FcW0910vfn0opixJt
2Qv3Kw9vbhOVieV4lQT2WSBikcnNk4QW3qIJzjgww6M6L8sSUza2/2FjIuZqNEFP
7LwgvKPpwx67+En23d1HJkghxXblEAY=
-----END CERTIFICATE-----
Generated at Tue Apr 23 18:41:41 2024 by rpki-client on console-ams.rpki-client.org