Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/6ADD5F36276611ED8496B7E5F1222468.roa
File:                     6ADD5F36276611ED8496B7E5F1222468.roa (raw, json)
Hash identifier:          Qk4QPoBO37F+c6CTxiNXDVmzwT1MOwmXYJMKBjJSlEg=
Subject key identifier:   4F:37:C2:BB:78:E2:36:2E:86:F6:39:AD:8B:12:45:92:2F:EF:13:86
Certificate issuer:       /CN=F36A4C9EAF/serialNumber=AEF7C777AC3636C67BAE8A0CC69E44638E9A009F
Certificate serial:       35
Authority key identifier: AE:F7:C7:77:AC:36:36:C6:7B:AE:8A:0C:C6:9E:44:63:8E:9A:00:9F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/6ADD5F36276611ED8496B7E5F1222468.roa
Signing time:             Mon 29 Aug 2022 06:47:15 +0000
ROA not before:           Mon 29 Aug 2022 06:47:09 +0000
ROA not after:            Sun 29 Aug 2032 06:47:09 +0000
asID:                     328758
IP address blocks:        102.221.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4C9EAF/serialNumber=AEF7C777AC3636C67BAE8A0CC69E44638E9A009F
        Validity
            Not Before: Aug 29 06:47:09 2022 GMT
            Not After : Aug 29 06:47:09 2032 GMT
        Subject: CN=630c60f3-5709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6d:5e:bb:c1:aa:01:cb:30:01:aa:31:9f:15:
                    f4:94:92:a8:69:6c:c4:89:6a:fc:35:c2:1d:f5:6a:
                    c4:8d:e4:c7:01:b5:cd:9a:80:b8:e7:e5:b2:69:0a:
                    90:1b:1e:ed:e3:4d:f8:8e:30:fa:79:27:ce:a4:0d:
                    9c:76:7a:75:f5:c0:79:de:ae:b9:b6:2d:f2:7a:39:
                    06:d8:31:17:b1:fe:98:0e:6d:80:52:1f:22:77:e1:
                    aa:8b:fb:40:3c:0b:b6:04:1e:10:7c:c8:5d:2b:ae:
                    5c:64:53:31:7a:8f:ba:7d:0d:99:71:da:ca:42:30:
                    96:97:50:69:cd:fb:0a:1c:2f:ca:b0:b1:fa:37:c5:
                    83:84:7f:1a:b4:ae:c8:3e:60:87:da:86:0b:a4:58:
                    c0:f8:cb:1c:06:66:df:d6:2e:12:20:0d:7d:d8:aa:
                    e3:a9:ad:72:7c:22:de:1e:40:1e:a9:99:c9:83:46:
                    21:0a:5c:d3:bc:96:47:ab:21:de:d6:f1:62:c1:a1:
                    f1:4c:f7:c0:f1:af:c5:99:cd:bb:fe:f0:e7:73:b4:
                    0e:20:c1:ef:ba:e2:b1:24:fc:31:a6:79:3c:9e:32:
                    e5:ca:69:43:aa:3f:53:fd:05:4f:77:a1:b2:67:43:
                    88:a4:a2:6c:91:32:c0:6b:9b:d5:24:4d:69:14:86:
                    d7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:37:C2:BB:78:E2:36:2E:86:F6:39:AD:8B:12:45:92:2F:EF:13:86
            X509v3 Authority Key Identifier:
                keyid:AE:F7:C7:77:AC:36:36:C6:7B:AE:8A:0C:C6:9E:44:63:8E:9A:00:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/6ADD5F36276611ED8496B7E5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.221.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:63:c4:b4:e6:ec:34:22:9a:91:5e:50:43:8a:b9:94:61:24:
         a7:1f:7e:79:d1:65:5f:14:26:b7:24:66:52:e8:05:00:be:11:
         f7:2c:f3:cb:9e:df:94:bc:e0:03:6d:3d:c9:af:a3:e6:82:e6:
         af:91:17:72:b0:63:67:8a:f3:c5:1a:fd:e1:59:fa:63:ac:53:
         47:c7:30:aa:63:73:54:e9:28:b6:6d:85:e5:f2:f7:91:f7:be:
         de:e2:47:48:4b:32:c5:c9:48:c5:52:82:a5:20:51:f6:0c:29:
         4b:61:a5:ca:23:0d:94:ee:ab:e8:35:db:15:45:e6:ee:47:d9:
         45:b3:40:7a:aa:e5:33:98:25:cc:4c:e2:1c:59:5e:bf:0e:17:
         97:d7:00:8e:7c:fa:1f:2b:48:fb:5d:35:47:20:09:f5:d3:92:
         07:34:cb:9e:ac:4d:ff:fa:ae:62:56:2b:c8:17:9c:62:49:27:
         71:47:d0:00:57:3e:f3:b2:62:0d:0e:a1:09:fe:57:5e:ac:4f:
         de:6c:fe:00:a0:d7:e8:1a:94:c6:b2:8b:31:a6:2f:8f:51:db:
         04:91:42:ca:f6:76:4a:e0:17:66:7c:05:a6:e8:53:65:41:16:
         ef:6e:3a:e2:c0:9e:3e:88:1a:e5:54:ba:69:fe:d6:07:55:72:
         b3:23:1f:5f
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBNTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZB
NEM5RUFGMTEwLwYDVQQFEyhBRUY3Qzc3N0FDMzYzNkM2N0JBRThBMENDNjlFNDQ2
MzhFOUEwMDlGMB4XDTIyMDgyOTA2NDcwOVoXDTMyMDgyOTA2NDcwOVowGDEWMBQG
A1UEAwwNNjMwYzYwZjMtNTcwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANptXrvBqgHLMAGqMZ8V9JSSqGlsxIlq/DXCHfVqxI3kxwG1zZqAuOflsmkK
kBse7eNN+I4w+nknzqQNnHZ6dfXAed6uubYt8no5BtgxF7H+mA5tgFIfInfhqov7
QDwLtgQeEHzIXSuuXGRTMXqPun0NmXHaykIwlpdQac37ChwvyrCx+jfFg4R/GrSu
yD5gh9qGC6RYwPjLHAZm39YuEiANfdiq46mtcnwi3h5AHqmZyYNGIQpc07yWR6sh
3tbxYsGh8Uz3wPGvxZnNu/7w53O0DiDB77risST8MaZ5PJ4y5cppQ6o/U/0FT3eh
smdDiKSibJEywGub1SRNaRSG17kCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRPN8K7
eOI2Lob2Oa2LEkWSL+8ThjAfBgNVHSMEGDAWgBSu98d3rDY2xnuuigzGnkRjjpoA
nzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTRDOUUvRUE2RjQ4MEMwMUIxMTFFRDhEOThFQjg5RjEyMjI0NjgvcnZmSGQ2
dzJOc1o3cm9vTXhwNUVZNDZhQUo4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvcnZmSGQ2dzJOc1o3cm9vTXhwNUVZNDZhQUo4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTRDOUUvRUE2RjQ4MEMwMUIxMTFFRDhEOThFQjg5RjEy
MjI0NjgvNkFERDVGMzYyNzY2MTFFRDg0OTZCN0U1RjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbdtjANBgkqhkiG9w0BAQsF
AAOCAQEAo2PEtObsNCKakV5QQ4q5lGEkpx9+edFlXxQmtyRmUugFAL4R9yzzy57f
lLzgA209ya+j5oLmr5EXcrBjZ4rzxRr94Vn6Y6xTR8cwqmNzVOkotm2F5fL3kfe+
3uJHSEsyxclIxVKCpSBR9gwpS2GlyiMNlO6r6DXbFUXm7kfZRbNAeqrlM5glzEzi
HFlevw4Xl9cAjnz6HytI+101RyAJ9dOSBzTLnqxN//quYlYryBecYkkncUfQAFc+
87JiDQ6hCf5XXqxP3mz+AKDX6BqUxrKLMaYvj1HbBJFCyvZ2SuAXZnwFpuhTZUEW
72464sCePoga5VS6af7WB1VysyMfXw==
-----END CERTIFICATE-----
Generated at Mon Jun 3 04:14:49 2024 by rpki-client on console-ams.rpki-client.org