Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/FE30EE3E572711ECA2417158D8A014CE.roa
File:                     FE30EE3E572711ECA2417158D8A014CE.roa (raw, json)
Hash identifier:          6oiMAdRdN+63t7B48ThUZh5q2ToM52IHZBkpkD9qu6s=
Subject key identifier:   FB:59:85:46:6D:1F:46:ED:F6:D3:27:86:D9:E7:44:B2:6D:28:B6:EC
Certificate issuer:       /CN=F36BCC19AF/serialNumber=87C277EA5445529DD06B2FE5EE9F33CDC7CE84E0
Certificate serial:       07
Authority key identifier: 87:C2:77:EA:54:45:52:9D:D0:6B:2F:E5:EE:9F:33:CD:C7:CE:84:E0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/FE30EE3E572711ECA2417158D8A014CE.roa
Signing time:             Tue 07 Dec 2021 06:36:22 +0000
ROA not before:           Tue 07 Dec 2021 06:36:18 +0000
ROA not after:            Thu 31 Dec 2048 06:36:18 +0000
asID:                     328250
IP address blocks:        102.220.40.0/22 maxlen: 24
                          2c0f:f8f8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BCC19AF/serialNumber=87C277EA5445529DD06B2FE5EE9F33CDC7CE84E0
        Validity
            Not Before: Dec  7 06:36:18 2021 GMT
            Not After : Dec 31 06:36:18 2048 GMT
        Subject: CN=61af00e6-7377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:a7:50:5e:df:9f:50:b3:ef:be:cc:8c:45:
                    4d:0d:d3:22:73:4f:d0:39:6f:c7:78:51:ea:a1:17:
                    a8:70:df:8b:f9:4d:ef:c4:9f:20:c4:64:fc:f8:47:
                    d0:df:11:c7:c0:f4:26:8a:55:b0:d4:20:5c:19:42:
                    d6:91:26:0d:28:54:ac:48:12:ba:f0:4f:85:ee:c6:
                    0a:fa:0a:32:eb:f7:c8:13:bc:51:29:18:ef:2d:22:
                    89:e1:42:45:f0:37:d0:f5:26:c5:5d:ab:4f:21:c7:
                    85:36:58:e0:9c:c2:62:9c:b6:ec:54:1c:9c:55:08:
                    20:d6:de:58:af:51:c0:b1:a1:71:7d:5c:dc:c0:e5:
                    bc:b5:ae:21:b2:ec:c6:34:1f:9b:98:0f:42:b4:dd:
                    a7:04:77:91:14:f9:dc:36:82:6c:42:92:16:c4:5f:
                    d6:75:57:55:40:de:9c:73:0f:c9:0c:5f:73:82:6c:
                    01:79:bb:74:75:d1:c3:38:92:8a:3a:e2:38:83:b7:
                    c8:ed:74:6a:12:04:82:23:6c:10:59:e7:3d:cc:ee:
                    e4:1d:d9:1a:30:64:bf:39:f1:45:06:a9:62:cb:10:
                    2e:55:19:15:e2:a6:7d:d0:56:5a:a0:7a:b4:02:fb:
                    b9:53:48:1f:14:b2:73:2f:24:4d:19:b4:96:ff:94:
                    30:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:59:85:46:6D:1F:46:ED:F6:D3:27:86:D9:E7:44:B2:6D:28:B6:EC
            X509v3 Authority Key Identifier:
                keyid:87:C2:77:EA:54:45:52:9D:D0:6B:2F:E5:EE:9F:33:CD:C7:CE:84:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/FE30EE3E572711ECA2417158D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.220.40.0/22
                IPv6:
                  2c0f:f8f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:80:d2:9d:62:5a:a7:78:25:50:66:8c:f9:31:1a:b8:aa:56:
         a3:2b:99:04:1b:56:79:e3:24:9b:cf:52:48:90:b3:79:b8:73:
         25:2d:b2:68:df:ea:19:f2:13:a2:ea:6d:3a:9a:8b:f6:62:2d:
         e8:8e:7d:c6:52:17:73:6f:f6:d6:8c:a2:94:46:46:d8:a6:59:
         ca:76:11:35:ea:b3:ae:2d:dd:03:1b:0d:b7:02:01:6b:1b:44:
         e7:d8:4f:ac:6d:18:c2:8a:af:a8:72:ca:76:0a:ed:d4:be:a2:
         5d:6c:ce:3b:93:2c:02:e8:41:68:8e:41:13:3f:83:8f:b8:19:
         78:6c:52:93:07:89:37:70:7e:c8:8f:66:34:31:bb:64:85:29:
         e9:3b:e0:60:41:a1:dc:74:b7:8e:81:aa:66:fd:82:0a:b1:85:
         30:f9:9b:1e:ab:bf:c4:b8:1c:39:e7:8d:64:38:20:5e:54:76:
         74:d7:3c:0f:49:68:7a:25:96:bd:18:d6:12:b1:23:d8:a0:9f:
         a5:d4:22:92:66:5b:90:ce:cb:e6:57:04:3e:f1:87:bc:58:67:
         8b:4e:fe:64:32:9d:9a:df:a3:ce:08:da:58:ad:ed:d5:d5:0f:
         0f:d7:1a:49:57:92:df:2e:86:ea:98:1e:55:f7:8c:86:f4:dc:
         78:08:10:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:08 2024 by rpki-client on console-ams.rpki-client.org