Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0134F548678F11EE944EEC5B4AD9E6FC.roa
File:                     0134F548678F11EE944EEC5B4AD9E6FC.roa (raw, json)
Hash identifier:          +za1Q6eox9K2p6xwbPQ9KcXdIw0WUYgLd+8016l3tAQ=
Subject key identifier:   23:3E:9B:24:1D:B8:2A:08:97:39:1F:2C:F1:02:2F:49:31:E1:F8:3D
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0DC0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0134F548678F11EE944EEC5B4AD9E6FC.roa
Signing time:             Tue 10 Oct 2023 17:03:59 +0000
ROA not before:           Tue 10 Oct 2023 17:03:56 +0000
ROA not after:            Fri 10 Oct 2025 17:03:56 +0000
asID:                     9009
IP address blocks:        102.129.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3520 (0xdc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct 10 17:03:56 2023 GMT
            Not After : Oct 10 17:03:56 2025 GMT
        Subject: CN=652583ff-13f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:a9:36:a0:d4:08:42:89:42:59:6b:c4:c8:
                    21:96:21:70:89:b9:d4:46:cf:bc:e3:1c:00:a4:61:
                    02:ca:4b:ec:34:cc:57:2a:ad:be:a6:a3:6d:92:7f:
                    dc:a7:2c:2b:cd:17:b6:dc:bf:0b:61:7a:c6:39:36:
                    82:67:3c:d2:5e:34:03:20:e7:d8:c1:b7:7d:5c:fd:
                    bc:80:09:16:7c:91:be:1a:41:b6:80:0f:6a:33:ed:
                    99:20:52:6e:01:9c:e5:82:93:2c:77:b3:05:a3:cc:
                    4b:11:01:12:ff:e7:4e:88:6e:2c:a3:8a:68:77:ce:
                    f1:d1:f7:08:c9:a2:a5:5d:28:a2:8c:0c:18:83:f9:
                    21:ca:27:71:36:f2:02:1b:0f:af:c8:d5:43:e1:dd:
                    f3:34:2b:04:2f:b2:b5:df:07:54:96:1c:1f:92:8d:
                    bf:fe:eb:d4:d7:b8:f8:ca:c9:ce:d5:72:85:1d:b8:
                    f6:90:28:6f:51:21:30:fc:6f:ba:8a:30:a1:d2:ae:
                    80:b5:8a:0b:19:ea:18:f7:56:41:76:c1:01:89:6a:
                    92:fb:f2:e5:fe:40:cd:41:dd:70:9c:5a:47:3c:00:
                    c4:bc:f8:74:d1:13:f2:eb:10:e7:26:d1:14:7a:7f:
                    92:3b:31:df:19:84:ca:8a:72:6f:1e:32:9e:52:4a:
                    e7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3E:9B:24:1D:B8:2A:08:97:39:1F:2C:F1:02:2F:49:31:E1:F8:3D
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0134F548678F11EE944EEC5B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:5d:d1:ff:0b:5c:0a:97:45:81:d1:b8:81:5a:c7:be:df:b5:
         aa:d9:71:64:65:47:0e:6e:b0:86:2e:76:52:59:c1:a4:4a:2b:
         af:ff:ac:4d:d6:3c:79:f2:45:b3:da:9b:7d:8c:c4:86:f8:e1:
         4d:ed:6a:ac:2c:d6:9e:18:5d:7d:a5:28:6e:0c:4d:2d:5f:69:
         11:d6:16:b1:8f:59:d6:9a:78:1d:06:f8:42:78:5e:91:4e:b9:
         57:d0:70:22:8b:4b:52:ee:49:27:69:96:89:56:dd:3c:04:2a:
         6f:ac:a0:22:9f:30:1b:f6:c4:59:a0:a6:68:91:1d:ec:da:fc:
         ae:eb:69:03:66:0d:d0:22:c9:91:b6:e6:2b:1e:57:a8:bf:aa:
         4b:e3:24:7e:cf:ac:f2:70:f6:19:86:a3:71:10:d8:61:b6:75:
         2c:12:3f:b5:aa:bf:19:c2:fd:0a:bf:2f:3e:dd:19:d9:51:00:
         bb:52:cd:f7:0e:6f:e1:8b:2e:1f:9d:99:99:c2:5b:0b:3d:7a:
         6c:48:bb:22:1c:3b:d3:ec:64:67:a6:af:12:3e:55:3d:9e:75:
         41:5b:a2:a6:83:26:e0:75:52:38:1a:a9:59:db:88:d0:43:a3:
         1d:7f:7c:a2:d4:60:91:6b:9b:9e:fd:5a:e2:09:71:ef:4d:ab:
         13:17:0e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:59 2024 by rpki-client on console-ams.rpki-client.org