Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1012ED08B50611EE9E224CBA775412E6.roa
File:                     1012ED08B50611EE9E224CBA775412E6.roa (raw, json)
Hash identifier:          tvEjtGnLVxZc7bvQ4czZzXSInHITdj5yWlJ/mm17RMc=
Subject key identifier:   37:0D:C8:64:06:F2:F9:FB:B2:0E:3E:E1:E9:E2:49:EC:F3:85:7C:54
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0EFE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1012ED08B50611EE9E224CBA775412E6.roa
Signing time:             Wed 17 Jan 2024 07:00:14 +0000
ROA not before:           Wed 17 Jan 2024 07:00:10 +0000
ROA not after:            Sat 17 Jan 2026 07:00:10 +0000
asID:                     55286
IP address blocks:        102.165.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3838 (0xefe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jan 17 07:00:10 2024 GMT
            Not After : Jan 17 07:00:10 2026 GMT
        Subject: CN=65a77afe-e8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:24:0e:ea:32:b3:b2:3d:6f:f8:93:22:97:
                    46:81:a6:bf:2d:61:f1:a3:a0:b7:5e:74:2a:86:e4:
                    24:9e:75:3c:1d:c4:5b:95:2f:3a:a1:29:ed:93:01:
                    e7:c2:8f:3c:2d:fd:19:27:70:cf:62:ac:3e:67:00:
                    5f:ee:57:43:20:13:f2:9c:17:87:15:e4:f3:20:fd:
                    57:5d:e8:d7:41:8b:f1:cf:23:f8:0e:bb:15:a7:d7:
                    98:53:94:53:49:5d:59:f8:88:7b:58:86:31:0f:9d:
                    06:e7:d0:6f:4f:b0:2d:dc:94:8e:7b:8a:4e:2d:65:
                    05:f2:51:5d:11:07:4a:f7:8a:b9:c5:c5:ab:ff:c7:
                    ec:b3:87:21:4e:3a:ea:1a:75:95:e1:91:12:b8:53:
                    99:ee:3c:02:cd:61:0e:32:65:1f:9a:1f:f4:ff:e8:
                    cd:9e:09:4b:71:3f:e9:31:bc:30:c0:12:59:c3:90:
                    00:52:fc:d3:55:bb:11:3f:95:f3:de:f2:8f:3c:2f:
                    22:eb:4b:01:47:4c:29:8e:ec:e5:a7:a2:1e:39:cc:
                    42:bd:d6:2e:ef:67:a0:7f:c5:41:5d:de:a5:0d:43:
                    47:77:d3:c8:14:a8:bd:f2:21:4d:07:32:c5:b9:a9:
                    d4:a1:97:ee:9a:0e:01:7c:d8:42:a7:3b:5d:82:3a:
                    2d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0D:C8:64:06:F2:F9:FB:B2:0E:3E:E1:E9:E2:49:EC:F3:85:7C:54
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1012ED08B50611EE9E224CBA775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:be:f6:92:47:25:2d:90:9d:de:97:c7:0d:e8:14:d6:e9:9c:
         d6:7d:8f:2d:36:0b:e8:8e:cd:ff:9d:a9:51:c7:30:30:70:37:
         2f:eb:e6:73:4c:0f:c3:ae:8d:34:dd:a2:71:44:8e:8b:61:69:
         6b:2d:f8:aa:b1:77:ea:15:da:85:4c:55:ee:4b:79:c0:ff:52:
         62:67:40:ad:cf:47:bc:16:c4:13:8e:0d:14:a3:7f:6c:82:94:
         da:b7:5e:53:6c:28:cc:74:00:15:3a:2a:c2:be:cd:f0:f8:35:
         7d:32:c6:45:cc:3f:d4:e4:b2:93:32:20:c3:7c:ae:ce:51:c4:
         bb:6a:a6:b6:38:af:9a:ce:4c:1f:4c:b0:07:0f:36:50:33:00:
         2c:c2:61:b9:a3:1c:7a:3e:06:3f:af:da:ec:70:84:03:f4:03:
         93:ad:3f:ab:51:d3:dd:58:a6:66:4c:06:d7:43:31:9f:76:cd:
         91:95:51:86:fd:9a:3c:84:66:6a:09:be:7c:fe:77:49:43:b3:
         70:fa:6f:99:7e:d2:04:e8:e7:50:32:ef:99:3e:21:9b:aa:35:
         6d:81:44:19:c7:35:85:b1:cb:52:13:a4:c4:5d:99:6f:1b:32:
         33:2c:0c:62:40:23:4e:6e:32:6c:f3:b0:e7:50:e6:fb:94:79:
         26:b6:8d:61
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDv4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNDAxMTcwNzAwMTBaFw0yNjAxMTcwNzAwMTBaMBgxFjAU
BgNVBAMTDTY1YTc3YWZlLWU4ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7xCQO6jKzsj1v+JMil0aBpr8tYfGjoLdedCqG5CSedTwdxFuVLzqhKe2T
AefCjzwt/RkncM9irD5nAF/uV0MgE/KcF4cV5PMg/Vdd6NdBi/HPI/gOuxWn15hT
lFNJXVn4iHtYhjEPnQbn0G9PsC3clI57ik4tZQXyUV0RB0r3irnFxav/x+yzhyFO
OuoadZXhkRK4U5nuPALNYQ4yZR+aH/T/6M2eCUtxP+kxvDDAElnDkABS/NNVuxE/
lfPe8o88LyLrSwFHTCmO7OWnoh45zEK91i7vZ6B/xUFd3qUNQ0d308gUqL3yIU0H
MsW5qdShl+6aDgF82EKnO12COi0rAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUNw3I
ZAby+fuyDj7h6eJJ7POFfFQwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzEwMTJFRDA4QjUwNjExRUU5RTIyNENCQTc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpSwwDQYJKoZIhvcNAQEL
BQADggEBAGm+9pJHJS2Qnd6Xxw3oFNbpnNZ9jy02C+iOzf+dqVHHMDBwNy/r5nNM
D8OujTTdonFEjothaWst+Kqxd+oV2oVMVe5LecD/UmJnQK3PR7wWxBOODRSjf2yC
lNq3XlNsKMx0ABU6KsK+zfD4NX0yxkXMP9TkspMyIMN8rs5RxLtqprY4r5rOTB9M
sAcPNlAzACzCYbmjHHo+Bj+v2uxwhAP0A5OtP6tR091YpmZMBtdDMZ92zZGVUYb9
mjyEZmoJvnz+d0lDs3D6b5l+0gTo51Ay75k+IZuqNW2BRBnHNYWxy1ITpMRdmW8b
MjMsDGJAI05uMmzzsOdQ5vuUeSa2jWE=
-----END CERTIFICATE-----
Generated at Fri May 3 01:30:20 2024 by rpki-client on console-fra.rpki-client.org