Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/19F37A841B4D11EE8E41504A4AD9E6FC.roa
File:                     19F37A841B4D11EE8E41504A4AD9E6FC.roa (raw, json)
Hash identifier:          0jIVOJY8FNCSzNXmdkpA6AOgpjXgFgzQqmC5eStERW8=
Subject key identifier:   F8:E5:F4:58:4A:F9:BC:8A:BD:C3:A5:C5:84:D7:65:89:21:98:4E:93
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0C57
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/19F37A841B4D11EE8E41504A4AD9E6FC.roa
Signing time:             Wed 05 Jul 2023 16:00:46 +0000
ROA not before:           Wed 05 Jul 2023 16:00:42 +0000
ROA not after:            Tue 15 Jul 2025 16:00:42 +0000
asID:                     46562
IP address blocks:        102.129.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3159 (0xc57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jul  5 16:00:42 2023 GMT
            Not After : Jul 15 16:00:42 2025 GMT
        Subject: CN=64a593ae-9275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:36:06:f7:e9:a6:0d:48:cb:4a:0c:b3:ae:
                    08:d2:fd:bc:e7:ab:4b:87:28:19:1f:18:63:55:03:
                    65:9f:28:4c:64:01:d1:57:c5:a5:d6:bf:de:be:4f:
                    f6:f7:95:cf:6d:2a:25:57:6f:dc:fd:03:42:2f:2c:
                    af:c3:ea:a8:79:ef:8f:ce:f2:23:4e:ac:c6:91:a3:
                    3a:73:e6:00:58:a0:60:e2:eb:36:42:d9:a9:69:81:
                    e1:34:ed:3f:02:f1:b5:c3:2d:06:22:23:01:15:13:
                    57:50:55:a7:49:51:c4:a3:f9:52:e7:ec:94:94:c2:
                    34:1b:54:c9:62:ba:f5:d9:43:d7:03:09:32:cf:bc:
                    67:69:ef:23:8d:52:15:e1:b8:c2:80:17:da:9b:42:
                    5a:a8:e4:b2:48:b8:99:66:19:fc:95:fd:fc:d9:d5:
                    f7:f0:9e:f0:1e:f9:5a:83:28:03:45:6a:f1:81:b5:
                    e0:3d:47:d8:1f:0d:4c:fc:5a:e7:33:f7:c9:56:8c:
                    f0:13:a5:9a:bb:e4:7b:da:b9:d6:f3:5f:0b:f0:f8:
                    10:8f:97:22:8a:84:4a:c2:a5:76:18:fd:8f:7f:c7:
                    c9:ed:5f:98:a7:07:7b:69:e0:7c:3c:52:bc:9b:4f:
                    59:b1:bf:4d:26:7f:ef:f1:12:d6:41:c1:5b:9b:18:
                    bd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E5:F4:58:4A:F9:BC:8A:BD:C3:A5:C5:84:D7:65:89:21:98:4E:93
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/19F37A841B4D11EE8E41504A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:da:c3:5f:39:80:8c:90:64:20:9c:4b:f9:68:56:41:f3:44:
         ee:ba:f5:ae:a3:88:4e:d1:75:6d:b8:72:ed:a8:c0:0c:0e:b8:
         dc:f9:cb:43:b8:db:dd:29:b4:13:6f:a9:0c:fb:ff:9b:13:c4:
         12:81:e2:63:1e:d5:c8:4f:f0:97:7f:ae:a8:77:83:cf:7f:03:
         5b:c1:2f:f6:fa:69:7c:1c:33:17:68:9d:1a:a6:8a:92:bc:8b:
         b9:1e:64:8a:54:ac:0a:11:7e:2c:ae:fa:07:bf:ee:e3:69:2e:
         bd:36:bb:3c:86:10:63:3f:d4:91:e5:54:51:19:69:cb:9f:45:
         58:60:7b:a8:e1:4c:c9:19:6b:ee:fc:70:e0:67:6a:b1:cf:f7:
         53:5b:8a:58:08:86:8c:3c:69:48:69:c6:0e:79:83:22:1a:5c:
         21:d6:5c:35:3d:d6:ed:69:1c:59:8c:19:35:cd:98:f6:b2:63:
         39:b6:3d:08:05:83:ad:00:a8:ee:3a:d9:2d:73:d2:5a:f7:cb:
         81:a8:af:a6:77:ba:1b:e5:5f:87:80:f6:3b:9f:46:5e:d9:f8:
         34:55:bf:e5:59:ca:f1:7e:b2:bf:4b:63:fb:ce:bd:0f:ca:76:
         cf:8e:e1:ec:53:6c:35:d2:08:0a:10:5c:6d:f5:3e:a6:38:85:
         d0:87:84:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:20:38 2024 by rpki-client on console-fra.rpki-client.org