Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1B4658582E1A11EF85FCF1BE762E951A.roa
File:                     1B4658582E1A11EF85FCF1BE762E951A.roa (raw, json)
Hash identifier:          WjlmH4AMT0EE0HelhEYe4wEfq8qZ9e30mFDkQfknbrI=
Subject key identifier:   C7:AA:0F:DB:2C:A9:DD:11:4C:29:3C:82:EA:D6:8E:DB:86:3F:81:A2
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       10FB
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1B4658582E1A11EF85FCF1BE762E951A.roa
Signing time:             Wed 19 Jun 2024 08:58:33 +0000
ROA not before:           Wed 19 Jun 2024 08:58:30 +0000
ROA not after:            Sat 20 Jun 2026 08:58:30 +0000
asID:                     212238
IP address blocks:        102.165.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4347 (0x10fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jun 19 08:58:30 2024 GMT
            Not After : Jun 20 08:58:30 2026 GMT
        Subject: CN=66729db9-da8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:52:f9:63:95:0d:35:47:2f:91:c2:85:ab:cf:
                    06:7c:7e:02:55:2f:31:05:ad:a9:f6:5f:3e:34:d4:
                    cb:55:bd:0a:03:96:e8:c2:f6:11:1b:5d:ff:06:9c:
                    69:fe:a4:44:ae:5c:30:a0:0b:e5:3c:cb:88:6e:71:
                    8d:fa:86:4f:55:bf:0c:f3:b1:87:5a:4b:16:bc:c9:
                    0b:48:4d:71:cf:a4:1f:64:77:87:eb:d0:0d:aa:f3:
                    bb:38:98:52:2f:e4:e9:14:b5:0b:d9:de:1d:bb:f2:
                    74:df:37:9a:f3:96:e8:d7:db:e5:f9:35:d3:54:c2:
                    1f:32:ff:10:fa:42:40:d2:8e:cb:df:00:0f:29:53:
                    79:61:3c:e5:d5:63:c3:dd:d2:91:39:ff:14:35:7e:
                    80:6b:51:51:d8:c7:6e:21:7e:22:22:92:39:b0:d1:
                    97:e5:8d:97:da:76:7b:00:c1:0b:4d:63:2f:b1:1d:
                    a4:74:5d:5f:15:89:80:b9:b6:bf:54:c5:7a:ab:74:
                    e9:d8:5d:15:4c:ed:cd:32:40:6e:a3:5e:05:7d:84:
                    50:53:0c:c0:1f:ba:e8:56:86:55:a8:2a:3a:56:75:
                    54:8c:72:c2:a4:98:52:09:59:4e:f4:f4:04:f0:5c:
                    04:59:86:f8:f5:57:23:6e:d6:92:76:36:3c:43:38:
                    e2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AA:0F:DB:2C:A9:DD:11:4C:29:3C:82:EA:D6:8E:DB:86:3F:81:A2
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1B4658582E1A11EF85FCF1BE762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:d9:12:e9:6a:6f:af:6d:7e:ba:96:eb:3c:23:6a:39:af:43:
         90:1b:f4:14:d9:2b:e6:e7:06:fa:6c:81:ea:60:d1:7b:67:4a:
         de:79:ce:4d:4e:1c:8c:85:5b:ca:e5:20:b7:23:4a:93:af:75:
         4b:f0:d7:c3:1e:68:22:7a:e8:e2:08:b2:08:c4:ec:9f:21:b7:
         31:2d:3b:e8:7d:0b:07:ed:d4:0a:48:7f:65:10:6e:59:3c:bc:
         e4:2e:a8:27:7d:d8:b4:73:4e:aa:d2:30:67:89:43:72:2b:80:
         97:89:b1:b8:47:d4:14:db:1c:47:d0:d0:2e:63:46:6c:e0:71:
         0f:0e:33:5c:b9:5e:a7:85:72:24:49:20:51:82:b1:2a:a1:b2:
         5e:5c:b9:7c:8c:ca:37:99:33:16:07:a1:a5:6a:b6:ac:1b:8a:
         68:b7:1c:7b:29:23:8a:35:a8:04:7e:60:12:0e:ad:8a:96:cc:
         b6:e3:46:02:70:8d:e7:61:75:1f:1f:12:e6:40:29:8a:d1:17:
         da:32:b7:9d:ab:9c:7c:cc:e7:f4:e7:62:f2:c9:2f:cf:cf:53:
         77:42:dc:66:7a:68:7b:77:b9:0c:98:24:3e:e6:ca:d7:74:3a:
         28:f9:7e:22:65:bf:1d:db:34:6c:3f:ed:fb:a9:f2:88:2a:4d:
         cf:bb:d8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:24 2024 by rpki-client on console-ams.rpki-client.org