Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/243068723E8A11ED89EAD8E0F1222468.roa
File:                     243068723E8A11ED89EAD8E0F1222468.roa (raw, json)
Hash identifier:          krQ8zJwS4dTvLNjAV4LrPFueAVXkg3vJXfjOlXjB0gw=
Subject key identifier:   A7:87:C9:A7:59:90:80:8C:A1:A8:29:3D:3B:AC:EA:F8:FC:0E:71:30
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       080F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/243068723E8A11ED89EAD8E0F1222468.roa
Signing time:             Tue 27 Sep 2022 17:30:55 +0000
ROA not before:           Tue 27 Sep 2022 17:30:52 +0000
ROA not after:            Mon 30 Sep 2024 17:30:52 +0000
asID:                     32181
IP address blocks:        102.129.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2063 (0x80f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Sep 27 17:30:52 2022 GMT
            Not After : Sep 30 17:30:52 2024 GMT
        Subject: CN=6333334f-139f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c0:8d:76:40:14:52:26:ef:f7:e8:49:bc:a6:
                    03:2f:a8:85:e5:5f:99:ae:9d:89:b9:4b:9d:6c:ca:
                    20:46:db:2e:f7:02:6f:7a:87:b3:17:18:19:10:54:
                    64:7b:4d:db:4b:32:0c:9c:00:c4:71:3f:fc:2b:5f:
                    84:32:95:43:8f:58:a3:ea:49:1f:5d:11:8a:c6:43:
                    71:37:e7:9e:9e:27:78:0b:0a:ce:3c:e1:6b:b9:08:
                    01:9c:74:51:cc:a0:79:55:52:31:56:ea:3a:a4:1b:
                    2e:6d:52:f7:c4:ad:91:ef:e0:74:23:72:3b:20:7d:
                    a5:14:2f:57:d5:77:e6:8b:b9:dc:a7:e0:a7:71:a3:
                    f6:3f:c3:bd:5c:ba:91:0f:1a:4f:ab:e0:70:87:b6:
                    e3:7e:18:85:1a:2f:f4:8d:9e:60:07:ee:09:7a:98:
                    c1:13:b3:43:01:2b:10:1c:f6:20:8f:30:65:9a:a9:
                    fc:55:f5:81:0a:cc:a6:fe:02:b6:07:6e:da:5e:15:
                    62:85:62:48:97:24:d4:92:a5:b1:ea:ab:ec:0c:06:
                    b7:92:44:1c:ed:3b:9d:e1:3a:4a:a6:47:ba:f7:dd:
                    b3:16:e8:e3:56:f9:82:51:c1:6f:07:d5:cb:e3:39:
                    bb:1a:58:dd:f4:68:2d:3a:af:bd:a1:4b:5c:8b:45:
                    a5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:87:C9:A7:59:90:80:8C:A1:A8:29:3D:3B:AC:EA:F8:FC:0E:71:30
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/243068723E8A11ED89EAD8E0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:97:0d:f2:62:c4:bd:6b:4c:27:ac:9d:a4:78:fe:fe:e6:5e:
         a1:14:27:c1:1b:d4:3b:15:99:86:cd:a0:f4:7b:c3:fe:7f:63:
         53:cd:7e:f8:06:07:25:4f:57:a7:84:f7:ed:c1:95:8c:9c:cd:
         38:c7:f2:f9:a6:fe:ac:c6:89:80:6b:70:9b:31:5c:28:5a:9a:
         5e:fa:60:d1:35:ba:7c:75:cc:77:f8:4b:17:4e:8a:82:ba:d9:
         2b:95:82:2b:04:c5:a5:df:6d:c1:40:71:af:be:37:ea:81:c2:
         7d:fd:b6:ec:c2:70:d5:bb:2b:75:62:19:61:a3:ec:1b:da:f2:
         61:2c:31:a5:5d:60:d6:40:cb:b3:9e:87:5b:49:fe:73:86:69:
         6f:3a:5d:c0:86:70:df:42:9e:09:e7:08:bb:a2:ac:f6:f1:c3:
         9b:af:6b:b7:93:99:3a:27:5d:d8:46:73:a2:b0:06:6c:ed:d9:
         63:3f:71:04:b9:9b:1b:49:26:4d:cf:d6:46:f0:5e:df:2e:8c:
         a9:85:33:52:67:6c:48:73:6c:61:77:b4:a4:ba:55:87:fc:d7:
         f3:2a:12:e8:b0:35:07:d8:57:b0:3b:48:37:ee:78:51:47:70:
         61:96:a0:3b:51:d7:7e:94:fb:c8:11:46:2d:64:fd:9a:1f:47:
         8f:f6:f2:cd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCA8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA5MjcxNzMwNTJaFw0yNDA5MzAxNzMwNTJaMBgxFjAU
BgNVBAMMDTYzMzMzMzRmLTEzOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjwI12QBRSJu/36Em8pgMvqIXlX5munYm5S51syiBG2y73Am96h7MXGBkQ
VGR7TdtLMgycAMRxP/wrX4QylUOPWKPqSR9dEYrGQ3E3556eJ3gLCs484Wu5CAGc
dFHMoHlVUjFW6jqkGy5tUvfErZHv4HQjcjsgfaUUL1fVd+aLudyn4Kdxo/Y/w71c
upEPGk+r4HCHtuN+GIUaL/SNnmAH7gl6mMETs0MBKxAc9iCPMGWaqfxV9YEKzKb+
ArYHbtpeFWKFYkiXJNSSpbHqq+wMBreSRBztO53hOkqmR7r33bMW6ONW+YJRwW8H
1cvjObsaWN30aC06r72hS1yLRaW3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUp4fJ
p1mQgIyhqCk9O6zq+PwOcTAwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzI0MzA2ODcyM0U4QTExRUQ4OUVBRDhFMEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmga8wDQYJKoZIhvcNAQEL
BQADggEBAKaXDfJixL1rTCesnaR4/v7mXqEUJ8Eb1DsVmYbNoPR7w/5/Y1PNfvgG
ByVPV6eE9+3BlYyczTjH8vmm/qzGiYBrcJsxXChaml76YNE1unx1zHf4SxdOioK6
2SuVgisExaXfbcFAca++N+qBwn39tuzCcNW7K3ViGWGj7Bva8mEsMaVdYNZAy7Oe
h1tJ/nOGaW86XcCGcN9CngnnCLuirPbxw5uva7eTmTonXdhGc6KwBmzt2WM/cQS5
mxtJJk3P1kbwXt8ujKmFM1JnbEhzbGF3tKS6VYf81/MqEuiwNQfYV7A7SDfueFFH
cGGWoDtR136U+8gRRi1k/ZofR4/28s0=
-----END CERTIFICATE-----
Generated at Fri May 3 01:30:20 2024 by rpki-client on console-fra.rpki-client.org