Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4E5AD256FCE311EC8F3B04CCF1222468.roa
File:                     4E5AD256FCE311EC8F3B04CCF1222468.roa (raw, json)
Hash identifier:          VhzUsaL+PPWmRD/YZG9ert8gzgtyvbFJAy/3gwSni5U=
Subject key identifier:   59:64:02:AC:1D:E8:00:D8:E3:8B:F7:A1:E2:B6:C1:9D:99:7D:83:6C
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       071F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4E5AD256FCE311EC8F3B04CCF1222468.roa
Signing time:             Wed 06 Jul 2022 04:22:54 +0000
ROA not before:           Wed 06 Jul 2022 04:22:49 +0000
ROA not after:            Sat 06 Jul 2024 04:22:49 +0000
asID:                     328617
IP address blocks:        102.165.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1823 (0x71f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jul  6 04:22:49 2022 GMT
            Not After : Jul  6 04:22:49 2024 GMT
        Subject: CN=62c50e1e-5ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:86:28:4f:42:dd:e0:b6:e9:4a:34:27:58:ac:
                    6b:1f:67:a7:a1:b7:be:3b:5b:f3:6d:0e:34:cb:78:
                    43:76:4f:17:d5:4a:dd:a5:25:3c:6f:f8:2c:8f:de:
                    c1:7b:bd:46:f9:5d:a7:aa:37:f2:f2:cb:5e:4a:66:
                    bd:97:cf:4e:ed:6b:57:80:95:3e:b9:71:9e:55:7a:
                    83:e9:4c:59:bf:d6:4e:da:64:f8:87:4a:44:81:bb:
                    8c:cc:70:3b:76:e1:01:b7:87:b4:a5:f2:70:37:65:
                    1f:b2:86:26:0e:51:04:dc:8a:8b:17:b3:1a:c0:ae:
                    41:12:60:26:48:65:55:05:57:17:22:37:fa:c9:42:
                    58:ef:7d:c4:fd:7e:cb:77:a6:dc:5b:db:c5:38:ff:
                    23:67:b6:b2:4f:10:83:26:a7:84:8c:a8:51:cf:36:
                    8b:24:59:9e:93:c1:5f:8c:51:7c:b7:31:ae:19:73:
                    0a:65:2f:dd:7b:36:9f:ab:06:d2:e8:e2:d6:9b:8d:
                    a5:c4:9a:e6:05:16:6d:a8:8a:b8:25:14:70:1e:29:
                    da:f1:cc:ce:6c:01:e2:5e:78:2e:37:c2:ca:9e:d8:
                    39:3f:69:a9:2f:a7:10:06:5e:f2:88:02:26:f8:ff:
                    92:88:c3:b8:2c:11:71:a6:60:0d:a3:e9:5d:24:e7:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:64:02:AC:1D:E8:00:D8:E3:8B:F7:A1:E2:B6:C1:9D:99:7D:83:6C
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4E5AD256FCE311EC8F3B04CCF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:de:8e:96:84:0d:4a:26:d1:dc:b5:c1:b2:99:5e:1f:ee:72:
         e4:77:72:0b:a3:20:bf:60:3b:a5:24:d2:ea:ff:53:fc:bc:7d:
         04:86:f0:76:1d:65:65:f0:44:74:b2:a7:a3:6d:6f:c2:e7:f0:
         26:89:d4:c9:10:9e:c8:6a:54:a3:9b:ed:7b:20:7c:3c:54:84:
         d0:9d:d7:fc:b4:70:ad:58:74:ee:5c:9c:0c:86:d8:8a:8d:a2:
         ce:27:f8:b2:29:5a:79:c3:49:57:e3:cd:9b:07:0f:48:fd:63:
         40:35:e2:d2:22:e3:a0:6c:fc:46:f6:4c:af:8d:17:e0:73:b2:
         fc:bd:80:d3:2f:33:93:38:c1:f8:e3:0c:e1:e9:97:74:d8:ae:
         dc:03:b4:7f:2b:d1:c0:c7:2b:57:fb:52:33:78:2f:d2:c9:0d:
         98:49:2f:a3:23:e6:a7:3b:64:77:d0:15:7e:c3:c6:79:2d:0b:
         f0:68:b0:7b:39:e2:fe:a7:91:43:35:77:d0:63:48:ad:82:6e:
         f0:c2:0e:45:27:61:f1:b9:a9:50:9b:1d:a3:27:32:15:19:60:
         10:03:5b:ea:9d:26:2e:3e:26:bf:72:5d:df:67:34:10:a4:61:
         8d:fb:e2:e2:68:35:ba:b7:56:e9:9b:f0:df:f7:c4:f4:a0:50:
         ed:ce:48:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:41 2024 by rpki-client on console-ams.rpki-client.org