Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6957A2EC4A5111EF82DB04AA762E951A.roa
File:                     6957A2EC4A5111EF82DB04AA762E951A.roa (raw, json)
Hash identifier:          25ftMzcRUduLMdzsdDK1DczFtP7c42y3BJyG//6CRE4=
Subject key identifier:   9D:4A:D7:7A:12:F9:05:C8:78:BD:89:E0:88:54:C0:F8:51:02:E6:F2
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1189
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6957A2EC4A5111EF82DB04AA762E951A.roa
Signing time:             Thu 25 Jul 2024 06:44:59 +0000
ROA not before:           Thu 25 Jul 2024 06:44:56 +0000
ROA not after:            Sat 25 Jul 2026 06:44:56 +0000
asID:                     7018
IP address blocks:        102.129.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4489 (0x1189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jul 25 06:44:56 2024 GMT
            Not After : Jul 25 06:44:56 2026 GMT
        Subject: CN=66a1f46b-2150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8f:9c:ec:26:a8:17:8a:17:86:32:fc:f9:8d:
                    d9:2b:4d:e9:1f:cb:b3:b4:05:07:05:b5:a4:5a:cb:
                    a6:7f:90:83:81:75:63:c9:af:60:6e:69:9f:52:ac:
                    04:2f:5d:e2:db:20:be:f7:22:56:15:56:c1:58:05:
                    5a:bb:05:07:d0:d9:0d:c5:e1:30:0a:57:d0:7b:78:
                    34:fe:b7:06:6f:e6:38:0c:a0:9a:22:be:94:31:d3:
                    bf:2d:7e:3b:05:4a:6e:7c:39:43:ec:54:f8:b8:91:
                    bf:19:9f:35:19:f7:7b:f1:41:18:df:1d:84:4f:cf:
                    e1:9e:87:ea:4b:fe:5c:bc:1a:0f:62:8b:14:eb:54:
                    61:10:04:08:7f:25:e0:b1:31:3f:7b:01:41:66:36:
                    2a:73:61:20:b7:2d:ef:63:93:49:da:66:4c:1f:b9:
                    36:12:5d:f4:7e:5b:47:3c:3d:15:da:82:a2:af:9b:
                    e8:a7:7c:9c:33:ce:85:f9:12:20:62:9f:04:ea:b7:
                    b7:b4:ba:11:97:7f:90:c2:f2:35:70:6f:6a:6e:c2:
                    ce:f4:43:45:f7:7f:25:ff:05:37:5b:0d:79:a1:09:
                    ce:d1:10:d9:67:5d:24:58:46:06:81:68:9d:22:aa:
                    d9:d4:2e:f4:c0:39:82:a8:6b:4f:0e:c3:93:51:35:
                    05:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4A:D7:7A:12:F9:05:C8:78:BD:89:E0:88:54:C0:F8:51:02:E6:F2
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6957A2EC4A5111EF82DB04AA762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:70:cf:af:71:d6:d4:a7:f9:6e:8c:80:64:05:25:50:1a:0a:
         c4:95:e5:53:a5:e4:c7:36:96:e3:4e:be:02:2f:5c:29:48:27:
         df:68:78:93:c9:e6:09:56:e5:e5:50:1b:94:c1:e7:a7:79:72:
         58:61:37:32:5b:a3:cf:0e:a2:43:8d:49:89:58:61:57:ea:b1:
         15:63:e6:ef:b3:6a:14:db:13:a1:df:8f:65:ee:61:76:57:b3:
         1a:c7:37:77:85:78:e8:ab:3e:79:7c:0c:c9:4f:27:56:95:24:
         c4:b8:5e:d9:18:42:4c:90:14:0c:d8:3a:ed:d7:d4:9e:a7:b6:
         39:29:6b:71:c7:d5:6b:e1:ac:e9:85:4d:f6:5e:ee:43:94:db:
         9c:3b:f0:6c:c6:69:25:34:a1:8c:1f:1e:15:ef:95:fb:67:db:
         bd:d1:90:50:c1:7a:80:7e:5b:c6:e4:4c:4e:38:92:df:16:de:
         02:4d:84:0b:50:9a:43:a1:a5:50:17:c0:46:66:be:27:4d:ec:
         a2:04:cc:0e:60:9b:ff:d2:91:22:02:db:e8:37:e5:82:2d:2f:
         11:f9:94:8d:5b:9f:05:0f:f4:5e:96:95:84:1d:08:eb:7f:09:
         97:eb:ad:d8:78:4f:82:04:f0:83:ec:72:3f:39:06:de:f8:ef:
         17:83:83:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:19:41 2024 by rpki-client on console-ams.rpki-client.org