Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6C3EAF52A71A11EF91927752762E951A.roa
File:                     6C3EAF52A71A11EF91927752762E951A.roa (raw, json)
Hash identifier:          n6IPZ4oh7q2NFV8kFLz1RcS48l2p9yAWxAoK4/hSZyU=
Subject key identifier:   AF:53:CC:64:31:A6:48:F5:00:AB:A0:9E:34:A8:1D:33:98:0D:02:37
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       12CE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6C3EAF52A71A11EF91927752762E951A.roa
Signing time:             Wed 20 Nov 2024 08:35:40 +0000
ROA not before:           Wed 20 Nov 2024 08:35:36 +0000
ROA not after:            Fri 20 Nov 2026 08:35:36 +0000
asID:                     202656
IP address blocks:        102.165.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4814 (0x12ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Nov 20 08:35:36 2024 GMT
            Not After : Nov 20 08:35:36 2026 GMT
        Subject: CN=673d9f5c-0c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:45:78:ca:31:1d:bd:a5:4d:cd:06:53:bb:0d:
                    e1:4b:c5:7e:e0:6e:df:b2:26:a9:a5:fc:66:9b:17:
                    79:5a:fa:3e:7b:bc:04:06:be:ab:73:6b:23:91:7d:
                    ce:05:0b:62:3d:89:f8:9d:f6:2c:b3:a7:8f:45:63:
                    76:15:9b:82:87:20:bd:65:21:ca:a4:cf:e5:a0:ff:
                    68:49:e0:1c:37:96:01:f3:f8:5d:e9:e7:fb:5e:ef:
                    55:bf:ab:29:fc:94:09:15:78:bb:3f:62:0b:53:2f:
                    70:20:62:74:ea:49:2e:ab:bd:a2:e5:6c:63:73:9c:
                    3b:52:9f:26:fc:bb:5d:84:32:2d:1b:90:65:77:ea:
                    d7:8e:dc:e2:30:b4:a9:52:07:31:89:cb:f8:f6:e6:
                    7f:4a:e4:f0:4c:0a:a0:48:52:c0:8b:f8:be:86:9e:
                    55:c1:a6:53:63:5f:88:cd:79:f2:b6:3c:56:fd:f9:
                    3e:ca:57:8c:8c:e2:db:79:94:d8:7f:74:d7:1c:ee:
                    01:a7:f9:8f:b1:6b:ba:08:dc:a2:13:6d:7b:64:dc:
                    c9:fc:3f:c0:d1:d7:e0:cf:18:d0:cf:22:df:bd:5f:
                    32:f9:f8:55:3c:5b:8d:7c:7b:38:25:7f:6e:47:79:
                    b4:35:4a:92:f2:51:c1:3e:9e:6b:86:82:27:04:ef:
                    7b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:53:CC:64:31:A6:48:F5:00:AB:A0:9E:34:A8:1D:33:98:0D:02:37
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6C3EAF52A71A11EF91927752762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:74:ef:0e:f3:7e:33:97:5b:f7:c7:63:fb:c7:06:78:4d:01:
         36:91:28:d4:93:3d:60:cd:01:52:5e:d9:65:89:d1:2f:49:69:
         52:5d:45:e9:d2:64:4b:55:d0:88:0e:a6:2d:54:a6:1c:9c:e3:
         6f:6f:b1:63:5a:07:3d:f7:2a:0d:d7:f1:1a:ed:25:ba:76:fd:
         aa:d5:df:77:11:b8:39:cc:ce:83:4c:0a:29:b7:25:58:6a:62:
         bd:a7:a3:72:97:c1:a8:03:a3:17:95:74:87:53:93:58:44:83:
         9f:11:8b:50:c2:4e:ed:a7:d6:1a:9d:57:39:76:1a:b1:1c:96:
         4d:9b:a8:ab:92:7c:4e:40:35:cc:48:97:cc:e8:5f:50:31:e1:
         01:ca:08:81:13:b9:b8:57:5c:fa:46:02:eb:fa:47:25:61:0a:
         ea:c3:76:b3:be:00:78:d2:aa:28:d6:c9:d2:29:83:45:03:39:
         19:d1:56:62:66:4c:f1:b3:9f:da:e2:9a:41:1b:11:83:d1:2f:
         86:96:82:7d:6e:72:36:9e:7a:e7:ba:d2:a3:15:6a:c6:f5:66:
         aa:68:3e:c0:4a:d9:5b:29:77:40:a5:35:95:57:cc:f8:d4:2c:
         90:3e:d9:6f:67:4c:e9:eb:c8:b2:99:c7:0b:03:cb:1e:93:63:
         4f:11:c0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:24 2024 by rpki-client on console-ams.rpki-client.org