Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6F38D558383911EEB858604D4AD9E6FC.roa
File:                     6F38D558383911EEB858604D4AD9E6FC.roa (raw, json)
Hash identifier:          RwaIBi5KHNYHFkVQJzeYiPtkeomxFvMRo/+N5Qcb5QA=
Subject key identifier:   72:28:A9:FA:4F:3A:09:41:16:32:EC:E0:D6:08:38:1F:A5:49:75:8D
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0CC4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6F38D558383911EEB858604D4AD9E6FC.roa
Signing time:             Fri 11 Aug 2023 11:23:03 +0000
ROA not before:           Fri 11 Aug 2023 11:22:59 +0000
ROA not after:            Sat 16 Aug 2025 11:22:59 +0000
asID:                     212238
IP address blocks:        102.165.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Apr 2024 20:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3268 (0xcc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Aug 11 11:22:59 2023 GMT
            Not After : Aug 16 11:22:59 2025 GMT
        Subject: CN=64d61a16-466a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ab:42:48:8b:73:a2:f1:a4:b0:b1:23:3d:b2:
                    49:2a:d0:6c:a1:ec:dc:16:db:00:41:84:fe:71:1a:
                    4a:5a:73:36:45:19:f8:f6:2c:32:9b:a2:20:fa:cd:
                    2a:36:86:86:31:a2:f9:54:75:f7:59:d7:b1:04:8e:
                    29:a1:57:25:f9:23:bd:c4:09:aa:e2:bd:4b:5e:f0:
                    df:df:a2:b9:b4:9d:17:54:96:62:ed:be:bf:41:e7:
                    ba:20:1c:05:96:82:d3:d3:70:e0:c2:59:31:8f:ed:
                    b8:94:52:22:00:e3:7e:ca:69:0f:db:cf:a7:cf:09:
                    2e:bf:76:e1:2c:09:6b:d8:04:92:8d:20:67:66:01:
                    af:cd:32:92:87:2d:0a:52:59:ba:e1:b7:57:65:95:
                    eb:f2:36:e0:75:a9:2c:6b:d5:5f:e9:d6:5a:f7:43:
                    b6:68:ef:69:a5:0d:ca:b3:3d:c3:33:91:97:b0:72:
                    b0:99:f4:a0:be:bd:f4:90:0d:47:c7:c7:8b:25:27:
                    02:24:81:ee:bf:99:f5:bd:64:3b:b7:ce:e2:a5:3d:
                    33:30:b8:48:15:55:b0:c9:5e:94:d7:f9:53:48:8c:
                    52:0c:a5:33:e0:e7:96:c9:fd:3a:62:84:cc:fd:b6:
                    db:61:d5:1b:ea:2a:95:69:c3:04:b8:98:b2:cd:d4:
                    f6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:28:A9:FA:4F:3A:09:41:16:32:EC:E0:D6:08:38:1F:A5:49:75:8D
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6F38D558383911EEB858604D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:f7:ab:66:ba:0a:84:d8:90:85:3b:0c:2a:71:62:6d:37:99:
         1c:13:58:86:14:0a:50:d4:35:db:0f:a7:6f:c8:7b:6d:de:c7:
         0f:3c:84:40:8e:72:d2:8d:ef:b4:97:4c:8f:87:d5:c4:2d:60:
         79:dd:bc:21:f6:0b:eb:6e:e9:d7:f5:05:6f:20:4e:74:2f:7c:
         1c:c0:ba:f3:03:f3:d6:45:71:0d:23:24:b0:2a:eb:bc:cd:c8:
         93:98:8a:b9:3e:e8:f9:60:11:fb:9a:0b:57:6c:1d:d7:83:45:
         78:10:fc:56:b1:21:eb:fa:4f:ea:e1:b5:d8:b3:b4:06:6f:4d:
         44:31:1b:a8:2a:46:42:58:59:19:e6:4e:2c:86:8b:b4:e7:02:
         0e:ca:57:5c:70:77:bc:cd:72:96:af:92:1d:d5:b8:dd:7f:20:
         fc:07:22:bd:78:a5:54:4a:1e:33:f5:1d:75:ab:84:0b:24:1f:
         9f:08:e6:f1:82:a5:85:ea:b2:fb:2a:f3:01:35:c5:ed:56:80:
         b8:9d:31:46:35:99:a2:7b:86:cc:82:48:c8:22:7c:28:80:33:
         04:47:93:90:f2:a6:3c:1c:e9:56:03:91:77:34:d8:26:6f:b3:
         ca:bf:5b:89:d9:19:29:eb:74:33:5e:67:de:81:ec:c7:95:91:
         24:14:cb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:41:48 2024 by rpki-client on console-ams.rpki-client.org