Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8D3255962AC211ED862216C6F1222468.roa
File:                     8D3255962AC211ED862216C6F1222468.roa (raw, json)
Hash identifier:          MUg3zT3iVOs6kFT8q96s0ZMo+I0vZ6zmvXjQMDROZe8=
Subject key identifier:   A0:CA:F4:B7:FF:C3:D9:8B:04:52:45:F1:60:13:E6:D6:AD:C7:1D:0A
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       07D4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8D3255962AC211ED862216C6F1222468.roa
Signing time:             Fri 02 Sep 2022 13:24:20 +0000
ROA not before:           Fri 02 Sep 2022 13:24:16 +0000
ROA not after:            Thu 05 Sep 2024 13:24:16 +0000
asID:                     212238
IP address blocks:        102.129.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Apr 2024 00:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2004 (0x7d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Sep  2 13:24:16 2022 GMT
            Not After : Sep  5 13:24:16 2024 GMT
        Subject: CN=63120404-8f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:70:58:63:9a:db:40:b5:e5:42:c4:65:de:9e:
                    17:8c:a0:a6:63:2d:f6:27:44:a3:55:7a:50:01:c9:
                    83:63:d0:b4:2e:7d:a9:1a:3a:35:d0:04:83:6c:54:
                    3e:ed:86:f9:b2:ab:5d:01:81:15:e5:63:1f:50:62:
                    26:9e:48:2c:72:1e:cd:16:8c:3a:31:fc:a1:c6:5c:
                    8b:0b:07:6f:b5:ef:0d:b6:27:ee:ef:c2:7a:5f:6c:
                    ca:6a:93:e9:03:a9:69:33:e8:35:14:38:c2:b9:3a:
                    50:ff:e3:ff:36:b1:44:42:04:81:32:20:15:54:cd:
                    80:03:c7:fc:4d:68:04:c3:ec:4f:b6:bf:92:fc:f6:
                    69:ce:07:4c:72:17:84:dd:fb:f7:20:10:49:df:d9:
                    1a:b3:98:72:de:fc:6e:06:b2:55:fa:93:b9:44:12:
                    92:6f:b8:0f:b7:09:3c:35:d9:6b:bc:51:26:76:19:
                    30:a2:57:4b:73:e1:1e:64:22:4f:75:99:90:d7:f3:
                    1a:9e:24:b3:cc:a5:9c:85:7d:7e:dd:0e:3b:7a:f5:
                    de:a1:80:16:d5:29:4a:58:ab:f0:d0:38:7c:a2:91:
                    85:87:ca:37:f4:11:e9:6a:8f:58:79:59:6f:bf:4c:
                    e1:ad:0b:17:16:f8:63:9f:5f:75:39:3b:05:11:01:
                    70:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CA:F4:B7:FF:C3:D9:8B:04:52:45:F1:60:13:E6:D6:AD:C7:1D:0A
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8D3255962AC211ED862216C6F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:de:c0:a0:ad:c6:d8:bb:a4:72:7c:37:98:5c:a6:2b:fd:c4:
         91:ce:55:f0:73:5c:ee:7b:1d:4d:d5:56:8b:a2:28:4a:a3:2a:
         1d:2b:41:3f:11:2b:0f:98:6a:49:e9:75:12:9d:0d:3f:e6:30:
         45:3d:e1:65:79:ff:d4:e3:d7:dc:d8:e9:88:91:ad:a4:5e:80:
         18:fd:a1:57:2c:5e:6f:b9:c3:5b:ab:b3:7f:08:cd:53:20:4b:
         ce:1f:03:c0:15:3c:7e:65:65:e6:cf:0f:e7:14:3b:c6:9e:ef:
         9b:27:ae:df:0b:20:eb:63:a2:db:4e:0d:8e:00:16:60:93:64:
         49:e3:1d:8b:9f:ac:c1:01:85:6d:d6:7c:98:0e:74:3f:fd:ac:
         4b:50:32:d0:88:e0:d2:ac:79:93:0d:1b:a1:94:b3:ef:55:9f:
         64:5b:81:46:d3:99:98:68:66:e4:95:ff:ba:45:c4:e1:29:23:
         74:de:cf:eb:ad:24:3b:65:fb:aa:19:aa:04:5e:4c:99:1a:58:
         f9:1b:91:b7:bb:a1:d7:b7:39:d1:89:88:88:2f:30:cb:21:6b:
         a6:ff:6d:96:b5:fd:3e:78:5f:c9:33:9f:eb:a2:2f:de:83:50:
         ca:b9:a4:ab:16:22:ff:7d:b4:f2:5e:b1:d1:c3:c1:4e:7e:eb:
         50:5f:c7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:48:54 2024 by rpki-client on console-fra.rpki-client.org