Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C0891E8CE8CF11ECBA4F3FF9F1222468.roa
File:                     C0891E8CE8CF11ECBA4F3FF9F1222468.roa (raw, json)
Hash identifier:          Z0zR5sz5Y3h9QmDt0/eLdCpXToqs0iWGo//1xIcHfUQ=
Subject key identifier:   5B:57:B7:BE:92:B2:A1:AC:F2:F3:1F:E0:B9:F4:9A:62:58:F6:8D:C1
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0693
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C0891E8CE8CF11ECBA4F3FF9F1222468.roa
Signing time:             Fri 10 Jun 2022 15:12:33 +0000
ROA not before:           Fri 10 Jun 2022 15:12:27 +0000
ROA not after:            Mon 10 Jun 2024 15:12:27 +0000
asID:                     46562
IP address blocks:        102.165.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Apr 2024 00:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683 (0x693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jun 10 15:12:27 2022 GMT
            Not After : Jun 10 15:12:27 2024 GMT
        Subject: CN=62a35f61-6104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d3:27:bc:31:9d:3b:e1:7e:a6:24:39:a2:c6:
                    15:22:94:31:4a:30:51:24:71:27:13:08:73:ed:90:
                    f5:03:6e:79:ee:72:18:26:48:c8:0c:72:e5:8b:20:
                    d5:5c:a3:0b:ff:19:24:da:0d:4c:bb:5e:8d:34:ef:
                    45:f8:dc:0a:45:b1:8f:28:a3:b4:6b:be:6d:09:44:
                    42:75:2e:72:b2:8d:32:0d:04:26:57:e2:57:ab:c4:
                    a9:94:27:a2:80:d2:83:1d:30:de:da:60:bb:35:ac:
                    71:e6:e6:e8:7a:80:ee:1e:2c:0f:12:a1:65:88:29:
                    a6:db:94:f0:40:fd:f5:88:91:be:7e:57:46:0a:2e:
                    94:cb:49:b2:af:94:c7:0e:47:cb:b1:06:83:08:ca:
                    22:ae:bf:5f:40:43:bb:e1:51:c7:93:6c:e3:88:4e:
                    40:9f:e5:7f:95:20:fe:fd:4e:2b:ad:74:b5:db:82:
                    dd:ff:5a:15:6e:6a:a6:96:57:42:fb:c6:8b:f0:4b:
                    18:3f:3e:ed:53:cc:cc:fa:46:07:e6:de:bc:2d:1d:
                    ef:18:42:78:9a:13:86:70:43:74:71:29:d3:48:22:
                    21:a0:c4:ff:b4:60:59:6d:8c:e2:c7:e8:e0:88:d0:
                    88:c7:76:51:cf:09:c9:d1:8d:bb:f9:f6:7e:5a:53:
                    48:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:57:B7:BE:92:B2:A1:AC:F2:F3:1F:E0:B9:F4:9A:62:58:F6:8D:C1
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C0891E8CE8CF11ECBA4F3FF9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:91:70:82:8c:93:05:80:13:f6:63:84:c0:db:4c:4a:a7:f0:
         f6:74:92:f6:ab:a5:b8:7a:fd:ad:84:14:e0:c3:19:cf:82:35:
         3b:ec:0f:14:df:90:50:b2:c7:33:94:47:82:6c:34:72:95:e5:
         b0:59:c9:86:2a:dd:a1:96:2c:fd:77:ce:a2:a1:b9:d1:8e:d7:
         ca:32:d8:51:a6:ba:0d:15:11:13:9a:7c:02:bf:fb:28:64:7e:
         46:7a:ed:c3:1f:9b:1d:79:c7:96:7b:24:ad:6f:21:59:a5:f9:
         08:3e:5d:f1:f1:b6:3e:84:fa:a5:d4:d1:52:e7:f2:e7:86:05:
         af:92:a1:ee:6b:fb:24:45:5d:29:a6:7a:f0:b8:5e:e6:44:29:
         ab:a7:c4:24:89:19:e9:7e:76:5b:78:ad:fa:2c:0f:71:c4:af:
         cf:90:24:9d:34:ae:ad:b1:9b:f6:15:5c:08:4c:8c:c5:8f:ac:
         43:9b:d4:61:ae:c1:29:d7:d2:da:4a:04:95:91:61:db:e9:69:
         3c:a0:c3:53:5d:90:24:8f:a1:50:26:8b:f1:f1:80:a9:c7:d8:
         fa:ab:b8:2c:4d:92:90:6c:06:e3:73:37:aa:12:3c:0f:8c:29:
         d9:91:b0:32:ed:6d:b0:8f:18:f7:82:bb:9d:c8:7e:e9:0e:67:
         6a:c0:4f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:50:10 2024 by rpki-client on console-fra.rpki-client.org