Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C5022D56B42F11EDBC0D5C82F1222468.roa
File:                     C5022D56B42F11EDBC0D5C82F1222468.roa (raw, json)
Hash identifier:          7NxoWUsHHwKY/N+CNz9vEuiHkF+SRKDPvwUXKw2mRR4=
Subject key identifier:   15:EE:58:3E:36:B8:F3:14:78:DA:8C:5A:EC:B0:1D:45:F0:67:2F:18
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0A90
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C5022D56B42F11EDBC0D5C82F1222468.roa
Signing time:             Fri 24 Feb 2023 10:41:18 +0000
ROA not before:           Fri 24 Feb 2023 10:41:14 +0000
ROA not after:            Sat 22 Feb 2025 10:41:14 +0000
asID:                     61317
IP address blocks:        102.129.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 30 Mar 2024 08:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2704 (0xa90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Feb 24 10:41:14 2023 GMT
            Not After : Feb 22 10:41:14 2025 GMT
        Subject: CN=63f8944e-4491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6d:6a:4c:c3:02:42:5b:0d:dd:72:b3:0c:53:
                    35:d7:c7:bb:bf:bf:10:87:f9:78:67:bd:c4:9e:91:
                    3f:f0:b9:a7:0d:77:75:7e:f9:ce:5d:61:74:74:cd:
                    ef:81:96:0a:44:af:78:64:1c:82:66:b2:31:86:77:
                    1b:7d:69:03:62:15:74:9e:8b:b5:d7:77:c9:bc:3f:
                    d0:01:76:66:2c:45:a3:3f:20:bc:ef:03:78:ee:77:
                    14:3d:92:e3:aa:3b:a6:9e:86:ae:83:95:1c:75:c3:
                    a2:12:a6:3c:30:bd:c2:ef:38:cd:c1:36:ee:ed:e3:
                    7a:2f:48:0f:1c:7a:af:25:2d:3d:f7:fa:24:e4:b4:
                    c8:96:7c:4b:70:36:16:35:0d:99:35:44:c9:27:04:
                    e6:a2:3c:08:ae:b1:b7:9f:5b:e7:e9:c7:64:26:7d:
                    fc:e2:08:fe:50:00:e5:a8:57:cc:be:9c:c6:59:4d:
                    a1:e6:12:43:35:62:4a:d9:7a:f9:01:69:40:e9:b4:
                    66:e7:e5:a0:89:29:f0:9a:3e:16:3e:ea:bd:cb:e5:
                    f7:22:e3:b8:53:72:57:5b:d3:c0:c5:0d:51:58:b3:
                    25:e8:26:a1:eb:5e:24:1c:17:73:44:f2:e9:e2:20:
                    17:cb:a8:e7:51:fc:37:37:a8:98:22:c9:c5:f9:1f:
                    fb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EE:58:3E:36:B8:F3:14:78:DA:8C:5A:EC:B0:1D:45:F0:67:2F:18
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C5022D56B42F11EDBC0D5C82F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:79:f9:54:2b:f2:88:b1:a0:3c:25:01:20:f5:9c:1f:bc:0f:
         42:82:ff:6b:1c:3a:5b:3b:fd:88:4a:2e:57:65:63:53:9d:c6:
         08:34:8e:e9:db:63:b0:c4:9c:f0:65:20:cd:3c:e7:32:a6:bd:
         34:f4:18:96:cb:fc:92:27:ec:72:f8:21:7a:22:cc:9a:7e:14:
         d2:e4:be:33:81:9d:28:9f:3e:3f:bc:5e:c5:83:93:c8:95:d5:
         6a:af:1e:ed:bc:92:f4:c7:2a:13:f3:56:d5:35:3c:58:6a:74:
         f5:60:8e:a4:e9:ae:48:23:06:79:54:6f:4b:37:15:32:1f:82:
         95:50:cd:92:c9:32:dc:6c:cd:2e:83:b0:34:5e:1c:e3:f7:3e:
         ff:43:a2:fa:16:23:b0:79:e8:ef:b8:62:bf:ea:fc:47:59:a2:
         c7:d2:cc:c3:9b:31:1d:33:55:4c:5e:92:a4:1c:44:80:60:ca:
         f0:76:ba:52:c5:4b:58:39:fc:15:3a:a7:6c:3b:af:09:a4:d6:
         7e:6d:5c:36:bc:b8:98:6c:07:15:c3:e6:e6:fa:48:c0:ee:bb:
         f7:83:a9:5b:55:7b:37:84:97:82:bd:17:ce:be:88:20:2e:45:
         46:b5:39:4d:e1:48:aa:87:2c:42:b4:9e:a9:10:07:87:21:ac:
         d7:59:69:90
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCpAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzAyMjQxMDQxMTRaFw0yNTAyMjIxMDQxMTRaMBgxFjAU
BgNVBAMMDTYzZjg5NDRlLTQ0OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCebWpMwwJCWw3dcrMMUzXXx7u/vxCH+XhnvcSekT/wuacNd3V++c5dYXR0
ze+BlgpEr3hkHIJmsjGGdxt9aQNiFXSei7XXd8m8P9ABdmYsRaM/ILzvA3judxQ9
kuOqO6aehq6DlRx1w6ISpjwwvcLvOM3BNu7t43ovSA8ceq8lLT33+iTktMiWfEtw
NhY1DZk1RMknBOaiPAiusbefW+fpx2QmffziCP5QAOWoV8y+nMZZTaHmEkM1YkrZ
evkBaUDptGbn5aCJKfCaPhY+6r3L5fci47hTcldb08DFDVFYsyXoJqHrXiQcF3NE
8uniIBfLqOdR/Dc3qJgiycX5H/vJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUFe5Y
Pja48xR42oxa7LAdRfBnLxgwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0M1MDIyRDU2QjQyRjExRURCQzBENUM4MkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgfIwDQYJKoZIhvcNAQEL
BQADggEBAJJ5+VQr8oixoDwlASD1nB+8D0KC/2scOls7/YhKLldlY1Odxgg0junb
Y7DEnPBlIM085zKmvTT0GJbL/JIn7HL4IXoizJp+FNLkvjOBnSifPj+8XsWDk8iV
1WqvHu28kvTHKhPzVtU1PFhqdPVgjqTprkgjBnlUb0s3FTIfgpVQzZLJMtxszS6D
sDReHOP3Pv9DovoWI7B56O+4Yr/q/EdZosfSzMObMR0zVUxekqQcRIBgyvB2ulLF
S1g5/BU6p2w7rwmk1n5tXDa8uJhsBxXD5ub6SMDuu/eDqVtVezeEl4K9F86+iCAu
RUa1OU3hSKqHLEK0nqkQB4chrNdZaZA=
-----END CERTIFICATE-----
Generated at Thu Mar 28 14:06:55 2024 by rpki-client on console-fra.rpki-client.org