Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D7E882465F3711EDAB91D2CFF1222468.roa
File:                     D7E882465F3711EDAB91D2CFF1222468.roa (raw, json)
Hash identifier:          98E/wMG3UgUb2FVnxXN26DVGtEmY+PQWwotXFY9wGuo=
Subject key identifier:   3F:9A:C7:91:6B:20:0E:11:12:67:35:D3:5C:89:3F:00:89:E4:E7:59
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       08C5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D7E882465F3711EDAB91D2CFF1222468.roa
Signing time:             Tue 08 Nov 2022 07:34:57 +0000
ROA not before:           Tue 08 Nov 2022 07:34:53 +0000
ROA not after:            Fri 08 Nov 2024 07:34:53 +0000
asID:                     212238
IP address blocks:        102.165.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2245 (0x8c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Nov  8 07:34:53 2022 GMT
            Not After : Nov  8 07:34:53 2024 GMT
        Subject: CN=636a06a1-9196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:30:50:77:46:37:59:1d:3a:0e:b1:f7:91:
                    ed:b7:be:55:9f:1f:2b:38:6e:f5:bf:bd:ce:e4:6c:
                    80:6c:b9:a1:82:5f:40:31:68:c8:f0:10:be:57:84:
                    30:9b:f6:2f:5f:78:b1:79:77:8e:d5:ef:17:82:ab:
                    66:60:51:5d:a0:b5:52:cd:f3:f7:ab:99:51:f9:4f:
                    13:c0:91:66:05:19:09:4e:8b:6c:ea:d4:4e:d3:0e:
                    65:d6:27:04:8b:3a:37:4c:9b:cf:c6:bb:af:c9:6a:
                    87:d6:8e:2b:72:0f:fc:51:3f:e6:ef:1f:11:39:93:
                    4c:82:4e:fe:9a:6c:2d:cc:09:b8:d4:30:3b:1d:83:
                    44:da:3c:86:08:4a:a9:06:50:2b:ac:90:db:38:3a:
                    d9:69:73:0e:04:30:71:7a:08:d9:65:38:1a:87:a5:
                    23:23:53:1e:b3:c9:16:22:47:97:7e:82:28:40:ca:
                    68:0f:75:db:a8:05:b0:b0:90:ce:b7:94:b4:f6:4c:
                    ab:4e:52:87:49:20:bc:25:6b:c5:11:58:51:f0:95:
                    22:3b:70:a7:1e:03:d3:a2:ae:0c:31:7c:32:c3:79:
                    d1:41:36:b4:52:1a:58:00:b5:c3:5b:78:6a:f8:95:
                    9b:45:49:76:36:1d:e7:ce:3b:5d:0e:67:53:f0:c7:
                    f1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9A:C7:91:6B:20:0E:11:12:67:35:D3:5C:89:3F:00:89:E4:E7:59
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D7E882465F3711EDAB91D2CFF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:f2:e5:b9:84:42:6f:e4:e7:c1:29:c7:8a:22:5f:27:d0:4d:
         c7:57:16:2c:91:0f:36:05:ed:de:3a:b1:cb:8d:31:8d:86:4d:
         e9:65:6d:d2:f6:91:fc:6a:6a:14:d9:fd:76:5e:8c:53:06:6b:
         94:13:d6:22:88:b5:24:fc:69:c8:56:05:a5:06:af:b3:9a:11:
         4b:32:09:51:37:fc:c5:3b:03:9c:93:64:58:c3:0d:d5:41:30:
         ed:5b:4a:5a:82:b5:eb:81:5c:59:46:3c:05:03:da:0f:7c:6f:
         44:c3:46:3e:56:68:8e:31:2d:32:3c:e9:66:61:95:ca:27:4f:
         4e:38:34:15:cc:41:56:8e:e4:f7:6d:bf:dc:ec:33:0a:a9:d7:
         62:6d:af:07:f3:48:cf:c1:7d:57:16:a7:30:31:5a:a7:9a:36:
         12:10:7b:b4:02:3d:91:94:89:4d:01:0f:b0:01:6d:50:1b:6d:
         b2:fb:f8:98:25:15:6c:b9:70:3f:84:f3:80:04:7f:e8:b9:87:
         6a:f8:8a:67:2a:ac:cd:6e:9c:d7:ea:91:e6:8e:6a:da:67:64:
         c5:ae:db:c3:5b:0a:32:8a:ff:30:71:50:72:b8:a1:f2:19:f1:
         a8:b7:4b:9d:d0:ea:33:05:c1:b4:3e:56:63:e8:43:20:5a:25:
         6c:7c:c5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:19:16 2024 by rpki-client on console-ams.rpki-client.org