Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FD32FE923E8911ED9BF37AE0F1222468.roa
File:                     FD32FE923E8911ED9BF37AE0F1222468.roa (raw, json)
Hash identifier:          G8o/BRVrl4BuC94W2YMXZ08eScetpjv4DA3UL3uUNPo=
Subject key identifier:   BF:D8:ED:59:98:0C:B2:C1:F3:33:26:CD:D7:82:C0:AA:9F:9B:97:AA
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       080D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FD32FE923E8911ED9BF37AE0F1222468.roa
Signing time:             Tue 27 Sep 2022 17:29:50 +0000
ROA not before:           Tue 27 Sep 2022 17:29:46 +0000
ROA not after:            Mon 30 Sep 2024 17:29:46 +0000
asID:                     212238
IP address blocks:        102.129.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2061 (0x80d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Sep 27 17:29:46 2022 GMT
            Not After : Sep 30 17:29:46 2024 GMT
        Subject: CN=6333330e-8bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:7d:52:60:68:fc:3c:da:0a:df:88:10:4f:
                    7d:2e:ea:d5:d4:08:bb:f7:ec:8a:38:26:f1:f8:87:
                    08:90:73:f5:1b:67:a8:fc:02:a1:ad:db:0b:db:1b:
                    15:a5:fb:e7:38:b6:b0:0a:1d:48:53:4a:0c:e3:8a:
                    1f:6e:24:33:ee:23:c6:46:2c:4b:ab:4e:db:17:70:
                    df:58:47:02:d2:48:db:a0:4c:61:8f:01:33:b3:f6:
                    e9:09:26:08:c4:93:5d:a1:cc:80:d1:6f:87:a9:d4:
                    4c:a7:a0:99:14:b5:20:16:77:0d:a4:eb:3b:a7:d9:
                    5d:35:e5:fa:97:c6:46:3f:e3:a6:a4:a4:6c:87:11:
                    7d:5c:ed:c1:0c:91:b4:f6:5b:fe:9d:e3:16:89:39:
                    f4:4a:81:11:8d:a3:b2:2e:8c:69:7d:51:aa:27:a1:
                    9d:fc:1a:5e:68:ee:d6:91:4e:a4:7c:c8:8b:12:10:
                    80:de:b2:21:a2:74:7d:06:c6:33:f2:9d:58:47:0e:
                    60:f3:14:eb:90:19:eb:93:6e:73:8e:75:ca:79:ba:
                    9f:19:a0:89:92:b9:ff:8f:cc:de:7f:ad:af:7c:3c:
                    e6:48:3c:3b:d9:a9:07:5b:e3:ae:8c:b1:2c:e7:9a:
                    ea:8d:97:3a:48:76:bb:1b:3d:cc:4b:d2:f6:3f:52:
                    ba:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D8:ED:59:98:0C:B2:C1:F3:33:26:CD:D7:82:C0:AA:9F:9B:97:AA
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FD32FE923E8911ED9BF37AE0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:b4:71:4c:c8:a9:5b:90:89:b7:18:42:a9:d0:b6:13:95:ac:
         d0:ef:dc:99:e4:f9:13:ba:80:9a:dc:e1:64:78:d1:3d:ab:03:
         91:7d:c1:21:36:aa:b8:65:66:ec:94:97:7f:2a:3a:7e:c7:a6:
         77:b8:55:66:4d:70:1c:36:36:04:a6:54:be:4f:fd:ca:f2:c3:
         fe:de:e7:ba:e6:9a:40:ff:d4:bb:2a:c3:46:e3:ce:72:58:2b:
         1a:eb:41:7d:ac:55:23:9d:6d:1c:d3:c8:a1:a2:18:46:3d:b2:
         6b:5a:8b:ed:6e:84:67:6b:18:e0:c1:bf:5f:0b:e8:5e:4b:b4:
         3c:af:2e:13:05:90:ca:97:b9:3a:5f:b2:7b:ce:65:9f:d1:86:
         85:66:0e:41:ac:b9:a9:45:d4:8c:7d:67:3c:a6:96:03:91:74:
         d2:2f:41:f7:84:31:6f:d3:cd:bf:3a:32:d9:9d:34:11:4c:75:
         47:a1:59:03:0e:ac:cc:ee:33:67:78:05:4b:b4:2a:de:f9:69:
         6f:ae:e8:8f:7f:25:3b:cc:96:76:52:2d:a6:36:a5:56:ac:e8:
         13:a4:71:35:3f:c4:e2:95:a6:f9:b1:cc:30:9f:f6:22:7c:f1:
         80:33:b0:81:71:4b:c5:8b:5f:29:c0:fe:8e:ed:a1:5e:f5:ed:
         18:f5:9f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:19:16 2024 by rpki-client on console-ams.rpki-client.org