Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/2B02A64023C011ED8728E5C5F1222468.roa
File:                     2B02A64023C011ED8728E5C5F1222468.roa (raw, json)
Hash identifier:          G/yX4leE+tLKxVRQ080jUVUwSsOPiDnIG2vz/NduDOc=
Subject key identifier:   BA:34:23:7B:0C:E5:29:51:86:EF:D0:FA:D7:E9:9A:67:F9:CC:A1:5E
Certificate issuer:       /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial:       01CC
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/2B02A64023C011ED8728E5C5F1222468.roa
Signing time:             Wed 24 Aug 2022 15:19:38 +0000
ROA not before:           Wed 24 Aug 2022 15:19:34 +0000
ROA not after:            Tue 31 Aug 2032 15:19:34 +0000
asID:                     327901
IP address blocks:        102.222.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
        Validity
            Not Before: Aug 24 15:19:34 2022 GMT
            Not After : Aug 31 15:19:34 2032 GMT
        Subject: CN=6306418a-9b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:60:8d:6a:96:84:4b:4c:9f:79:e5:d7:f8:f0:
                    de:0e:3e:6e:92:f2:4e:c3:8e:b8:33:e4:38:b5:de:
                    5a:80:1b:ea:b5:22:ae:79:d7:a0:23:7f:5a:b6:bc:
                    bc:22:a3:ae:0f:11:a1:70:de:90:32:a8:53:5a:7f:
                    eb:59:97:66:17:4a:e1:39:cc:97:9a:54:db:33:cc:
                    28:10:78:c9:29:a3:b8:6b:91:ce:1a:f3:16:f6:e6:
                    4c:6a:91:bf:49:69:c9:78:c9:9d:01:be:e0:46:94:
                    ef:83:02:ca:8b:81:ae:12:20:a4:fc:05:61:1d:64:
                    8f:e3:29:d9:54:f3:73:98:75:5f:60:bc:c3:3b:81:
                    84:a1:6e:07:30:38:04:0a:97:61:9e:d5:c5:08:27:
                    a1:4f:06:a1:5d:d1:e6:75:46:26:c3:44:ec:0c:ce:
                    c6:dc:bd:d7:dc:71:4d:bb:d4:7e:ce:2d:75:bf:b8:
                    f5:d0:bb:dc:63:a4:db:c2:de:88:bb:65:61:bc:cf:
                    a8:7c:f0:2e:92:fb:50:ff:42:79:e6:c5:b6:32:56:
                    b8:fe:f9:db:5e:c0:38:9e:98:ac:ba:10:f2:9c:6b:
                    ed:3b:ab:93:b2:28:66:00:5c:7c:b0:31:41:8a:ba:
                    93:0a:f7:72:75:f2:28:e5:66:09:27:05:2a:63:91:
                    c4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:34:23:7B:0C:E5:29:51:86:EF:D0:FA:D7:E9:9A:67:F9:CC:A1:5E
            X509v3 Authority Key Identifier:
                keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/2B02A64023C011ED8728E5C5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.222.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:d8:09:70:72:56:aa:62:12:bc:3f:d9:56:3f:f8:44:47:b7:
         51:e7:70:58:96:5c:98:e2:e1:04:5a:7f:9b:03:df:57:8f:64:
         c0:6f:72:25:ef:64:fa:0a:57:19:93:f9:27:71:01:f5:9f:44:
         3c:65:40:65:0f:10:1b:7a:91:34:49:70:10:e7:65:f0:b5:2f:
         c6:11:20:18:1c:bd:fe:7f:3d:fc:70:bd:be:ca:87:5a:be:3c:
         ad:14:af:ad:3a:36:96:2c:c8:55:b4:35:ed:2e:52:bf:0c:78:
         fb:05:00:7e:1d:f6:51:b7:2a:cb:0d:6c:18:f5:c1:dc:79:7c:
         8d:83:82:8d:e3:9f:85:7e:dc:6b:ab:d3:e9:54:2c:82:b9:8b:
         58:0b:22:69:c2:06:81:76:ed:63:a3:99:ea:14:d4:be:91:55:
         50:7c:35:bb:2d:48:9c:f8:c6:05:fd:b4:83:df:78:e2:0a:65:
         0b:86:bc:ed:76:62:b6:50:2a:7f:05:e6:41:48:36:85:b7:4f:
         39:41:a4:d1:8f:27:bf:bc:b1:a6:39:3b:eb:4e:7f:2a:be:8d:
         e8:89:a5:b8:06:8d:fd:c8:b0:f2:7d:11:62:fc:ae:50:bd:94:
         0f:fa:7a:78:92:52:9b:3c:c5:0a:a6:a2:5c:83:45:71:99:37:
         cf:98:6d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:10 2024 by rpki-client on console-ams.rpki-client.org