Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/47EC7EC423C111ED8C5569C9F1222468.roa
File:                     47EC7EC423C111ED8C5569C9F1222468.roa (raw, json)
Hash identifier:          X90d8Bp7be3eFZEm0tN0NlXAE4lcokMViNFvfEFubQ4=
Subject key identifier:   FB:87:D0:CB:44:49:A6:1B:42:39:73:30:53:75:F4:91:77:26:37:A2
Certificate issuer:       /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial:       01DE
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/47EC7EC423C111ED8C5569C9F1222468.roa
Signing time:             Wed 24 Aug 2022 15:27:36 +0000
ROA not before:           Wed 24 Aug 2022 15:27:32 +0000
ROA not after:            Tue 31 Aug 2032 15:27:32 +0000
asID:                     327901
IP address blocks:        102.215.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Apr 2024 00:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
        Validity
            Not Before: Aug 24 15:27:32 2022 GMT
            Not After : Aug 31 15:27:32 2032 GMT
        Subject: CN=63064368-90a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2d:51:99:f2:4c:96:65:1c:0c:18:a2:92:b0:
                    12:1f:9d:b5:a6:a4:34:87:ab:da:35:6e:f1:d4:b3:
                    17:63:4a:e1:ae:2a:52:ed:11:c2:51:30:3b:e7:6c:
                    4c:62:da:cf:62:05:61:0c:14:f5:c2:0b:8f:fd:5a:
                    5d:51:85:50:82:77:9c:9c:69:ad:60:ea:3a:11:e2:
                    be:12:be:23:9e:68:3d:bd:1b:81:b4:e5:15:ba:73:
                    f7:f0:1d:95:39:81:c5:88:69:d0:69:35:8b:ae:59:
                    c5:82:cf:2a:6e:6f:c9:d7:7e:d4:65:89:6f:fd:b4:
                    ec:11:ee:bc:2a:de:28:78:a0:35:5e:ba:ef:2a:f8:
                    41:63:8b:cd:9e:9c:e1:f1:49:28:6e:b1:f7:9c:a2:
                    ee:9c:d9:28:55:31:41:30:96:6b:2e:af:6b:4b:14:
                    af:0a:c4:b7:4d:84:d7:58:a5:65:ed:07:8b:10:2a:
                    6d:e9:1e:f3:1e:5d:4b:89:0c:e7:f9:37:cc:3c:60:
                    af:43:45:41:f9:b2:7e:1a:df:6a:41:38:15:b0:25:
                    5c:6e:a2:dd:46:23:e0:19:71:9b:dd:5a:35:98:7b:
                    67:76:bf:d1:ec:3f:c9:2e:2e:3c:6d:f7:77:35:ee:
                    a1:01:d0:21:fc:c9:5b:17:04:93:28:2d:ce:87:a2:
                    39:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:87:D0:CB:44:49:A6:1B:42:39:73:30:53:75:F4:91:77:26:37:A2
            X509v3 Authority Key Identifier:
                keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/47EC7EC423C111ED8C5569C9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:0d:41:9d:05:48:f7:c9:c2:e7:e4:df:44:11:02:bc:e6:b1:
         2d:f2:ae:25:f4:65:13:03:f6:4e:80:41:db:42:a4:70:87:7d:
         66:9e:e3:d6:ac:74:9f:da:1f:88:72:c9:1d:78:c1:50:2f:3d:
         17:8e:4a:89:2b:a5:cb:92:25:89:bd:4f:84:e0:5b:32:aa:a5:
         20:1e:9f:e4:bb:b4:10:8d:5d:60:24:73:94:7c:32:57:98:90:
         55:63:5a:77:ac:bd:b1:33:c3:39:12:5b:a5:6b:43:23:85:c0:
         65:c2:c5:d0:bf:ec:7b:c4:e2:de:64:fc:98:bb:da:b7:ce:ea:
         08:cc:4d:35:f5:df:5d:e3:8a:10:a3:66:92:28:20:dc:e9:6e:
         6d:3d:01:18:08:63:9e:2f:01:e1:c7:1b:47:71:42:30:13:12:
         c3:6d:9d:66:c6:77:14:34:ef:fd:48:f2:8a:d2:92:55:25:d2:
         bd:46:b4:14:05:a9:57:31:e9:3d:94:c0:e6:89:e6:43:bb:f1:
         19:27:58:eb:fc:b7:57:5b:aa:a5:ba:dd:fb:10:3e:6d:fe:95:
         16:3c:12:d7:17:63:44:c5:f0:a4:c6:45:74:41:c3:f5:a6:53:
         15:58:e8:53:bb:f6:20:e2:97:f7:bd:8e:56:b1:79:41:b0:c4:
         72:a4:6f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:47:14 2024 by rpki-client on console-ams.rpki-client.org