Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/7097890C25B711EDA0F42D8CF1222468.roa
File:                     7097890C25B711EDA0F42D8CF1222468.roa (raw, json)
Hash identifier:          LCDQJRPalUgqEBA5/BHdcp5UayryRT5PLrlOTYXutHo=
Subject key identifier:   57:9A:D5:4C:8F:08:23:5B:D8:8C:B9:83:51:5A:66:1C:B8:56:65:9D
Certificate issuer:       /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial:       01ED
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/7097890C25B711EDA0F42D8CF1222468.roa
Signing time:             Sat 27 Aug 2022 03:22:12 +0000
ROA not before:           Sat 27 Aug 2022 03:22:08 +0000
ROA not after:            Tue 31 Aug 2032 03:22:08 +0000
asID:                     327901
IP address blocks:        102.219.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
        Validity
            Not Before: Aug 27 03:22:08 2022 GMT
            Not After : Aug 31 03:22:08 2032 GMT
        Subject: CN=63098de4-becb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:20:ed:b9:99:e2:11:6b:4b:68:b4:52:79:
                    a0:5d:b3:63:98:66:97:79:a6:2d:31:9f:cb:3f:e3:
                    c7:1a:c6:17:c8:cb:c5:f7:fc:d5:73:26:d1:f4:0e:
                    01:ed:5f:3e:26:4a:0e:22:0f:ed:5b:3a:61:b0:d8:
                    06:14:fb:a0:04:b7:27:6f:6e:23:8d:18:d3:56:9f:
                    87:bb:3b:6e:4e:00:6e:d9:1c:32:e3:bf:ec:56:48:
                    01:17:ee:ad:28:c3:58:f8:6d:f5:24:81:e2:86:54:
                    15:ed:96:39:86:9e:df:d1:9f:7b:e5:41:78:31:57:
                    22:32:e8:b3:25:e7:9c:9f:e8:ba:70:4e:f6:28:56:
                    0f:83:17:e8:1c:98:70:6c:5e:db:c4:d0:60:07:ba:
                    74:63:f6:df:fd:6b:e0:5a:53:6a:d1:a1:65:64:f7:
                    10:23:d4:05:3b:c0:74:f0:ec:59:63:6d:73:87:e3:
                    d1:84:13:aa:d6:1f:2b:e8:90:c0:27:86:2c:83:7a:
                    5c:9a:a4:21:65:2f:30:79:b1:f6:8e:70:86:cd:83:
                    6f:e4:de:7b:fb:9d:cf:8a:01:eb:bd:6d:70:1a:ae:
                    f6:3a:eb:83:31:1e:c7:cf:f0:93:65:a8:7c:f0:16:
                    0e:24:f8:25:ef:29:7d:31:00:3e:e2:50:56:1b:66:
                    ec:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9A:D5:4C:8F:08:23:5B:D8:8C:B9:83:51:5A:66:1C:B8:56:65:9D
            X509v3 Authority Key Identifier:
                keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/7097890C25B711EDA0F42D8CF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:ef:eb:3b:05:39:6d:f1:8d:14:8d:94:e7:c5:61:c5:6e:11:
         cc:a2:44:d3:c7:d3:1c:61:5b:57:fd:9f:95:c3:71:d9:dc:82:
         4d:c9:48:0e:01:9d:9d:62:aa:c3:de:7e:7b:e7:81:9a:10:12:
         5b:aa:3e:a9:ed:06:ff:a7:23:18:8a:74:cf:21:f1:27:e5:d2:
         c9:d6:67:23:9d:55:ad:eb:c6:cc:32:cd:eb:48:c7:6a:69:c5:
         08:4a:59:ed:1c:18:f0:11:01:c6:22:ef:0e:18:dd:e7:eb:b3:
         47:07:37:d9:4a:6f:5d:b1:ea:5b:56:d5:c8:cd:9d:8a:6f:d9:
         eb:ee:db:d0:14:02:e1:f8:1b:22:a3:0a:a3:e8:15:b0:ee:3f:
         0a:28:24:41:9e:6d:2f:0b:a2:23:47:f9:13:6f:14:be:fa:3c:
         a0:1a:c7:cd:30:5d:91:ca:f1:06:cb:1b:77:61:8a:21:77:62:
         7e:9a:d3:da:fe:d3:1e:55:ef:ca:c3:1e:86:ce:82:d1:31:bc:
         69:f3:b9:0c:57:f3:d0:36:5e:38:ee:f6:98:27:37:5e:c7:80:
         9f:b8:45:96:65:cf:f3:2b:02:09:d8:74:e7:d1:a1:90:12:36:
         f9:9b:b4:05:0c:9e:ef:c1:b3:15:00:18:df:a2:90:28:56:6a:
         5e:97:73:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:26 2024 by rpki-client on console-ams.rpki-client.org