Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/C896274C23C011ED9C3FD1C7F1222468.roa
File:                     C896274C23C011ED9C3FD1C7F1222468.roa (raw, json)
Hash identifier:          yZnBwovkgD+QQe0Ey+FhF46dMQlhjgVt/VRzQSjeVzU=
Subject key identifier:   EB:E7:28:9C:33:8F:3B:B3:15:3B:09:F6:0F:C4:00:D3:DF:D2:77:D9
Certificate issuer:       /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial:       01D6
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/C896274C23C011ED9C3FD1C7F1222468.roa
Signing time:             Wed 24 Aug 2022 15:24:03 +0000
ROA not before:           Wed 24 Aug 2022 15:23:59 +0000
ROA not after:            Tue 31 Aug 2032 15:23:59 +0000
asID:                     327901
IP address blocks:        102.217.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Apr 2024 00:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
        Validity
            Not Before: Aug 24 15:23:59 2022 GMT
            Not After : Aug 31 15:23:59 2032 GMT
        Subject: CN=63064292-5c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:e8:44:f7:e8:7f:51:e8:16:71:c8:df:11:
                    b4:36:ac:13:ca:0d:11:7b:6b:ea:70:69:03:00:93:
                    b1:f6:9a:27:00:57:dc:64:d0:82:6c:99:92:ed:f9:
                    c6:be:dd:c6:22:07:78:12:5f:31:28:de:e0:5b:b7:
                    7e:15:63:c3:2b:88:78:25:82:ba:44:68:04:a4:dc:
                    ec:4a:08:07:0b:42:a4:7a:d9:15:86:be:06:5c:e4:
                    34:cc:9e:b9:a4:38:d8:77:e3:16:dc:73:05:eb:b1:
                    43:34:b4:9a:81:8c:53:78:68:82:a5:9a:56:46:7c:
                    bb:62:fd:19:79:5b:47:90:9a:ec:45:e7:13:45:2e:
                    24:47:f9:33:01:e9:a6:50:57:77:23:1b:6f:dc:78:
                    59:d2:a2:de:29:e1:63:aa:9c:7e:d7:d8:92:4e:2e:
                    67:dd:ca:f7:3e:5e:0a:44:98:1f:de:f3:0a:51:dd:
                    56:30:c6:f1:32:8d:7d:5d:07:22:f5:c4:89:0c:fc:
                    59:bd:39:ce:0a:ad:c2:a9:39:1e:4a:68:5f:f4:2c:
                    fb:d3:85:c0:5c:07:82:32:56:5e:75:8b:48:93:7f:
                    78:8c:90:9a:b2:9d:35:94:da:cd:d6:13:57:95:55:
                    da:d6:83:59:bd:ff:fe:54:9d:d9:de:2e:d8:a8:71:
                    a9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E7:28:9C:33:8F:3B:B3:15:3B:09:F6:0F:C4:00:D3:DF:D2:77:D9
            X509v3 Authority Key Identifier:
                keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/C896274C23C011ED9C3FD1C7F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:38:09:47:45:1a:7c:a4:f4:21:06:88:c6:69:78:7c:ba:04:
         70:73:58:5c:70:3e:8b:e7:0f:f7:00:1c:06:ae:41:40:7b:2d:
         2f:14:00:7d:39:61:cd:cb:fe:a2:7a:90:47:52:6a:4c:1b:2f:
         c5:f6:91:fb:63:93:f6:4f:2f:e5:75:aa:e5:8d:4f:95:1f:b4:
         00:6b:d5:3c:b3:76:3f:10:92:1b:85:3a:74:de:eb:ff:77:01:
         8d:43:72:6e:cc:77:b9:b5:6b:4e:a8:b3:c5:26:1f:07:57:7c:
         fd:f3:73:25:47:33:e6:84:d5:1c:5c:16:19:80:e1:21:d8:b5:
         a7:eb:46:c8:3b:a4:fc:f3:7b:3f:91:33:fb:84:23:37:9b:47:
         d5:4b:2d:58:ed:47:90:b7:db:f6:c0:79:1f:cf:f0:a9:19:b0:
         7f:7e:30:4a:4d:e0:5f:ce:64:36:31:7a:af:0d:d4:e1:9f:b2:
         d5:d1:0a:f2:83:06:0b:51:0d:92:0f:4a:81:b8:10:5e:22:fb:
         c1:2e:c3:d0:a3:20:43:d0:32:8b:50:a8:61:3b:cb:b4:07:93:
         3e:c9:e8:d0:2c:87:37:71:69:5b:35:51:73:17:d6:79:34:fa:
         02:c7:36:ff:c6:fa:29:f5:e4:2a:47:99:c5:57:22:8e:5f:9f:
         ae:97:09:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 02:55:25 2024 by rpki-client on console-fra.rpki-client.org