Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/A10E321EE2B111ECB589CC89F1222468.roa
File:                     A10E321EE2B111ECB589CC89F1222468.roa (raw, json)
Hash identifier:          SW36T/Bmyz5tumuZ5O41sRkFuJcywsGQVu0sAs/l5pk=
Subject key identifier:   F2:E2:5F:D3:31:57:93:DC:3C:21:2F:9F:9A:9A:B1:8A:0B:0A:39:36
Certificate issuer:       /CN=F36CF917AF/serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Certificate serial:       06
Authority key identifier: 5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/A10E321EE2B111ECB589CC89F1222468.roa
Signing time:             Thu 02 Jun 2022 20:21:48 +0000
ROA not before:           Thu 02 Jun 2022 20:21:44 +0000
ROA not after:            Wed 02 Jun 2032 20:21:44 +0000
asID:                     36913
IP address blocks:        102.70.0.0/15 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CF917AF/serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
        Validity
            Not Before: Jun  2 20:21:44 2022 GMT
            Not After : Jun  2 20:21:44 2032 GMT
        Subject: CN=62991bdc-d11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0e:5c:a0:27:7a:c4:98:79:1b:d3:38:9e:da:
                    c5:8f:2c:d1:51:dd:7a:97:5d:45:4a:9c:f4:49:31:
                    2c:7e:f8:1b:c5:4e:56:28:b1:a3:7e:60:18:85:df:
                    1b:e3:17:66:db:d6:37:59:67:dd:76:c2:42:78:9e:
                    f1:43:56:bf:c3:a7:86:7f:ac:78:80:1b:d5:db:cc:
                    64:c5:4c:60:13:06:cd:07:21:ff:95:6e:fa:22:a4:
                    f0:e4:a8:50:70:1d:9f:c6:64:23:de:60:f9:74:41:
                    23:36:5d:9a:05:fe:87:b0:98:08:8e:8a:f3:d6:28:
                    a4:10:fe:cd:aa:dd:fa:f9:37:96:88:65:ff:09:3e:
                    86:f7:73:3b:f8:01:78:99:e4:09:7e:7c:0d:c8:1f:
                    27:b8:6d:56:e1:76:d6:d2:ef:27:ed:7a:d0:a8:66:
                    bb:cd:a8:f1:59:f7:90:9a:08:1e:3b:bf:bf:48:87:
                    40:ba:ed:0d:ad:59:aa:b0:f3:16:97:aa:a1:c4:02:
                    f7:28:8d:04:66:13:d0:8f:10:27:ae:67:99:43:69:
                    8a:e4:0f:eb:5e:af:18:ab:3a:ad:e4:fa:9b:86:01:
                    25:8c:fe:95:46:eb:b4:23:de:bf:19:1e:50:62:3a:
                    87:19:2f:87:dc:11:27:2f:9d:a0:de:3f:33:fa:26:
                    89:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E2:5F:D3:31:57:93:DC:3C:21:2F:9F:9A:9A:B1:8A:0B:0A:39:36
            X509v3 Authority Key Identifier:
                keyid:5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/A10E321EE2B111ECB589CC89F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.70.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         c4:62:1a:5c:8e:21:fe:2b:6f:a6:1d:f2:e5:eb:c3:46:ea:f2:
         bc:c4:dc:f9:c0:c9:d4:da:e8:c1:49:fb:c5:cb:ad:e7:76:eb:
         72:af:f3:ac:8a:90:55:28:58:e5:0a:d6:ba:27:47:78:55:0f:
         95:3d:7c:70:7b:c2:bd:b2:e4:76:f9:aa:bd:d7:be:89:55:f1:
         15:7c:ac:6d:32:b0:54:23:64:37:27:54:7a:25:fc:69:bc:81:
         58:63:81:18:5a:34:d4:61:df:c1:01:a7:a2:b2:89:a2:fc:c1:
         d1:76:55:4b:1a:39:82:5b:18:ce:30:42:84:83:66:94:44:c0:
         58:5c:6e:e1:0a:22:18:1c:19:f2:55:8c:f5:5b:82:f7:5b:4b:
         f4:ff:03:5a:14:44:bc:a9:fa:35:82:c8:94:d7:4c:dc:ef:e9:
         f6:7e:e1:ec:a3:24:91:80:d3:0b:e3:32:c5:17:8d:76:1d:1e:
         cc:fa:8b:73:f1:17:bf:bd:fc:d6:17:cd:1b:c0:44:26:c0:9c:
         5d:ff:a5:3d:ad:dc:bc:75:0b:3d:2a:ca:c1:b0:a9:11:ed:38:
         6b:fa:1a:0a:12:b9:4b:c1:c2:9f:2a:2e:2a:25:19:b2:a9:1c:
         f5:db:1a:72:7c:b0:f5:ff:ff:3b:59:b4:ff:01:54:a2:91:35:
         40:57:cf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:33 2024 by rpki-client on console-fra.rpki-client.org