Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/3563C380438D11EC9AACDE60D8A014CE.roa
File:                     3563C380438D11EC9AACDE60D8A014CE.roa (raw, json)
Hash identifier:          TyFZ/UPv6SlWmDP6YBFzkFOv8jYvJnf43d+IzxGi3mc=
Subject key identifier:   91:B8:B1:B6:1F:CE:9E:FA:59:1D:08:03:69:61:54:E3:D7:AA:58:55
Certificate issuer:       /CN=F36D289CAF/serialNumber=15480AC3E7637CF2A7B6887AFD51A53F03E6AD47
Certificate serial:       036D
Authority key identifier: 15:48:0A:C3:E7:63:7C:F2:A7:B6:88:7A:FD:51:A5:3F:03:E6:AD:47
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/3563C380438D11EC9AACDE60D8A014CE.roa
Signing time:             Fri 12 Nov 2021 07:50:31 +0000
ROA not before:           Fri 12 Nov 2021 07:50:26 +0000
ROA not after:            Sun 30 Nov 2025 07:50:26 +0000
asID:                     327754
IP address blocks:        102.217.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 30 Sep 2024 00:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877 (0x36d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D289CAF/serialNumber=15480AC3E7637CF2A7B6887AFD51A53F03E6AD47
        Validity
            Not Before: Nov 12 07:50:26 2021 GMT
            Not After : Nov 30 07:50:26 2025 GMT
        Subject: CN=618e1cc7-478e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:55:2c:0f:34:b6:bf:1b:71:82:dc:f3:1b:a0:
                    36:56:36:00:d4:0e:1e:50:63:68:4e:81:7d:3c:73:
                    f4:f2:ce:1b:ee:da:85:a1:fd:a9:08:d8:24:1d:9a:
                    59:6f:0d:07:fc:26:60:1c:49:f8:3d:57:c4:f4:a6:
                    92:1f:c0:b5:ad:70:f1:68:b6:26:a2:23:37:30:16:
                    19:1c:68:fd:2e:f9:c6:e9:c2:14:18:f5:25:0a:70:
                    2b:43:6d:8b:c8:f4:5a:28:cd:ff:2c:2f:40:a8:db:
                    7a:12:fc:ef:ef:5f:3f:1d:0e:74:81:0d:2b:24:ab:
                    5c:4d:a5:a3:25:de:bd:2b:a8:16:7c:e2:b1:8c:e0:
                    9a:00:6d:3a:c6:49:45:50:0a:3b:4f:c5:9d:c1:43:
                    ca:5b:e8:a6:ab:02:d4:66:93:48:f4:c9:0b:5b:0f:
                    a3:8a:a6:84:69:b3:88:34:58:ff:5e:8b:6a:6d:bf:
                    11:8d:04:fa:46:8c:27:62:02:b5:1b:28:52:7a:bf:
                    83:88:69:be:5d:a8:1b:b6:7d:d9:7d:a7:b8:fd:b7:
                    12:3d:f3:4c:df:1a:6c:5b:d8:10:4d:5c:43:46:88:
                    ab:8d:f3:a5:ab:88:cc:9c:ef:af:a5:20:ab:f6:46:
                    5e:cc:63:4d:89:0b:e9:e3:ba:e4:0f:c8:53:10:18:
                    bc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B8:B1:B6:1F:CE:9E:FA:59:1D:08:03:69:61:54:E3:D7:AA:58:55
            X509v3 Authority Key Identifier:
                keyid:15:48:0A:C3:E7:63:7C:F2:A7:B6:88:7A:FD:51:A5:3F:03:E6:AD:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/3563C380438D11EC9AACDE60D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:fb:33:b1:b4:f7:0c:19:79:3e:ca:24:b9:17:b4:b6:1e:c4:
         d4:61:83:00:e0:45:95:3c:e5:e7:bf:47:07:2e:83:03:12:4f:
         f5:8c:15:73:e4:4b:92:13:af:c0:67:4b:38:d1:17:2e:56:66:
         30:08:f7:2a:55:ef:4e:af:09:1f:af:1f:fb:67:fc:76:fd:e9:
         26:e3:37:43:3a:17:29:f5:22:54:e5:2a:11:b8:98:66:05:94:
         fd:d3:cb:ce:37:ea:a0:d5:2c:0f:bb:a1:35:c4:a8:52:f4:e9:
         14:e0:b6:69:54:11:6e:56:41:10:8e:97:9e:4b:e3:cc:4a:86:
         04:69:65:95:31:5e:8c:42:02:15:05:9b:81:0c:7e:78:9e:04:
         aa:9a:30:31:f6:76:a0:b6:d0:a4:fe:5f:54:b8:04:b5:75:72:
         c5:1f:b7:12:2b:b3:1e:5c:2a:90:0a:d2:07:ef:a3:fc:52:af:
         70:ea:bd:bc:81:18:71:23:c0:6d:b7:f9:a1:68:60:d2:a1:39:
         16:68:0d:ea:c7:4c:bc:68:ab:d4:95:d1:56:71:fb:ee:70:a5:
         8e:49:fd:1b:c0:94:3d:80:6b:c8:a9:e5:4b:10:3b:21:89:d7:
         58:11:e9:b1:07:53:8d:d7:07:0c:20:b9:07:b1:f5:b3:ed:59:
         7b:2d:20:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 03:42:43 2024 by rpki-client on console-ams.rpki-client.org