Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/6BF2B2A2BF4C11EE9AB44B6D775412E6.roa
File:                     6BF2B2A2BF4C11EE9AB44B6D775412E6.roa (raw, json)
Hash identifier:          5S2oL8sFdIeiKmkbdSSpcnKiCvZnqoNlP57QX2tH4Wk=
Subject key identifier:   14:80:0C:51:27:72:74:34:A2:17:65:42:2D:F9:95:48:2C:C3:2F:77
Certificate issuer:       /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial:       0107
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/6BF2B2A2BF4C11EE9AB44B6D775412E6.roa
Signing time:             Tue 30 Jan 2024 08:49:04 +0000
ROA not before:           Tue 30 Jan 2024 08:49:01 +0000
ROA not after:            Sat 01 Feb 2025 08:49:01 +0000
asID:                     37684
IP address blocks:        102.221.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 03 Jun 2024 00:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
        Validity
            Not Before: Jan 30 08:49:01 2024 GMT
            Not After : Feb  1 08:49:01 2025 GMT
        Subject: CN=65b8b800-0504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:2f:71:7c:38:78:9c:65:08:2e:56:2a:3a:
                    2d:b8:53:b0:e8:23:43:dd:04:77:e8:bd:ad:bf:7c:
                    c3:4f:e2:ee:c6:2f:ee:15:5e:df:d8:d6:1e:68:ae:
                    09:49:b3:5c:73:6a:c2:8a:a5:6a:2d:f8:6b:03:3e:
                    45:d5:53:bb:2e:75:33:fd:3a:2f:14:ad:05:2e:25:
                    bf:c0:35:07:37:6b:4b:47:40:7f:c9:1f:ee:9e:01:
                    22:fa:aa:f9:c4:5e:6d:d4:f1:88:ec:e5:4f:74:33:
                    f2:90:dc:1c:34:44:03:3b:8a:d9:c5:12:fd:b8:a8:
                    14:9f:90:aa:29:8f:2e:46:45:bf:ea:a3:c7:71:db:
                    0b:1c:f2:7c:9b:2a:19:18:a1:3a:26:38:17:11:b8:
                    c1:0e:a0:34:c5:95:d9:99:a2:c3:e4:1b:b8:79:94:
                    cf:b2:06:91:c4:97:6a:f4:c2:ed:a8:bb:28:66:3a:
                    7a:62:0d:a3:a5:b2:14:93:be:81:35:ef:32:59:d4:
                    35:70:3e:3e:da:d4:93:c4:70:39:39:9a:16:5c:b5:
                    dc:3d:75:19:28:ca:7a:0c:ef:fc:00:ce:05:c7:59:
                    bb:9a:ad:6b:1f:3c:e0:8e:55:75:2d:44:b3:43:c4:
                    1d:05:15:2d:d6:c3:13:95:02:07:d5:07:cf:a6:77:
                    ef:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:80:0C:51:27:72:74:34:A2:17:65:42:2D:F9:95:48:2C:C3:2F:77
            X509v3 Authority Key Identifier:
                keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/6BF2B2A2BF4C11EE9AB44B6D775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.221.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:c6:1c:86:d1:52:69:ee:40:9b:c9:3e:18:f4:2e:e4:d5:ed:
         58:17:ba:07:d5:70:ac:4a:fe:7e:23:e5:6a:62:a4:ca:61:dd:
         97:fc:22:62:6e:e3:a7:66:88:32:a6:20:0a:56:35:fc:5f:aa:
         e8:1e:f5:b5:56:97:37:51:62:fa:d6:22:0b:3a:f5:ef:79:2e:
         16:04:42:8b:bf:77:12:ba:26:22:8e:66:35:71:07:a9:59:54:
         7d:5f:fd:8c:e1:f2:a6:17:95:78:b8:66:bb:64:ee:45:e3:75:
         7b:9a:dd:98:03:fe:b6:9b:c9:e4:4a:8c:49:17:04:db:f6:8d:
         b7:24:01:5d:4c:57:68:03:71:14:53:b2:92:28:70:39:b7:0a:
         ed:5b:0f:ff:22:6f:ad:91:2a:3c:a2:67:7d:95:08:fc:e4:65:
         06:b0:a1:2e:1d:75:77:e6:f4:5b:80:0f:b3:f2:8b:fc:8a:86:
         0a:50:fc:ae:8f:4e:43:37:d1:27:a6:e2:9f:ee:89:2f:26:38:
         d1:7c:76:c0:5c:a5:d8:16:6b:8e:fa:a5:4b:3e:ce:de:05:6e:
         26:d4:69:30:30:64:66:d2:43:06:35:26:30:5e:b5:2f:ec:ab:
         37:90:d4:fb:5d:5b:80:6f:ca:93:e7:2c:35:f9:02:e5:b4:96:
         ab:78:3f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:13 2024 by rpki-client on console-fra.rpki-client.org