Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/14FC84CEDA8611EDAD5B23E52F6D8C1D.roa
File:                     14FC84CEDA8611EDAD5B23E52F6D8C1D.roa (raw, json)
Hash identifier:          S6+GPt3mMdOMUzMxpxdXeFeENM7hq23EiAhTHkvC6fQ=
Subject key identifier:   3E:E5:8C:08:BA:23:9E:49:F8:ED:43:0F:2C:7E:F1:E7:72:1A:37:67
Certificate issuer:       /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial:       05D2
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/14FC84CEDA8611EDAD5B23E52F6D8C1D.roa
Signing time:             Fri 14 Apr 2023 05:34:53 +0000
ROA not before:           Fri 14 Apr 2023 05:34:49 +0000
ROA not after:            Thu 14 Apr 2033 05:34:49 +0000
asID:                     327733
IP address blocks:        102.212.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 19 Jun 2024 00:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
        Validity
            Not Before: Apr 14 05:34:49 2023 GMT
            Not After : Apr 14 05:34:49 2033 GMT
        Subject: CN=6438e5fd-2d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:e7:75:11:07:26:2d:3a:c6:77:81:31:c3:f1:
                    df:94:5e:da:dd:7f:05:54:b1:16:9e:b7:7f:7e:08:
                    b9:6f:b6:d5:66:20:42:1b:05:93:9c:2f:00:88:62:
                    7f:00:83:70:89:39:42:ea:c0:94:72:b7:5e:1e:d1:
                    a1:ab:bc:ac:77:29:ec:ee:8a:b0:21:d8:25:50:06:
                    f9:21:98:1c:ee:79:e7:1c:34:ce:b7:9b:3f:03:d6:
                    80:54:87:c1:f6:62:b6:8d:07:b8:a7:84:87:49:e2:
                    35:6f:17:bf:4d:bf:b9:43:6d:4e:22:0b:48:82:73:
                    ea:d6:17:eb:99:08:d1:24:2f:72:3d:d1:31:7c:3d:
                    89:fc:3d:0b:d2:d4:d0:ab:65:82:de:01:25:79:fe:
                    05:75:33:97:2c:a1:06:3d:e3:1d:d3:a6:62:04:b8:
                    b5:69:24:44:ac:bd:e7:b6:d0:71:07:4f:9d:10:bd:
                    11:4f:8f:97:f0:e1:a2:5b:56:44:f9:58:bf:70:68:
                    36:35:79:32:04:40:d5:b9:f2:4a:6b:2d:31:03:c9:
                    8a:59:e8:f6:38:d3:76:e9:73:6c:61:0c:f4:55:7b:
                    5a:53:25:f3:f7:bf:df:58:61:86:7b:f3:fc:99:4e:
                    18:cd:f9:cf:61:bb:44:1f:39:6d:b7:8e:45:c4:0e:
                    50:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E5:8C:08:BA:23:9E:49:F8:ED:43:0F:2C:7E:F1:E7:72:1A:37:67
            X509v3 Authority Key Identifier:
                keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/14FC84CEDA8611EDAD5B23E52F6D8C1D.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:9d:96:5e:3e:b6:60:3a:18:45:6e:5d:ed:f6:1e:b0:0f:4e:
         79:ea:ff:a3:c5:b9:c5:32:c8:07:30:c6:e3:17:5a:2d:7b:ca:
         73:e9:7b:d4:d4:cd:87:ca:04:fa:c6:d6:19:91:0f:6f:f5:0f:
         b1:70:62:f5:64:9f:29:9a:a5:28:61:45:77:d1:ed:70:d4:46:
         67:59:fc:c5:64:91:b8:03:0a:a5:36:a3:bf:e7:b2:9b:95:20:
         90:c7:f5:13:5e:bc:74:f9:46:1b:dc:72:37:3a:ef:55:60:3a:
         a8:71:ae:ec:08:c0:98:0f:d4:da:d8:8f:1d:e6:f9:60:bb:c9:
         db:18:ca:f0:28:59:db:5a:9c:6e:d3:c9:35:de:a8:95:08:98:
         aa:64:67:7d:ec:b0:09:52:01:b3:93:e1:0a:2d:1d:76:71:bd:
         80:9a:7a:9a:60:44:94:dd:29:42:6c:03:ed:b2:62:53:da:c8:
         24:0d:fe:73:0c:4b:4e:9c:be:3a:79:71:cb:bd:d1:10:a1:a4:
         c0:46:78:ca:aa:85:42:49:02:e2:02:b1:5e:fe:b6:fb:17:54:
         6c:6a:03:ca:43:f6:7e:f5:11:12:09:48:2a:b2:33:eb:96:1e:
         2a:01:56:fb:da:04:79:e8:e9:eb:95:c1:0f:93:36:d8:d7:a2:
         eb:d2:52:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 01:45:15 2024 by rpki-client on console-fra.rpki-client.org