Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/AF1ED052BED111EBAE20BD38F8AEA228.roa
File:                     AF1ED052BED111EBAE20BD38F8AEA228.roa (raw, json)
Hash identifier:          4XRclk/yI8EJN8d2ChhuI+DM9Txu0zUGc/TXnREwp8M=
Subject key identifier:   79:AB:4E:4B:3D:76:CE:55:BF:58:57:F0:06:B4:05:6D:69:CB:B6:AD
Certificate issuer:       /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial:       02FD
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/AF1ED052BED111EBAE20BD38F8AEA228.roa
Signing time:             Thu 27 May 2021 09:55:36 +0000
ROA not before:           Thu 27 May 2021 09:55:32 +0000
ROA not after:            Tue 27 May 2031 09:55:32 +0000
asID:                     327733
IP address blocks:        102.23.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 03 Jun 2024 00:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765 (0x2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
        Validity
            Not Before: May 27 09:55:32 2021 GMT
            Not After : May 27 09:55:32 2031 GMT
        Subject: CN=60af6c98-6f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4b:6e:12:90:78:88:81:d2:68:54:44:33:82:
                    c7:b3:3f:95:56:32:fc:24:cc:58:c9:94:2e:40:be:
                    41:5f:8f:3b:19:f8:c4:79:54:a9:d6:53:66:b5:6c:
                    ed:d4:c0:bf:c8:18:e2:48:08:59:fe:95:d8:aa:a8:
                    83:18:42:07:cf:6a:a5:03:f2:b5:80:cc:f7:d0:08:
                    ee:96:47:95:70:41:47:f2:83:43:6d:6b:30:01:41:
                    3a:4d:6a:31:75:67:d3:6f:fb:a2:f8:1d:a3:c9:11:
                    28:1a:85:87:9f:69:a2:34:6a:81:3d:cb:8a:24:ce:
                    5a:44:2e:3c:02:42:c2:c3:35:dc:99:86:a9:8c:de:
                    c6:c7:6f:7d:55:c7:a0:01:8d:a7:4e:fd:c6:1e:56:
                    2d:e9:ae:98:14:15:e7:fe:19:f4:8e:ff:27:56:be:
                    dd:e1:ea:29:25:69:c3:78:4a:22:70:8c:8f:51:a2:
                    db:af:ff:a9:88:84:12:99:9c:ea:f3:b6:51:5d:9e:
                    09:bc:4f:e1:25:bb:68:3a:02:4a:54:6e:df:f4:bf:
                    e8:25:92:f3:59:8c:66:e1:0a:a6:b5:d4:cf:0e:79:
                    bf:12:86:ba:04:6a:a7:48:46:2a:4c:99:3b:cd:8f:
                    93:19:53:27:c8:ba:fe:5a:82:d6:c5:00:b8:32:6b:
                    00:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AB:4E:4B:3D:76:CE:55:BF:58:57:F0:06:B4:05:6D:69:CB:B6:AD
            X509v3 Authority Key Identifier:
                keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/AF1ED052BED111EBAE20BD38F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.23.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:e1:1b:7f:06:c3:26:aa:a1:44:7a:8a:ed:b9:87:2b:58:5c:
         6a:19:07:2a:19:12:0e:a8:8f:4e:e7:17:01:9c:fc:7b:3c:6d:
         91:87:8e:ae:e3:ed:a4:de:9d:66:a7:a2:77:6f:c3:79:2a:e3:
         99:a5:ff:77:ec:dc:21:f8:4d:5b:c2:62:0e:0b:7d:d4:33:5f:
         6b:8f:ca:30:ad:2b:08:b4:c5:d8:73:69:94:0a:5c:f9:68:1d:
         73:6e:58:59:a5:ce:9a:ff:3e:e9:87:f5:9a:af:64:94:d9:08:
         59:2a:ac:65:3a:3b:3d:64:6d:b4:25:80:fd:9e:dd:90:1f:f5:
         76:e9:c7:12:42:6a:71:40:d5:bf:1b:6d:9d:ad:28:a4:12:5e:
         24:2e:22:bc:4e:53:2a:2c:42:40:3e:b3:ec:09:6d:e8:b0:c6:
         0e:ef:03:6b:2b:d2:32:e6:33:eb:9e:2d:44:50:5e:ce:cf:aa:
         61:69:8d:67:7a:aa:51:7d:c5:76:73:2e:5d:70:3f:f4:88:64:
         6b:91:18:a3:8d:b3:b1:cd:b6:63:ea:91:ef:4a:c9:4f:3c:cf:
         a3:98:20:f2:3e:50:18:fa:b5:df:1a:b6:f7:ed:3d:65:69:c9:
         2f:1b:a3:fe:5c:17:65:a8:b3:05:7c:12:14:6f:d1:79:1e:4a:
         da:9f:35:13
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAv0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTM3M0RBRjExMC8GA1UEBRMoRkQ4RTA0NTg4NEIxNjY5RUJENDMwQUU1NjY3MjFE
OTc0MDRBNkNFODAeFw0yMTA1MjcwOTU1MzJaFw0zMTA1MjcwOTU1MzJaMBgxFjAU
BgNVBAMTDTYwYWY2Yzk4LTZmM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFS24SkHiIgdJoVEQzgsezP5VWMvwkzFjJlC5AvkFfjzsZ+MR5VKnWU2a1
bO3UwL/IGOJICFn+ldiqqIMYQgfPaqUD8rWAzPfQCO6WR5VwQUfyg0NtazABQTpN
ajF1Z9Nv+6L4HaPJESgahYefaaI0aoE9y4okzlpELjwCQsLDNdyZhqmM3sbHb31V
x6ABjadO/cYeVi3prpgUFef+GfSO/ydWvt3h6iklacN4SiJwjI9Rotuv/6mIhBKZ
nOrztlFdngm8T+Elu2g6AkpUbt/0v+glkvNZjGbhCqa11M8Oeb8ShroEaqdIRipM
mTvNj5MZUyfIuv5agtbFALgyawA9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUeatO
Sz12zlW/WFfwBrQFbWnLtq0wHwYDVR0jBBgwFoAU/Y4EWISxZp69QwrlZnIdl0BK
bOgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUzNzNELzREMjJBQ0Q2OEI3MzExRTlBNDlBNDM2OEY4QUVBMjI4L19ZNEVX
SVN4WnA2OVF3cmxabklkbDBCS2JPZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL19ZNEVXSVN4WnA2OVF3cmxabklkbDBCS2JPZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkUzNzNELzREMjJBQ0Q2OEI3MzExRTlBNDlBNDM2OEY4
QUVBMjI4L0FGMUVEMDUyQkVEMTExRUJBRTIwQkQzOEY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmF10wDQYJKoZIhvcNAQEL
BQADggEBAE/hG38GwyaqoUR6iu25hytYXGoZByoZEg6oj07nFwGc/Hs8bZGHjq7j
7aTenWanondvw3kq45ml/3fs3CH4TVvCYg4LfdQzX2uPyjCtKwi0xdhzaZQKXPlo
HXNuWFmlzpr/PumH9ZqvZJTZCFkqrGU6Oz1kbbQlgP2e3ZAf9XbpxxJCanFA1b8b
bZ2tKKQSXiQuIrxOUyosQkA+s+wJbeiwxg7vA2sr0jLmM+ueLURQXs7PqmFpjWd6
qlF9xXZzLl1wP/SIZGuRGKONs7HNtmPqke9KyU88z6OYIPI+UBj6td8atvftPWVp
yS8bo/5cF2WoswV8EhRv0XkeStqfNRM=
-----END CERTIFICATE-----
Generated at Sat Jun 1 01:41:42 2024 by rpki-client on console-fra.rpki-client.org