Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/F903F252A40011EF8200A35C762E951A.roa
File:                     F903F252A40011EF8200A35C762E951A.roa (raw, json)
Hash identifier:          tBB1cOVLK36+SCNz3F2FnndL4LmMxtR0GIy/eGhb/nQ=
Subject key identifier:   69:97:20:D3:3F:3B:FD:13:E9:4B:BC:6C:0F:7B:0A:66:BC:A2:56:69
Certificate issuer:       /CN=F36EF186AF/serialNumber=F377D4D428F9465B15449C6AFD4532C422446964
Certificate serial:       01CB
Authority key identifier: F3:77:D4:D4:28:F9:46:5B:15:44:9C:6A:FD:45:32:C4:22:44:69:64
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/F903F252A40011EF8200A35C762E951A.roa
Signing time:             Sat 16 Nov 2024 09:55:56 +0000
ROA not before:           Sat 16 Nov 2024 09:55:52 +0000
ROA not after:            Wed 30 Nov 2044 09:55:52 +0000
asID:                     328611
IP address blocks:        102.207.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF186AF/serialNumber=F377D4D428F9465B15449C6AFD4532C422446964
        Validity
            Not Before: Nov 16 09:55:52 2024 GMT
            Not After : Nov 30 09:55:52 2044 GMT
        Subject: CN=67386c2c-9a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:fc:d3:94:fc:b4:6f:cf:8a:2c:46:7b:94:
                    46:69:a5:b0:d2:9d:c3:35:c8:86:41:86:08:82:1a:
                    1e:1f:a5:ed:46:e0:80:34:b7:58:28:81:b6:ad:1a:
                    d8:fe:88:2e:83:26:7a:b4:f0:ed:6f:96:5b:50:bb:
                    92:ba:e6:cd:fc:43:95:a3:5a:0d:72:b2:1c:ef:04:
                    b0:f8:12:df:66:6f:60:32:a9:03:72:12:cf:a9:27:
                    cb:fb:26:da:a7:e6:0e:50:cb:b1:bc:1c:85:07:af:
                    26:5c:3a:bc:ef:3b:a5:78:05:62:3e:8f:0c:d9:37:
                    17:9f:2f:80:9c:31:a1:e5:2b:6c:1a:d3:83:13:06:
                    c6:f4:5c:99:3e:42:f3:11:04:d5:a6:04:f2:d4:8b:
                    4c:a5:1e:9d:22:8a:5b:f6:da:bc:a3:98:d5:19:9b:
                    a5:5b:b5:fc:f0:34:a9:a3:5e:ed:ba:86:d9:40:5a:
                    75:15:7a:94:02:42:10:df:34:02:e5:1f:6d:d5:da:
                    4f:f1:f4:86:2d:5c:91:58:81:72:40:0d:6b:a8:81:
                    12:9f:15:e8:5e:bb:a1:80:e4:45:ef:12:e8:24:83:
                    87:60:79:a4:33:b3:ed:57:be:89:42:a7:93:72:23:
                    65:7c:5c:ae:73:e9:01:0d:8e:21:f8:a4:f0:15:ce:
                    ec:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:97:20:D3:3F:3B:FD:13:E9:4B:BC:6C:0F:7B:0A:66:BC:A2:56:69
            X509v3 Authority Key Identifier:
                keyid:F3:77:D4:D4:28:F9:46:5B:15:44:9C:6A:FD:45:32:C4:22:44:69:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/F903F252A40011EF8200A35C762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.207.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:5c:dc:3a:fe:b9:f9:3a:a7:66:d9:68:e3:cf:06:bb:ad:89:
         9f:78:04:fb:0a:8f:30:b3:96:4e:67:1f:a5:76:7d:74:4f:e8:
         cd:5d:50:2d:2d:e9:ba:67:6c:d5:10:c8:ab:9a:25:2a:85:08:
         8c:75:08:9b:d0:61:d4:b0:44:cc:fb:b6:03:d5:26:34:e7:c1:
         5c:87:d0:62:f3:a6:8c:00:ab:06:b0:00:56:b6:e4:70:1b:ab:
         6c:02:36:28:a9:81:e3:73:a2:5d:55:4b:1b:f1:35:5a:a5:f8:
         01:66:b3:88:9f:1b:05:ec:91:80:2b:c8:ed:f7:f3:f6:16:0a:
         1c:73:8f:aa:bf:40:bb:79:8e:cd:a8:ba:e8:e8:0d:36:5f:c1:
         cb:a6:8a:95:3a:a7:d2:43:72:23:f1:3b:5d:6a:12:04:92:d0:
         fb:64:af:d8:9d:b2:b2:28:0f:c3:b9:38:3f:42:c3:59:16:0a:
         1b:78:0f:dd:6a:f0:97:9f:46:89:b0:44:e3:37:14:e8:db:7a:
         cc:25:fb:63:20:26:ec:a1:03:10:c7:a8:e1:8b:2b:b0:96:f9:
         ac:f8:01:46:db:9f:e1:22:04:4f:a5:38:33:69:d1:85:42:b8:
         e3:97:7f:62:57:6a:d6:60:19:7b:f2:4d:96:8b:d1:e1:01:1f:
         b5:18:84:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:00 2024 by rpki-client on console-fra.rpki-client.org