Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/30F10DE8E58711EC8063C589F1222468.roa
File:                     30F10DE8E58711EC8063C589F1222468.roa (raw, json)
Hash identifier:          +rQwU7TQy17yNmDHtTVmWx8w2ycBOC8pNIbjkpo+1q0=
Subject key identifier:   E7:47:0D:E4:A9:D8:48:B2:8D:80:F4:10:37:50:73:F5:4B:57:A9:BC
Certificate issuer:       /CN=F36F0133AF/serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4
Certificate serial:       02
Authority key identifier: 66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/30F10DE8E58711EC8063C589F1222468.roa
Signing time:             Mon 06 Jun 2022 10:55:35 +0000
ROA not before:           Mon 06 Jun 2022 10:55:30 +0000
ROA not after:            Thu 20 Jun 2030 10:55:30 +0000
asID:                     396982
IP address blocks:        102.216.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Apr 2024 00:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0133AF/serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4
        Validity
            Not Before: Jun  6 10:55:30 2022 GMT
            Not After : Jun 20 10:55:30 2030 GMT
        Subject: CN=629ddd26-de8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:fd:18:6a:88:b1:28:68:95:6f:db:0a:2c:
                    37:d9:4f:80:b8:64:4b:99:c0:f6:dc:91:1c:be:5b:
                    e0:1c:45:e0:c5:0e:cd:82:c2:32:a3:4a:31:60:82:
                    1c:4d:e1:cb:76:f5:a0:ad:21:dd:4b:60:0c:5b:d2:
                    b6:0d:cc:46:c1:7b:e4:0b:f3:e2:51:89:f3:17:29:
                    a0:54:87:8d:a5:b3:61:ce:54:24:17:de:b5:30:60:
                    93:ad:63:e2:73:b1:70:86:a4:ec:df:b9:48:5f:aa:
                    9e:c0:d8:3e:df:df:c9:32:10:35:34:5e:27:64:42:
                    21:c8:a7:12:b5:8e:60:a7:eb:22:72:60:bd:28:b6:
                    bd:61:a6:95:3d:79:25:4b:32:ca:ad:8e:1a:1d:db:
                    54:dc:e6:62:f5:73:7c:e1:0b:f5:e3:f4:d5:63:82:
                    97:3a:80:3d:22:16:ed:56:80:5e:e3:b7:b0:a3:3e:
                    50:9a:29:63:87:15:7e:69:a2:fa:62:d4:4d:7a:2d:
                    a5:85:53:e8:65:e6:0a:59:f1:49:cb:2c:aa:f7:1c:
                    e3:e2:9e:9e:03:ef:30:4a:45:9b:1a:c4:8a:e1:a6:
                    5a:40:4c:9d:14:75:94:54:3d:6e:53:15:07:92:9d:
                    55:6c:01:10:f7:35:39:be:23:35:32:70:91:5c:d8:
                    42:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:47:0D:E4:A9:D8:48:B2:8D:80:F4:10:37:50:73:F5:4B:57:A9:BC
            X509v3 Authority Key Identifier:
                keyid:66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/30F10DE8E58711EC8063C589F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:1c:07:ec:73:3e:38:4a:3c:7e:7e:c1:c6:e8:79:94:5d:18:
         52:ea:ba:ac:e2:0e:47:71:2d:cb:2b:bf:c9:92:25:54:f1:21:
         78:e5:ad:68:d8:f7:51:73:84:fb:b5:c6:13:49:4f:21:ca:f2:
         a4:13:98:8a:19:9f:ab:c8:91:ee:db:5f:9d:c3:e2:83:e1:86:
         bb:3d:32:48:51:60:50:c9:d1:5e:10:46:27:3d:c5:64:54:52:
         f4:80:59:de:d6:49:eb:6c:32:c1:32:c7:75:f9:80:1d:49:b0:
         f1:6e:8b:b6:81:96:2a:6c:60:f6:26:30:d7:8e:58:ee:b7:be:
         9b:32:a2:8c:7a:12:56:18:2b:cb:9c:7e:ba:1c:f3:8b:73:ce:
         3a:03:3e:b0:85:f4:4d:08:c4:6d:15:f7:d7:6a:d4:b1:ff:c1:
         1e:56:db:0e:6c:b8:67:89:42:d8:cf:d8:d3:cc:8f:9d:5b:25:
         77:bc:9d:c1:21:ea:84:5e:88:8c:76:de:15:c2:4f:fa:2d:7f:
         38:4e:93:be:77:87:fe:69:e9:05:ae:0b:19:1b:ae:bc:48:c8:
         c2:ad:fa:a1:3e:c4:47:1e:89:1f:ef:8c:ba:45:8a:80:6d:e2:
         f4:e0:60:6b:5e:39:06:8d:e1:8a:fc:8f:12:fe:88:84:c0:07:
         7c:50:fb:e2
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZG
MDEzM0FGMTEwLwYDVQQFEyg2NjMwQzc4NDA4NDZGMkY2OTA5NzU0RjEzNDE0NjZD
REFGRUEyRkQ0MB4XDTIyMDYwNjEwNTUzMFoXDTMwMDYyMDEwNTUzMFowGDEWMBQG
A1UEAwwNNjI5ZGRkMjYtZGU4ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALXg/RhqiLEoaJVv2wosN9lPgLhkS5nA9tyRHL5b4BxF4MUOzYLCMqNKMWCC
HE3hy3b1oK0h3UtgDFvStg3MRsF75Avz4lGJ8xcpoFSHjaWzYc5UJBfetTBgk61j
4nOxcIak7N+5SF+qnsDYPt/fyTIQNTReJ2RCIcinErWOYKfrInJgvSi2vWGmlT15
JUsyyq2OGh3bVNzmYvVzfOEL9eP01WOClzqAPSIW7VaAXuO3sKM+UJopY4cVfmmi
+mLUTXotpYVT6GXmClnxScssqvcc4+KengPvMEpFmxrEiuGmWkBMnRR1lFQ9blMV
B5KdVWwBEPc1Ob4jNTJwkVzYQj8CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTnRw3k
qdhIso2A9BA3UHP1S1epvDAfBgNVHSMEGDAWgBRmMMeECEby9pCXVPE0FGbNr+ov
1DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjAxMzMvNTA0MUE3MDhFNTg2MTFFQ0FGQzIyQTg3RjEyMjI0NjgvWmpESGhB
aEc4dmFRbDFUeE5CUm16YV9xTDlRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWmpESGhBaEc4dmFRbDFUeE5CUm16YV9xTDlRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjAxMzMvNTA0MUE3MDhFNTg2MTFFQ0FGQzIyQTg3RjEy
MjI0NjgvMzBGMTBERThFNTg3MTFFQzgwNjNDNTg5RjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbYdjANBgkqhkiG9w0BAQsF
AAOCAQEANBwH7HM+OEo8fn7Bxuh5lF0YUuq6rOIOR3Etyyu/yZIlVPEheOWtaNj3
UXOE+7XGE0lPIcrypBOYihmfq8iR7ttfncPig+GGuz0ySFFgUMnRXhBGJz3FZFRS
9IBZ3tZJ62wywTLHdfmAHUmw8W6LtoGWKmxg9iYw145Y7re+mzKijHoSVhgry5x+
uhzzi3POOgM+sIX0TQjEbRX312rUsf/BHlbbDmy4Z4lC2M/Y08yPnVsld7ydwSHq
hF6IjHbeFcJP+i1/OE6TvneH/mnpBa4LGRuuvEjIwq36oT7ERx6JH++MukWKgG3i
9OBga145Bo3hivyPEv6IhMAHfFD74g==
-----END CERTIFICATE-----
Generated at Wed Apr 24 03:22:05 2024 by rpki-client on console-ams.rpki-client.org