Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/BC17C6B4985911EFB44BE2BE762E951A.roa
File:                     BC17C6B4985911EFB44BE2BE762E951A.roa (raw, json)
Hash identifier:          Bo/5IgYc6mUDXUlEMJ0TGF8yZL8JGbJAqfj9nRlvJTE=
Subject key identifier:   17:15:CB:62:4D:07:B3:FD:55:64:81:77:7B:ED:C3:6B:BA:44:6A:B6
Certificate issuer:       /CN=F36FCA07AF/serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
Certificate serial:       018A
Authority key identifier: BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/BC17C6B4985911EFB44BE2BE762E951A.roa
Signing time:             Fri 01 Nov 2024 14:01:05 +0000
ROA not before:           Fri 01 Nov 2024 14:01:01 +0000
ROA not after:            Fri 01 Nov 2030 14:01:01 +0000
asID:                     328055
IP address blocks:        102.210.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FCA07AF/serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
        Validity
            Not Before: Nov  1 14:01:01 2024 GMT
            Not After : Nov  1 14:01:01 2030 GMT
        Subject: CN=6724df21-38bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:44:3e:be:8a:44:8c:78:07:3d:ef:2f:c4:
                    9b:f7:c4:0c:10:d7:00:c0:fb:79:7a:02:20:7e:a5:
                    a4:be:6d:77:0f:94:c0:e9:5d:27:85:ce:86:f4:b1:
                    3a:8b:07:f8:c4:a3:31:37:d1:0c:a6:97:35:5e:1b:
                    fc:8b:3f:81:f8:92:c5:54:84:43:51:be:cd:f8:9c:
                    ee:5d:97:54:63:d1:36:b0:4f:78:18:86:64:ec:07:
                    c4:21:f4:6e:a2:70:2e:ff:80:de:da:b1:d3:39:bf:
                    a6:ae:34:31:e4:86:2d:c2:3b:f1:7f:f4:dc:7b:23:
                    4e:48:68:34:08:78:b3:a2:88:b7:64:d4:b2:5e:f2:
                    38:65:4f:51:53:9d:5b:52:44:75:e1:c3:10:1e:9d:
                    58:ee:1f:66:20:15:59:c7:97:9f:35:d6:b8:f3:d6:
                    fa:eb:1f:f4:e2:99:74:49:ef:96:90:a9:8d:68:16:
                    80:08:70:a4:01:57:b1:31:1e:f9:31:e2:95:da:c3:
                    77:e0:02:fe:b5:22:5e:93:40:58:73:84:d3:d1:82:
                    46:f2:74:38:06:12:de:3c:a1:cb:a4:e0:42:66:11:
                    ea:01:d9:e7:98:25:f8:6d:8d:6c:c4:16:c2:7f:81:
                    fc:bc:a3:d4:58:26:d0:33:45:cd:84:94:56:b3:4f:
                    1c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:15:CB:62:4D:07:B3:FD:55:64:81:77:7B:ED:C3:6B:BA:44:6A:B6
            X509v3 Authority Key Identifier:
                keyid:BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/BC17C6B4985911EFB44BE2BE762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.210.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:ed:75:10:40:7c:20:bf:e1:c3:63:9a:0e:68:3b:19:c6:91:
         c7:0c:5f:72:26:49:cf:71:40:1f:9d:46:6b:ba:d3:96:be:6e:
         a5:78:f3:d3:1e:92:a5:39:b8:9f:0d:55:3e:1e:40:e7:3a:05:
         02:04:67:6f:2c:85:ec:cb:a5:99:cc:31:e4:df:e8:9f:13:71:
         ed:32:c7:f5:10:11:10:0d:01:c1:01:83:00:f7:d5:2e:61:85:
         ce:32:51:e9:64:94:5d:34:b0:fc:a4:28:42:cb:ce:35:4d:c1:
         de:48:1c:84:9d:7e:38:02:df:ce:ea:ac:74:fe:b7:22:10:c3:
         0a:1a:6b:4b:90:f7:90:f1:32:89:5f:15:8f:87:65:19:26:0f:
         ab:77:2f:a7:29:0e:32:c5:53:62:7b:d5:7d:9b:3a:94:8e:5c:
         79:21:04:7a:0d:63:29:e7:95:97:3e:81:30:f7:3d:e1:fd:f8:
         44:ed:d9:cf:32:76:52:75:cd:e6:ed:8b:35:97:38:3c:b6:80:
         c4:5d:99:8d:3b:61:e6:f9:ca:a8:12:79:c4:6a:a2:ea:01:6c:
         9e:1f:5c:70:b5:49:bc:f3:ca:12:93:0f:75:2f:00:50:b9:52:
         2f:c9:41:19:36:02:43:c0:79:86:11:24:a2:d1:59:d9:b8:62:
         4e:06:89:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:34 2024 by rpki-client on console-ams.rpki-client.org