Route Origin Authorization
Location:                 rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/A9F22C5C223B11EA90A89819F8AEA228.roa (download)

Subject key identifier:   1F:B8:1D:AC:A4:C1:23:ED:DE:F2:56:7D:27:62:CB:76:DB:AC:99:8C 
Authority key identifier: 7B:E8:59:B4:28:6B:E1:EA:14:B8:8C:7A:30:B5:CE:4F:D8:59:80:EC
asID:                     AS328568
Prefixes:
    1: 102.23.88.0/24 (max: 24)

--
$ test-roa -p rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/A9F22C5C223B11EA90A89819F8AEA228.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B7955AF/serialNumber=7BE859B4286BE1EA14B88C7A30B5CE4FD85980EC
        Validity
            Not Before: Dec 19 08:43:39 2019 GMT
            Not After : Dec  1 08:43:39 2029 GMT
        Subject: CN=5dfb3840-d74c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:75:fe:f0:91:18:4f:6c:bb:01:ec:22:c9:
                    ae:3a:86:a2:db:42:ba:ba:18:a9:70:69:6a:44:ed:
                    97:79:61:7b:1a:87:6e:08:90:19:eb:dc:bb:c8:60:
                    88:39:ee:01:04:25:48:9c:cd:ed:8f:df:c5:b8:c4:
                    27:39:b7:92:30:43:f1:dd:bf:7a:75:c1:e0:d7:95:
                    e7:88:a1:80:4c:22:a0:10:81:68:87:6f:c2:80:62:
                    2c:b7:a4:42:eb:fb:7a:69:48:cb:20:1f:fe:3c:75:
                    1d:fb:26:af:86:45:80:05:ea:07:ec:64:91:b1:bd:
                    ff:22:52:9c:73:96:38:0e:cd:6d:e8:cb:6b:ea:cc:
                    ac:48:0c:8a:71:29:c7:10:8a:ad:28:b0:63:16:69:
                    91:e6:61:0b:16:8a:cc:b3:09:0a:ee:be:7c:0e:44:
                    ec:c3:8a:9c:ec:8c:5a:67:46:af:7c:23:e9:58:a9:
                    20:5d:60:0a:15:3d:35:7c:7f:43:7f:96:29:7d:59:
                    2f:c5:68:9f:2f:99:fa:9e:80:38:d8:28:51:6b:ef:
                    52:cc:25:86:95:08:42:95:64:8c:38:f7:87:0c:58:
                    71:19:ff:3f:40:79:22:82:d2:33:9b:60:95:db:c8:
                    28:9a:8f:a3:d7:3a:ec:76:69:63:6d:6e:a4:65:a3:
                    bd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1F:B8:1D:AC:A4:C1:23:ED:DE:F2:56:7D:27:62:CB:76:DB:AC:99:8C
            X509v3 Authority Key Identifier: 
                keyid:7B:E8:59:B4:28:6B:E1:EA:14:B8:8C:7A:30:B5:CE:4F:D8:59:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/A9F22C5C223B11EA90A89819F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.23.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:e2:f8:18:f7:20:38:c5:a7:18:49:61:89:dd:c3:3d:48:8e:
         7a:86:a8:cd:be:5e:86:d4:f9:a6:ea:07:69:99:83:b4:2d:a9:
         26:7d:2a:39:74:9b:ca:23:4c:d3:59:a2:7b:bf:a6:34:01:6b:
         d6:eb:42:e1:69:9c:d7:48:bf:c7:46:3c:5b:14:a6:1b:61:6b:
         4b:7a:11:ae:ab:ef:17:19:ae:61:ce:c4:a4:32:dc:ad:03:5e:
         73:c0:0d:b2:78:12:26:0e:63:f3:7e:74:fe:6a:c7:7c:de:67:
         a2:67:ef:b4:5b:f0:d6:92:c4:28:b4:93:14:18:a1:0a:a6:cc:
         8e:1a:96:2d:90:5d:b5:bd:21:c1:4a:02:de:e4:05:58:00:e6:
         f5:99:49:e0:c1:63:0c:cc:37:6a:49:d1:60:1e:a0:c2:5f:99:
         fb:79:10:b6:17:f2:f5:82:a9:af:32:fd:d2:14:70:3b:01:38:
         ca:1c:d2:98:4c:23:09:ca:2e:3e:25:92:57:5b:67:74:1c:58:
         d9:bc:11:50:f0:6c:9d:98:ca:a7:bc:49:fd:80:a3:4e:9b:c2:
         24:ef:48:1b:ee:6f:94:a0:8e:05:5d:83:84:41:ea:66:e0:67:
         8f:39:72:d9:80:b5:11:d0:25:51:a2:6c:73:00:6b:aa:0c:98:
         8d:63:08:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 13:21:30 2021 by LibreSSL & rpki-client.