Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/715F7C6A20EA11F0B8E627ACDAE4EC9C.roa
File:                     715F7C6A20EA11F0B8E627ACDAE4EC9C.roa (raw, json)
Hash identifier:          xAuCxSESapePheQaNQUQosVQuvFdA5GWHeFuEjIS95k=
Subject key identifier:   34:D5:6E:1D:B0:29:DB:47:E2:1E:57:B4:9B:2F:04:84:1F:2A:CA:E9
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       0339
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/715F7C6A20EA11F0B8E627ACDAE4EC9C.roa
Signing time:             Thu 24 Apr 2025 08:59:35 +0000
ROA not before:           Thu 24 Apr 2025 08:59:30 +0000
ROA not after:            Wed 24 Apr 2030 08:59:30 +0000
asID:                     20326
IP address blocks:        102.211.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 825 (0x339)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: Apr 24 08:59:30 2025 GMT
            Not After : Apr 24 08:59:30 2030 GMT
        Subject: CN=6809fd77-e262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:c7:d3:7a:96:92:10:f8:b7:86:2c:ba:df:
                    17:c0:b4:3c:92:72:a7:73:58:2b:e4:bc:db:5c:19:
                    12:4a:8c:e6:7e:c9:b1:0f:6e:e6:ba:34:eb:92:85:
                    5d:87:44:3a:08:e7:ec:db:e8:71:1d:03:87:52:bc:
                    65:8c:37:73:08:12:0a:77:15:0a:ee:8e:92:ba:a1:
                    1d:3a:6b:1a:2f:8c:f6:b0:ac:47:58:07:a1:8b:6b:
                    b3:f3:b7:2d:77:54:e0:7e:0f:5c:d9:e3:be:80:20:
                    e1:5e:f2:0d:a4:17:1e:78:b5:3f:53:4a:d8:d7:b5:
                    4c:66:d9:05:c0:1b:4c:1f:0f:cb:0f:1a:6a:fe:98:
                    42:ae:23:61:c6:f1:4a:a8:01:1c:a1:07:7d:e0:60:
                    f0:33:db:4b:f0:d0:4b:9a:ed:d2:27:a6:03:8f:3c:
                    0c:f7:82:b4:5c:6b:20:8c:8b:69:5b:d0:28:6c:e1:
                    8e:99:a8:b6:43:00:90:f0:1f:d4:af:e2:26:21:c8:
                    72:e2:7e:97:2c:b6:1b:61:9d:6e:25:09:61:51:9c:
                    1e:ce:9e:35:87:f9:14:79:f9:03:64:8c:e4:11:b0:
                    24:a8:89:92:fc:41:82:9e:c2:b3:6f:2a:b7:38:f3:
                    df:72:38:a3:30:1a:fb:24:e8:bb:3d:f5:76:de:d9:
                    e8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D5:6E:1D:B0:29:DB:47:E2:1E:57:B4:9B:2F:04:84:1F:2A:CA:E9
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/715F7C6A20EA11F0B8E627ACDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.211.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:37:ea:ad:91:a3:c7:08:c7:27:82:13:8a:af:d5:c8:55:01:
         4b:70:b9:af:57:47:9f:7b:58:d6:2f:85:da:65:ff:83:0b:f0:
         57:8d:e2:0c:1b:97:9e:1b:79:b6:f8:ba:cc:d9:55:49:f4:f2:
         c1:4c:6c:ba:4e:3b:3d:e1:d7:89:63:be:fb:8e:c9:7d:f5:26:
         45:df:22:e1:37:b2:6a:df:43:37:6f:42:bc:4c:06:21:db:30:
         14:3a:1a:58:a5:35:65:50:f4:9d:2d:6a:c0:dc:0b:5c:4d:87:
         f7:70:88:26:8a:57:12:8c:1d:24:9d:7d:8f:26:19:22:12:da:
         d5:b4:a1:dd:42:88:29:8e:d1:98:13:ea:7e:58:52:6f:93:aa:
         1d:a1:e8:37:c2:ae:83:34:a6:10:79:48:f9:51:1c:d9:ac:56:
         59:84:a8:e2:b8:a1:3c:bb:58:8b:d7:6b:5c:ce:ce:73:ae:86:
         8c:0c:db:3f:2f:1e:7c:30:77:3b:e8:1a:e7:73:ab:9f:9f:21:
         88:8d:5c:da:39:de:27:ea:b6:53:32:4f:c4:31:31:84:f5:99:
         7a:78:5e:62:d6:96:42:1b:2f:b7:53:64:37:39:76:85:12:e2:
         0f:ed:1f:9e:ba:7b:b6:07:33:38:74:f8:56:34:d8:a7:40:01:
         fb:72:9e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:21:39 2025 by rpki-client on console.sobornost.net