Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/D42772FA21D811F09D2C5AE2DAE4EC9C.roa
File:                     D42772FA21D811F09D2C5AE2DAE4EC9C.roa (raw, json)
Hash identifier:          o0C1F/Uy4z8lBAwClg2prSdgPojbZ7x3UGr5KruBLt8=
Subject key identifier:   F5:F4:DD:ED:66:9E:C4:82:56:52:13:B8:F2:83:27:3E:A7:16:96:A0
Certificate issuer:       /CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Certificate serial:       03EB
Authority key identifier: C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/D42772FA21D811F09D2C5AE2DAE4EC9C.roa
Signing time:             Fri 25 Apr 2025 13:26:01 +0000
ROA not before:           Fri 25 Apr 2025 13:25:56 +0000
ROA not after:            Mon 31 Dec 2035 13:25:56 +0000
asID:                     328977
IP address blocks:        102.207.164.0/22 maxlen: 24
                          2c0f:6300::/32 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003 (0x3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FE19EAF, serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
        Validity
            Not Before: Apr 25 13:25:56 2025 GMT
            Not After : Dec 31 13:25:56 2035 GMT
        Subject: CN=680b8d69-6b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:84:d5:d3:27:eb:bf:55:34:0c:be:a3:e3:54:
                    ed:f1:0b:35:d3:33:22:80:4e:7d:00:c1:d4:2c:9a:
                    2e:a2:4f:92:12:09:11:84:e9:e2:96:13:ac:05:dd:
                    87:4c:76:31:31:53:9b:81:d9:5c:a9:f2:0d:08:63:
                    b0:31:4d:73:a6:b0:83:06:59:7c:72:1d:cb:21:ac:
                    f4:76:33:59:4e:0e:2f:8b:8d:3b:b4:44:8a:a5:8a:
                    c2:da:2e:71:24:71:41:68:1f:1f:b6:c5:d9:af:bf:
                    a0:30:b6:ad:20:12:0b:7c:f9:e3:cb:4a:29:ca:99:
                    b5:e8:37:23:48:8d:1c:2d:48:54:b8:7e:cb:36:bd:
                    25:39:ce:13:13:89:3b:2f:fc:34:bc:5f:6f:93:db:
                    0d:41:6e:a4:8c:41:6d:d5:09:7f:f1:4d:9c:01:54:
                    6f:76:6a:00:bf:66:e0:24:cd:cc:ee:24:eb:8d:85:
                    8c:a9:e4:89:84:ca:a6:bf:46:0d:d3:1f:6a:46:a6:
                    c4:d4:c5:35:f0:70:56:c5:5f:d9:c0:97:fe:e9:d8:
                    d1:e9:18:48:da:97:5a:12:21:26:02:bd:93:ec:7f:
                    ff:d3:f9:7f:69:87:55:03:04:29:ab:df:9c:dc:e5:
                    53:f5:ea:0e:6e:39:5e:4d:92:bf:e5:35:56:f1:e4:
                    bf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F4:DD:ED:66:9E:C4:82:56:52:13:B8:F2:83:27:3E:A7:16:96:A0
            X509v3 Authority Key Identifier:
                keyid:C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/D42772FA21D811F09D2C5AE2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.207.164.0/22
                IPv6:
                  2c0f:6300::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:c1:95:ec:8c:92:30:ed:fd:5f:f4:91:67:f8:39:89:bc:c7:
         77:62:0e:72:9b:3a:b6:83:48:6f:73:93:44:c5:95:f3:42:ed:
         0c:d7:6b:4a:0c:d4:5e:55:9a:3d:c9:bb:ee:a7:a6:85:d2:a2:
         b0:16:eb:c0:76:0f:3f:be:ca:68:aa:82:5b:81:57:0f:eb:da:
         94:08:ba:8b:df:c2:5a:ca:7e:63:b5:12:00:a1:83:e4:d6:24:
         ed:d2:86:8e:9a:d9:23:62:97:a8:2b:df:ec:c0:02:bf:25:a4:
         28:df:f8:a1:96:e6:b1:65:a5:d5:de:64:5a:97:fb:a5:63:a1:
         0b:06:5f:3d:e8:07:d4:ca:82:ca:8e:49:11:78:19:89:b7:09:
         78:d1:ce:fe:3d:2a:69:92:45:25:a6:51:63:6f:99:c6:cf:96:
         10:c5:e2:3c:29:2d:56:02:c0:ef:66:5e:db:d1:a2:08:2d:9a:
         92:69:a2:89:04:4d:8d:48:7d:51:f7:e8:a1:6e:56:e2:51:df:
         91:bc:4f:32:63:dd:14:15:42:67:80:07:0d:c3:af:c8:d8:4c:
         55:a7:6f:6b:ae:2c:2f:19:47:cc:5a:44:07:b3:1b:c3:a2:f3:
         aa:f8:04:f6:fb:7a:e1:ee:a2:e1:72:df:dd:5d:c2:bb:20:7c:
         7b:1e:4f:22
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICA+swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkUxOUVBRjExMC8GA1UEBRMoQzc4Q0RDM0I1RDRCMTM2NzVDQjQ4QUQzQjYzQkUw
MUVDNUE4MDdGODAeFw0yNTA0MjUxMzI1NTZaFw0zNTEyMzExMzI1NTZaMBgxFjAU
BgNVBAMTDTY4MGI4ZDY5LTZiNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJhNXTJ+u/VTQMvqPjVO3xCzXTMyKATn0AwdQsmi6iT5ISCRGE6eKWE6wF
3YdMdjExU5uB2Vyp8g0IY7AxTXOmsIMGWXxyHcshrPR2M1lODi+LjTu0RIqlisLa
LnEkcUFoHx+2xdmvv6Awtq0gEgt8+ePLSinKmbXoNyNIjRwtSFS4fss2vSU5zhMT
iTsv/DS8X2+T2w1BbqSMQW3VCX/xTZwBVG92agC/ZuAkzczuJOuNhYyp5ImEyqa/
Rg3TH2pGpsTUxTXwcFbFX9nAl/7p2NHpGEjal1oSISYCvZPsf//T+X9ph1UDBCmr
35zc5VP16g5uOV5Nkr/lNVbx5L95AgMBAAGjggK0MIICsDAdBgNVHQ4EFgQU9fTd
7WaexIJWUhO48oMnPqcWlqAwHwYDVR0jBBgwFoAUx4zcO11LE2dctIrTtjvgHsWo
B/gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZFMTlFL0FCN0U3OEJFNDhERjExRURBNzYxQjI5Q0YxMjIyNDY4L3g0emNP
MTFMRTJkY3RJclR0anZnSHNXb0JfZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3g0emNPMTFMRTJkY3RJclR0anZnSHNXb0JfZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkZFMTlFL0FCN0U3OEJFNDhERjExRURBNzYxQjI5Q0Yx
MjIyNDY4L0Q0Mjc3MkZBMjFEODExRjA5RDJDNUFFMkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmz6QwDQQCAAIwBwMFACwP
YwAwDQYJKoZIhvcNAQELBQADggEBADjBleyMkjDt/V/0kWf4OYm8x3diDnKbOraD
SG9zk0TFlfNC7QzXa0oM1F5Vmj3Ju+6npoXSorAW68B2Dz++ymiqgluBVw/r2pQI
uovfwlrKfmO1EgChg+TWJO3Sho6a2SNil6gr3+zAAr8lpCjf+KGW5rFlpdXeZFqX
+6VjoQsGXz3oB9TKgsqOSRF4GYm3CXjRzv49KmmSRSWmUWNvmcbPlhDF4jwpLVYC
wO9mXtvRoggtmpJpookETY1IfVH36KFuVuJR35G8TzJj3RQVQmeABw3Dr8jYTFWn
b2uuLC8ZR8xaRAezG8Oi86r4BPb7euHuouFy391dwrsgfHseTyI=
-----END CERTIFICATE-----