Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1694A0600CE811EFBD342410017001B1.roa
File:                     1694A0600CE811EFBD342410017001B1.roa (raw, json)
Hash identifier:          ymNnex9VLWSocLrBGLwbjIsLFDU8SxDTFWIEamJl9VQ=
Subject key identifier:   44:4B:BE:3C:9B:87:A0:02:C3:A5:F4:2C:CC:3B:6B:4C:63:EE:C9:A4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       B56E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1694A0600CE811EFBD342410017001B1.roa
Signing time:             Wed 08 May 2024 03:07:22 +0000
ROA not before:           Wed 08 May 2024 03:07:19 +0000
ROA not after:            Sun 30 Jun 2024 03:07:19 +0000
asID:                     63139
IP address blocks:        154.94.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 03 Jun 2024 00:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46446 (0xb56e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May  8 03:07:19 2024 GMT
            Not After : Jun 30 03:07:19 2024 GMT
        Subject: CN=663aec6a-1092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:52:ee:32:5a:c6:34:91:0b:50:b3:88:54:b8:
                    96:ea:54:04:a2:5c:20:bd:9c:ee:9d:15:0c:53:e6:
                    f0:88:fb:9a:fa:a2:ca:36:d0:54:03:4a:0e:ee:19:
                    f4:6c:e5:b5:cf:26:aa:ac:f9:b0:43:e9:2e:c6:c6:
                    4d:2e:31:c3:38:d6:86:67:23:f4:ff:6e:b3:3c:45:
                    e3:56:a0:f6:76:a2:a4:87:63:36:67:f3:90:ed:cf:
                    ea:08:65:f3:0f:34:54:7f:60:1c:33:b2:fc:d4:ed:
                    da:69:6e:c6:c9:47:35:e0:df:09:de:c5:60:00:51:
                    05:4d:28:13:15:bb:05:7b:61:19:34:dc:55:19:5b:
                    5f:ec:de:0b:75:c5:b6:52:57:de:49:9e:12:73:a1:
                    44:5b:87:82:fb:13:07:fd:e5:ce:68:c8:ac:69:a2:
                    01:fa:fb:6c:8a:a5:2a:6a:1c:e7:e3:53:b9:05:53:
                    d2:3e:ca:83:0a:06:90:bd:fd:62:c2:04:de:40:88:
                    45:b8:b1:7b:55:eb:b7:39:b8:4d:22:e1:f2:65:4e:
                    ae:65:a3:df:a2:fc:52:f1:c1:0f:45:b1:cb:be:51:
                    d7:28:95:92:28:f3:62:85:5d:a2:8e:e5:d3:5b:06:
                    d5:04:11:48:b2:19:00:aa:43:d3:1a:90:14:2d:af:
                    7e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4B:BE:3C:9B:87:A0:02:C3:A5:F4:2C:CC:3B:6B:4C:63:EE:C9:A4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1694A0600CE811EFBD342410017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:23:5f:cd:cd:42:46:07:1a:bd:ad:04:7c:40:9b:e6:3f:b5:
         0c:bd:ea:0d:c1:6a:c3:53:27:8c:10:ef:03:8a:b5:a3:b1:68:
         d6:89:c1:55:dc:59:55:4e:a1:d1:d0:22:1c:c4:86:f9:7a:29:
         06:34:62:14:1e:b0:ee:b4:2c:19:db:72:2f:db:47:30:13:bd:
         97:48:2d:b0:52:94:57:75:cd:a7:9c:e6:93:25:1b:0f:04:8d:
         4a:be:8f:5c:45:c2:32:59:b5:68:a2:3b:3d:67:7d:e3:f2:f6:
         7a:62:cd:14:86:f1:68:61:25:93:a9:63:e7:81:c8:81:c2:fd:
         d1:a3:0f:45:42:b8:ba:8d:49:ec:d2:cc:92:c6:59:e6:51:cd:
         39:12:b1:6d:37:19:ac:bd:54:eb:d7:26:54:c3:31:93:2e:82:
         f7:99:4b:e3:64:db:b9:45:59:9b:50:b5:5f:11:a6:70:ec:c4:
         2c:87:56:7d:66:5c:82:72:25:b6:e0:42:40:78:d2:65:aa:73:
         95:87:4e:42:69:91:a4:c2:86:2f:04:85:9c:bd:7f:e4:7f:6a:
         eb:7f:15:b3:5c:62:19:13:fc:87:7e:24:a7:6e:a2:47:a4:67:
         cd:bb:6e:be:e7:5c:93:75:0c:c5:ef:9e:b0:3f:fb:c3:af:aa:
         39:4c:c9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:00:36 2024 by rpki-client on console-ams.rpki-client.org