Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7038ACFC038211EFBCCC5300017001B1.roa
File:                     7038ACFC038211EFBCCC5300017001B1.roa (raw, json)
Hash identifier:          j2ujT2wea8EOBu4fGWorkvAoAYpA1z4lqtHGEcd+V2k=
Subject key identifier:   1E:38:36:78:90:6F:92:00:C2:3A:BE:47:D4:CA:22:99:B3:82:05:20
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       B15C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7038ACFC038211EFBCCC5300017001B1.roa
Signing time:             Fri 26 Apr 2024 04:07:04 +0000
ROA not before:           Fri 26 Apr 2024 04:07:00 +0000
ROA not after:            Tue 03 Sep 2024 04:07:00 +0000
asID:                     131685
IP address blocks:        154.210.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 May 2024 00:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45404 (0xb15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 26 04:07:00 2024 GMT
            Not After : Sep  3 04:07:00 2024 GMT
        Subject: CN=662b2867-a945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6c:7c:a9:36:8f:85:20:e2:ff:98:d6:05:c7:
                    16:ec:74:09:f6:40:f2:2d:dc:59:25:2d:57:89:31:
                    d3:ed:4e:0e:34:b8:73:25:77:7a:d3:2a:33:87:bf:
                    ee:a2:14:ae:6d:03:a5:f2:5f:34:ea:89:74:63:5a:
                    38:25:0b:75:29:9e:a1:2c:fe:f6:dc:19:74:ae:39:
                    1e:ab:47:87:a4:26:c8:b7:69:4b:87:91:2f:5d:8c:
                    d8:dc:ab:81:70:61:ac:71:95:62:55:a7:cb:ed:c6:
                    ca:e0:9d:a8:fb:3b:d2:9c:b2:9d:38:1d:e2:a9:aa:
                    30:7e:27:01:8c:ff:1b:77:f3:6e:91:f0:a9:57:79:
                    3e:94:6d:cb:75:96:46:61:12:db:14:83:0e:13:0b:
                    fb:63:3a:0a:52:81:b3:5b:66:6d:28:cc:30:6c:91:
                    cc:7f:38:66:b5:c8:3f:c0:04:3c:f5:69:ff:65:be:
                    63:77:3c:76:95:11:31:26:14:a4:d3:34:cc:0b:f5:
                    5c:e4:33:27:53:2e:d1:94:d5:2a:8a:bb:cc:7e:13:
                    72:68:76:fc:09:47:b2:e2:c3:39:d0:fd:95:10:0b:
                    6e:52:98:d6:d2:7f:df:b0:b4:38:46:a5:e5:98:ed:
                    9e:0b:df:e1:aa:de:5d:ff:72:6e:ec:29:2b:c2:31:
                    3f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:38:36:78:90:6F:92:00:C2:3A:BE:47:D4:CA:22:99:B3:82:05:20
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7038ACFC038211EFBCCC5300017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:6f:b8:8a:0b:86:ac:e3:39:04:84:34:66:cf:9f:d8:c8:03:
         87:13:b0:f1:60:78:1b:8d:f1:37:f7:90:67:c7:2d:5c:50:5b:
         df:0f:5b:91:5c:b9:75:8a:09:bc:62:b2:1f:e5:ac:e1:36:63:
         7a:17:98:3e:92:f9:34:e4:aa:8b:be:0a:f2:ef:da:3b:4c:c7:
         a5:59:74:83:6b:64:a5:fd:15:7a:b6:e1:e2:83:54:12:58:14:
         81:12:d5:b0:cf:e6:b1:9e:6f:9b:3d:9e:cf:cd:64:2f:a8:93:
         83:62:d9:68:a5:b9:03:76:66:0a:33:ca:48:99:48:be:46:ee:
         95:c2:20:db:6a:6c:5c:c2:d8:92:1a:cb:bb:4c:c5:e7:83:4d:
         9a:26:fe:1e:09:94:8d:c6:1f:23:3c:3b:07:6c:76:78:8e:4b:
         1b:90:57:cc:2a:82:42:aa:44:02:1d:1b:95:c0:cd:6c:ca:21:
         68:67:3a:94:50:75:65:96:1d:73:01:44:4f:b4:05:82:66:7c:
         5d:3f:3f:c3:67:fa:e8:85:20:ab:21:3e:3e:09:85:ec:70:d6:
         0a:78:b3:e6:70:db:3e:05:66:89:97:1f:57:ed:e7:25:0c:69:
         8f:a0:9f:fa:0f:43:3d:52:6d:7c:3c:94:dd:12:90:ac:38:15:
         bb:4c:99:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:17 2024 by rpki-client on console-fra.rpki-client.org