Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B36644F806CF11EF82ED426A017001B1.roa
File:                     B36644F806CF11EF82ED426A017001B1.roa (raw, json)
Hash identifier:          eKIW6MxNdmH7HJ4kTh4ESXYawmvzueRJQox8zQTcOj0=
Subject key identifier:   1D:EB:6D:2A:C7:57:48:E8:C5:25:AE:32:74:C0:14:FD:5F:D0:C3:8A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       B29F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B36644F806CF11EF82ED426A017001B1.roa
Signing time:             Tue 30 Apr 2024 08:57:41 +0000
ROA not before:           Tue 30 Apr 2024 08:57:38 +0000
ROA not after:            Sat 25 May 2024 08:57:38 +0000
asID:                     5065
IP address blocks:        154.206.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 May 2024 00:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45727 (0xb29f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 30 08:57:38 2024 GMT
            Not After : May 25 08:57:38 2024 GMT
        Subject: CN=6630b285-d4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0c:57:4d:84:61:c0:2d:ea:1e:9e:e6:0a:83:
                    b1:73:51:07:7e:d0:19:c0:9e:f9:5c:d1:aa:42:cb:
                    20:67:51:30:2d:5d:0e:82:88:5b:b1:01:42:5a:d5:
                    22:3c:a3:e7:16:58:35:6e:bd:bc:2e:4f:7d:ac:4e:
                    48:36:57:a6:26:f0:cd:e5:19:13:4f:e3:38:6e:7e:
                    ac:08:cd:bd:6f:9e:be:4e:6e:88:18:9b:b4:9a:28:
                    29:53:b1:68:d3:b0:f3:f6:64:c4:78:18:3d:d6:7c:
                    28:e8:05:18:0b:dc:e0:03:47:17:02:4c:89:ca:33:
                    2e:28:2c:e3:84:c2:79:23:b7:2d:e7:89:4c:c0:53:
                    5c:e4:75:38:7c:de:bb:6b:eb:ac:8d:80:88:0a:42:
                    33:7a:08:05:ca:fb:da:54:de:ea:a3:29:44:50:d8:
                    b9:8a:01:50:da:cc:d6:97:bd:c2:7a:dc:38:88:85:
                    a0:2a:2b:53:8c:4d:90:c1:df:33:b8:dc:bf:88:dd:
                    48:28:16:1e:96:3a:7c:d5:1f:73:2e:fd:44:bf:ed:
                    5a:0f:4c:04:84:32:3e:de:c7:0f:23:34:ab:27:48:
                    09:6d:02:70:7d:ea:2f:5c:13:13:0a:da:7c:b0:55:
                    2d:40:06:b4:f1:58:26:d6:d6:01:fb:12:e1:60:0f:
                    59:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EB:6D:2A:C7:57:48:E8:C5:25:AE:32:74:C0:14:FD:5F:D0:C3:8A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B36644F806CF11EF82ED426A017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:c3:3b:43:43:86:a8:b2:dc:fa:5f:0d:42:bd:ae:3d:4e:c8:
         dc:4e:d8:c9:b1:bd:ba:e9:a1:ba:55:e1:0d:4a:33:f1:eb:7c:
         5c:24:52:48:5d:f8:1e:ba:b6:17:d7:5c:4f:fc:ae:49:6c:45:
         5e:bc:d3:ef:cb:c4:ae:a1:38:ba:51:b9:52:07:f6:c2:b1:4d:
         a2:d8:b1:0c:90:10:1e:44:90:aa:88:58:ad:4f:89:ca:fa:b7:
         e3:20:3b:c9:64:e4:b1:5a:a7:f3:12:30:dc:4c:f7:6a:b5:59:
         57:0b:b3:9a:ca:a2:03:ff:27:7d:25:47:67:be:31:05:18:68:
         74:6f:d2:a7:a3:cd:05:81:d4:82:4e:cd:3e:9e:fd:6f:be:d7:
         7e:2e:20:b3:66:3a:f5:3c:ff:44:af:0b:ab:6f:04:9f:4b:69:
         63:ec:2c:18:b2:3a:59:8a:e2:b9:80:84:e6:02:cc:84:87:10:
         f0:0a:ea:e1:d4:7d:7a:6a:73:58:d0:51:04:a1:a7:bb:c4:69:
         cf:a7:bd:a7:84:f4:13:57:b6:e8:bc:28:fd:75:47:ac:27:8d:
         59:3f:ea:3e:e4:5a:53:80:78:e4:16:4a:d2:d9:6a:38:23:f2:
         09:bc:53:1c:9a:c6:5e:0e:3b:2f:57:4d:26:e7:48:aa:8d:76:
         77:a5:ea:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:29 2024 by rpki-client on console-ams.rpki-client.org