Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B49703B61FE411EFAAA0E8397DDC24C2.roa
File:                     B49703B61FE411EFAAA0E8397DDC24C2.roa (raw, json)
Hash identifier:          0M3OwZndGdg/XsjQXLrM4qAMWBRTAHTqFpHd2HXWQkI=
Subject key identifier:   27:F8:77:DB:5F:0A:F0:A7:18:CC:40:43:03:82:27:57:03:25:89:20
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       BC9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B49703B61FE411EFAAA0E8397DDC24C2.roa
Signing time:             Sat 01 Jun 2024 07:01:01 +0000
ROA not before:           Sat 01 Jun 2024 07:00:58 +0000
ROA not after:            Thu 04 Jul 2024 07:00:58 +0000
asID:                     136950
IP address blocks:        154.213.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 28 Jun 2024 06:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48283 (0xbc9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun  1 07:00:58 2024 GMT
            Not After : Jul  4 07:00:58 2024 GMT
        Subject: CN=665ac72d-5304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:62:37:32:90:52:99:e3:e9:b3:b9:8c:e9:3d:
                    fd:3e:5c:aa:7a:70:69:b1:15:e9:b2:59:41:5a:21:
                    2a:6e:b5:69:85:94:f3:24:f3:68:f3:7f:5a:8a:e5:
                    81:b0:a4:29:6b:f2:55:16:1a:2a:42:7e:b5:7b:95:
                    a8:e1:be:db:ca:d6:89:32:06:47:10:2f:05:a3:f6:
                    a7:da:42:83:d9:18:22:73:0b:22:11:ba:1e:87:97:
                    fa:d3:92:e4:91:e2:5b:aa:55:fa:f4:4d:49:14:98:
                    f5:a7:05:7b:50:c9:0b:b3:5d:fc:54:e9:56:17:12:
                    62:42:8e:9c:60:02:87:75:d8:23:30:a1:5d:2e:d8:
                    aa:81:1f:0e:13:4a:6f:0d:84:b5:cc:86:e5:00:3a:
                    d0:07:60:75:9f:25:25:00:73:cf:07:d5:04:5b:8f:
                    c7:08:7c:f9:74:5c:de:fd:ff:ef:23:63:61:5a:3e:
                    a6:ef:66:5a:21:3a:05:61:4a:9f:8f:bf:41:7d:7d:
                    86:e9:f3:17:11:bb:5c:2f:a4:2f:21:b6:4e:f3:74:
                    59:eb:31:22:55:41:12:a2:41:c8:0f:2b:b1:83:7e:
                    a7:85:48:0b:99:d0:ab:01:f8:cd:0c:a5:ab:53:21:
                    76:bc:09:a0:cf:ee:48:6b:a3:59:77:e4:70:c0:e3:
                    09:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F8:77:DB:5F:0A:F0:A7:18:CC:40:43:03:82:27:57:03:25:89:20
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B49703B61FE411EFAAA0E8397DDC24C2.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.213.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:7a:82:7f:3c:09:02:51:67:70:d3:86:9f:72:99:57:38:e4:
         ca:a2:75:11:9f:93:a8:d3:72:4d:60:61:16:48:24:81:45:89:
         b4:6c:1f:bc:2e:1f:0f:0b:95:81:d4:48:21:40:eb:6a:c7:b2:
         d8:bc:22:93:ab:9b:7c:0b:a3:14:6b:94:ca:c6:ef:da:05:4e:
         04:fa:3e:c0:13:19:27:35:8f:ba:a2:47:11:52:95:13:54:54:
         84:e0:d8:32:88:1c:8f:2f:86:f2:8d:ba:c1:06:6e:e1:b8:fa:
         c6:6c:10:3d:d7:3c:8e:0d:c9:f2:c0:32:b5:7a:01:f2:d0:79:
         d9:d7:be:50:36:16:00:77:6b:ab:dd:cd:2d:fb:c4:66:09:ae:
         10:9f:f0:da:90:9f:59:99:ab:fd:b9:09:10:26:6b:d1:8c:bc:
         93:0a:e3:64:42:dd:54:5d:f8:4d:ca:36:36:6d:16:94:a3:eb:
         3c:90:b2:ed:0a:41:4e:ea:6b:de:c2:9b:fc:ba:a9:8e:9e:4d:
         02:df:85:13:4b:34:17:d1:6b:5e:73:46:75:8f:d2:f2:df:b4:
         ab:8f:df:f4:18:f6:d0:7d:4d:a4:cf:17:57:fd:7e:00:2f:d1:
         7d:cd:b2:a4:4d:9e:47:b4:08:17:96:16:0a:ba:6f:39:e9:60:
         cf:95:44:62
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALybMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNjAxMDcwMDU4WhcNMjQwNzA0MDcwMDU4WjAYMRYw
FAYDVQQDEw02NjVhYzcyZC01MzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7mI3MpBSmePps7mM6T39PlyqenBpsRXpsllBWiEqbrVphZTzJPNo839a
iuWBsKQpa/JVFhoqQn61e5Wo4b7bytaJMgZHEC8Fo/an2kKD2RgicwsiEboeh5f6
05LkkeJbqlX69E1JFJj1pwV7UMkLs138VOlWFxJiQo6cYAKHddgjMKFdLtiqgR8O
E0pvDYS1zIblADrQB2B1nyUlAHPPB9UEW4/HCHz5dFze/f/vI2NhWj6m72ZaIToF
YUqfj79BfX2G6fMXEbtcL6QvIbZO83RZ6zEiVUESokHIDyuxg36nhUgLmdCrAfjN
DKWrUyF2vAmgz+5Ia6NZd+RwwOMJ4QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCf4
d9tfCvCnGMxAQwOCJ1cDJYkgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNDk3MDNCNjFGRTQxMUVGQUFBMEU4Mzk3RERDMjRDMi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtUSMA0GCSqGSIb3DQEB
CwUAA4IBAQBTeoJ/PAkCUWdw04afcplXOOTKonURn5Oo03JNYGEWSCSBRYm0bB+8
Lh8PC5WB1EghQOtqx7LYvCKTq5t8C6MUa5TKxu/aBU4E+j7AExknNY+6okcRUpUT
VFSE4NgyiByPL4byjbrBBm7huPrGbBA91zyODcnywDK1egHy0HnZ175QNhYAd2ur
3c0t+8RmCa4Qn/DakJ9Zmav9uQkQJmvRjLyTCuNkQt1UXfhNyjY2bRaUo+s8kLLt
CkFO6mvewpv8uqmOnk0C34UTSzQX0Wtec0Z1j9Ly37Srj9/0GPbQfU2kzxdX/X4A
L9F9zbKkTZ5HtAgXlhYKum856WDPlURi
-----END CERTIFICATE-----
Generated at Wed Jun 26 08:13:34 2024 by rpki-client on console-ams.rpki-client.org