Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C582A1EA037D11EF9328915B017001B1.roa
File:                     C582A1EA037D11EF9328915B017001B1.roa (raw, json)
Hash identifier:          VJiSrvjTbBM/YIVQmcDn2R2QPAglU41HsmIrcOpn/us=
Subject key identifier:   53:D2:91:C0:27:DB:85:36:0A:12:6B:BE:4C:A3:7F:EB:E1:F9:05:3C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       B13A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C582A1EA037D11EF9328915B017001B1.roa
Signing time:             Fri 26 Apr 2024 03:33:39 +0000
ROA not before:           Fri 26 Apr 2024 03:33:36 +0000
ROA not after:            Sun 26 May 2024 03:33:36 +0000
asID:                     62240
IP address blocks:        154.196.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 May 2024 00:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45370 (0xb13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 26 03:33:36 2024 GMT
            Not After : May 26 03:33:36 2024 GMT
        Subject: CN=662b2093-84e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:78:11:be:55:a1:c2:d6:84:62:44:2f:2d:2c:
                    68:6c:83:e9:1a:9c:c5:63:56:c5:1f:6a:f7:1a:6a:
                    24:3f:7f:77:43:47:f8:a5:2d:d5:df:ee:8f:16:d9:
                    f2:08:10:53:b3:c8:e5:e4:c4:4d:15:7a:4b:5f:90:
                    ec:91:33:f6:57:b3:07:9c:67:d2:82:0e:7f:a1:da:
                    61:cb:d5:fa:d4:b2:35:e2:62:4a:b3:7f:65:65:43:
                    ad:0b:96:bd:dd:b2:5c:3c:75:a6:75:89:57:6a:07:
                    c3:7b:21:94:b8:56:a5:7d:0b:fd:17:80:4b:e1:85:
                    71:da:f2:20:2f:41:11:0b:3a:36:65:23:2c:ac:db:
                    aa:a0:79:35:4a:04:15:e9:b1:82:37:95:4b:ab:c6:
                    1a:f9:ec:82:cf:89:81:59:95:78:60:3b:e3:fb:df:
                    25:b0:92:d3:48:41:6b:e2:b9:92:1d:57:a8:33:fb:
                    e4:3a:bb:d3:5d:bc:89:b0:1d:b0:4d:56:12:36:24:
                    d2:3c:8f:b8:05:03:78:33:06:c7:ed:10:67:e4:a1:
                    6d:ec:9e:f4:35:45:00:33:9c:1d:d9:6e:e0:36:eb:
                    c5:7d:67:39:bf:80:08:63:6a:c8:db:dd:84:80:82:
                    a9:ef:ef:35:63:57:9a:73:d4:06:3e:72:40:42:e5:
                    02:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D2:91:C0:27:DB:85:36:0A:12:6B:BE:4C:A3:7F:EB:E1:F9:05:3C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C582A1EA037D11EF9328915B017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:78:6d:54:3e:1d:5f:2c:90:9b:75:8f:0c:5a:f8:af:d3:db:
         64:57:a1:75:d1:09:0a:d0:8e:3c:ce:1d:3a:32:f1:ac:f6:00:
         1c:70:ee:88:6b:c2:e8:74:d1:2b:da:b1:ed:6c:c3:42:2d:e7:
         9b:df:43:b9:a3:7d:88:71:6c:eb:c3:db:c9:ba:63:cf:a7:00:
         f6:9f:4d:21:2b:2b:eb:50:ca:12:bd:f2:11:60:6f:37:99:31:
         ed:5f:5b:55:95:79:b1:d2:4e:75:f3:7b:95:33:b8:3f:cd:fc:
         63:31:5f:2f:23:d3:62:a4:40:e1:35:86:cf:6c:f5:c8:20:66:
         56:76:a0:c1:47:60:61:f5:61:b3:e1:da:89:a8:a6:e4:93:87:
         11:fb:65:7c:a1:3b:87:f2:26:5b:ae:37:3f:1b:e0:d3:81:f7:
         8e:1d:c5:dd:6c:ec:95:5a:c0:52:e4:0d:fd:e3:ef:39:6f:07:
         5a:80:40:65:37:ad:7c:8e:02:4f:20:22:98:d3:be:59:5e:79:
         98:2d:27:c2:23:fc:66:29:7c:33:3f:33:66:12:ba:4b:50:23:
         3b:b1:68:8a:88:7d:26:da:86:f3:f2:5c:31:b4:30:30:15:e7:
         45:2f:f8:24:69:51:9e:e8:ac:cf:4d:2a:4f:ee:68:d1:4c:8d:
         c6:e7:d9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:23 2024 by rpki-client on console-fra.rpki-client.org