Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC428D120B4411EF8D9CA228017001B1.roa
File:                     EC428D120B4411EF8D9CA228017001B1.roa (raw, json)
Hash identifier:          xlwyf4VD3DQhHev/I3RUCJ4rLtINAJ4NIiHNCHXtrvg=
Subject key identifier:   30:F7:43:70:0C:8B:0F:1D:53:22:A7:4F:29:EA:6D:73:3F:46:A8:54
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       B436
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC428D120B4411EF8D9CA228017001B1.roa
Signing time:             Mon 06 May 2024 01:06:52 +0000
ROA not before:           Mon 06 May 2024 01:06:49 +0000
ROA not after:            Sun 09 Jun 2024 01:06:49 +0000
asID:                     174
IP address blocks:        154.197.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 May 2024 00:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46134 (0xb436)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May  6 01:06:49 2024 GMT
            Not After : Jun  9 01:06:49 2024 GMT
        Subject: CN=66382d2c-0d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dc:f7:d6:15:5c:70:15:91:07:85:cf:ea:a3:
                    a6:3a:38:19:44:d4:7d:21:26:63:30:b9:c1:71:77:
                    66:d8:0e:a7:c9:9b:be:b5:bd:6e:a6:4e:68:74:34:
                    5b:06:b2:1c:0d:85:49:63:83:54:25:37:10:db:60:
                    82:68:c0:69:93:88:ec:3b:14:df:f7:96:5c:ca:46:
                    9f:58:41:2d:2c:a8:5c:46:94:75:df:21:f3:ba:e8:
                    48:8f:21:02:d8:86:90:be:d4:29:38:96:c5:39:b9:
                    83:4c:cd:4e:e1:a1:ce:42:7e:ad:1d:9e:4d:1f:47:
                    79:3d:1b:75:aa:02:d2:a5:fa:e4:5e:9a:c7:d5:dc:
                    af:f7:dd:f5:85:a4:ee:df:67:93:eb:7d:c7:b7:f3:
                    8b:e3:0d:0a:a8:62:67:22:30:36:ab:32:7f:75:31:
                    b6:9a:9c:c4:aa:a6:19:c5:da:95:8f:46:43:58:bc:
                    ec:ca:48:eb:eb:73:21:d1:bd:94:31:41:72:a0:97:
                    c4:f3:c7:1d:4a:93:f0:0e:03:3d:28:3d:94:d7:d4:
                    d8:17:b2:32:ba:b7:32:0c:75:40:b5:e4:8d:f6:b2:
                    b8:22:fb:9f:fb:80:1c:8f:c8:e8:d2:09:96:a6:92:
                    35:e9:06:fe:de:1c:53:10:d5:05:d0:70:3c:d9:ae:
                    9b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F7:43:70:0C:8B:0F:1D:53:22:A7:4F:29:EA:6D:73:3F:46:A8:54
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC428D120B4411EF8D9CA228017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:8f:a1:8b:19:67:c4:6f:c6:b4:0c:83:15:26:9a:1c:82:ba:
         e1:41:fc:64:33:79:dc:29:17:bb:6e:c7:8d:7b:0f:d8:cb:4e:
         aa:d9:5c:29:da:b0:01:b2:2a:a2:55:d4:19:19:df:d5:31:17:
         98:5b:08:d4:45:d1:cb:0c:22:41:ab:a5:42:70:c3:6a:3a:ee:
         ae:55:10:75:b0:b1:9b:33:aa:70:72:8c:54:e9:b9:39:6e:10:
         ca:29:bf:cb:61:63:e4:25:0c:04:fc:9b:93:2f:38:16:3f:55:
         bc:53:50:de:e1:68:b3:59:44:0e:d7:94:6e:22:02:79:bf:b4:
         9d:80:b0:70:55:e8:88:b6:2e:48:32:26:34:6f:99:9c:c3:ea:
         1a:45:a6:4d:c5:7a:b3:f9:3c:bc:9c:31:27:5c:3a:db:83:c4:
         36:9d:2d:f8:2c:d4:d0:f9:58:9a:52:00:9c:4a:03:05:8f:da:
         fa:66:2c:c3:ff:77:6c:68:2e:18:f8:6e:c3:aa:a8:58:c7:2b:
         ce:26:65:49:52:80:0f:5a:9e:45:da:e0:ab:8e:2a:8c:3c:b4:
         c1:1c:aa:9e:52:a4:91:51:9b:48:ec:ba:a8:7d:04:23:b2:cd:
         47:91:e3:b3:78:90:76:e9:45:84:97:66:4f:d8:c1:3b:36:5d:
         58:89:d4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:26 2024 by rpki-client on console-fra.rpki-client.org