Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0015636A82BE11EEB993073C4AD9E6FC.roa
File:                     0015636A82BE11EEB993073C4AD9E6FC.roa (raw, json)
Hash identifier:          56sDQ22uRI3jHjxQrN0aOhlxFT7aS5nEZPBVrEeSCZY=
Subject key identifier:   14:43:20:E5:5A:59:C9:12:1B:B7:54:9A:8F:D9:E8:ED:AD:42:8A:BE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       4FFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0015636A82BE11EEB993073C4AD9E6FC.roa
Signing time:             Tue 14 Nov 2023 07:18:25 +0000
ROA not before:           Tue 14 Nov 2023 07:18:22 +0000
ROA not after:            Tue 12 Nov 2024 07:18:22 +0000
asID:                     397630
IP address blocks:        154.83.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20478 (0x4ffe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 14 07:18:22 2023 GMT
            Not After : Nov 12 07:18:22 2024 GMT
        Subject: CN=65531f41-5df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:94:ff:54:a2:4c:e9:7e:e6:70:90:f9:24:
                    b4:bb:72:79:51:ac:ed:68:28:6b:2d:e0:e9:bf:e0:
                    79:a5:30:16:4c:91:08:9c:0b:b8:eb:5b:98:09:c5:
                    31:b2:82:66:32:cd:69:4f:80:b3:51:14:d4:bf:02:
                    4e:1f:47:4e:b3:ff:57:30:93:30:34:15:44:a7:41:
                    07:a3:b4:f4:3f:03:d1:ae:04:ff:84:d8:93:07:f6:
                    fe:e5:ae:f9:ba:a3:ba:a2:e5:1e:87:47:48:e2:77:
                    91:7e:6b:72:cd:fe:02:77:be:e9:dc:ab:f0:b8:fc:
                    fc:07:d7:0f:d8:c0:20:98:38:73:80:8d:6d:56:f4:
                    49:86:3c:1c:08:18:38:37:52:3d:ea:07:90:d2:43:
                    f0:4f:d5:54:5d:aa:59:66:a7:6c:91:ea:29:e2:30:
                    60:fe:c4:ce:f2:45:52:67:d6:c9:67:64:f9:5b:df:
                    d6:67:95:05:a2:a0:99:cc:ef:46:f4:94:72:0b:af:
                    c4:df:3b:eb:48:a7:d9:e9:b0:0d:36:0a:12:3a:9a:
                    e1:75:ce:fb:1e:d5:62:f5:73:d6:55:9a:e8:1a:de:
                    ee:54:e7:0a:55:59:d4:9e:9b:da:67:e8:c5:3f:0e:
                    80:56:13:99:3c:ba:91:6c:47:27:f5:14:c6:6f:dc:
                    15:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:43:20:E5:5A:59:C9:12:1B:B7:54:9A:8F:D9:E8:ED:AD:42:8A:BE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0015636A82BE11EEB993073C4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:12:79:f4:a0:8a:59:a1:a1:f8:91:96:e7:0d:7d:4b:0b:16:
         d0:e8:fe:76:db:0b:a4:f2:ff:24:f0:f2:f9:65:b2:7e:5b:30:
         22:f2:e7:f8:8e:cb:9c:f6:e8:23:6c:b4:86:82:2d:2d:43:cb:
         e9:9d:a5:a1:5d:99:16:24:12:4c:c4:7b:82:9a:4c:06:4e:c1:
         4b:c4:7d:2c:6e:43:ae:d2:9c:65:72:75:ec:d2:57:30:34:75:
         18:04:e3:16:b7:27:a9:1a:2f:14:8c:76:7f:13:bf:2b:3f:3d:
         3e:56:78:b8:85:6d:f2:fd:b8:a3:ff:e5:5e:8c:f0:fe:3a:14:
         28:b2:af:72:0d:5c:49:17:1d:8e:c5:8a:ae:2d:32:8c:63:fc:
         21:e2:5d:b8:19:89:1a:9b:1e:0a:a1:a2:5d:5e:05:e7:42:2c:
         d9:b6:88:28:44:76:9f:02:ca:39:d3:98:ed:37:1f:fb:43:c6:
         31:ed:98:aa:90:81:30:af:8b:9c:a8:98:ac:06:9c:c8:bc:6b:
         02:2a:ce:57:ce:92:de:fd:ab:44:e8:f7:95:e6:bb:48:46:f6:
         01:ea:13:45:b0:16:12:3c:9f:52:46:89:4f:f4:61:a8:84:4e:
         d7:38:9c:41:10:a5:7a:88:bc:77:a2:0e:c0:69:b9:24:a4:1a:
         ed:66:2c:09
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICT/4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMTQwNzE4MjJaFw0yNDExMTIwNzE4MjJaMBgxFjAU
BgNVBAMTDTY1NTMxZjQxLTVkZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6kJT/VKJM6X7mcJD5JLS7cnlRrO1oKGst4Om/4HmlMBZMkQicC7jrW5gJ
xTGygmYyzWlPgLNRFNS/Ak4fR06z/1cwkzA0FUSnQQejtPQ/A9GuBP+E2JMH9v7l
rvm6o7qi5R6HR0jid5F+a3LN/gJ3vuncq/C4/PwH1w/YwCCYOHOAjW1W9EmGPBwI
GDg3Uj3qB5DSQ/BP1VRdqllmp2yR6iniMGD+xM7yRVJn1slnZPlb39ZnlQWioJnM
70b0lHILr8TfO+tIp9npsA02ChI6muF1zvse1WL1c9ZVmuga3u5U5wpVWdSem9pn
6MU/DoBWE5k8upFsRyf1FMZv3BVrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUFEMg
5VpZyRIbt1Saj9no7a1Cir4wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzAwMTU2MzZBODJCRTExRUVCOTkzMDczQzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaUwkwDQYJKoZIhvcNAQEL
BQADggEBAFESefSgilmhofiRlucNfUsLFtDo/nbbC6Ty/yTw8vllsn5bMCLy5/iO
y5z26CNstIaCLS1Dy+mdpaFdmRYkEkzEe4KaTAZOwUvEfSxuQ67SnGVydezSVzA0
dRgE4xa3J6kaLxSMdn8Tvys/PT5WeLiFbfL9uKP/5V6M8P46FCiyr3INXEkXHY7F
iq4tMoxj/CHiXbgZiRqbHgqhol1eBedCLNm2iChEdp8CyjnTmO03H/tDxjHtmKqQ
gTCvi5yomKwGnMi8awIqzlfOkt79q0To95Xmu0hG9gHqE0WwFhI8n1JGiU/0YaiE
Ttc4nEEQpXqIvHeiDsBpuSSkGu1mLAk=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:01 2024 by rpki-client on console-ams.rpki-client.org