Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03148F18E75511EE809270B4775412E6.roa
File:                     03148F18E75511EE809270B4775412E6.roa (raw, json)
Hash identifier:          07h86VZwYh85zp7FrQYobM8BQz13qnenjaiEim8zOhI=
Subject key identifier:   C5:EC:E4:99:44:4F:59:DE:13:F6:58:D8:48:C1:3E:CE:1B:46:60:FC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A497
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03148F18E75511EE809270B4775412E6.roa
Signing time:             Thu 21 Mar 2024 07:31:21 +0000
ROA not before:           Thu 21 Mar 2024 07:31:17 +0000
ROA not after:            Tue 23 Apr 2024 07:31:17 +0000
asID:                     44559
IP address blocks:        154.218.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Apr 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42135 (0xa497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 21 07:31:17 2024 GMT
            Not After : Apr 23 07:31:17 2024 GMT
        Subject: CN=65fbe248-7417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:e3:55:55:ec:cd:72:7c:b9:e0:f8:70:a7:
                    34:23:c5:7e:3b:95:c9:85:c5:57:c9:2a:f1:83:3c:
                    94:c5:f2:4f:65:8b:cd:f1:a1:fb:2b:65:ea:ee:33:
                    82:06:fb:0c:d6:1c:6d:15:05:7d:93:18:c3:0e:a5:
                    80:c9:56:41:6c:67:0b:25:3d:7c:6c:19:88:e8:f5:
                    25:1f:e1:9e:6c:a6:e9:4d:34:93:3a:d7:8c:46:47:
                    5d:c7:ba:a6:f5:2a:4e:59:96:44:bd:9c:bf:b8:a8:
                    46:cd:0b:86:55:74:f0:82:b6:68:d5:8e:be:96:da:
                    03:c7:8e:0d:70:fa:89:4a:a6:9e:f1:2c:72:3e:56:
                    84:b0:43:75:20:c2:a2:3c:4a:5d:40:e0:19:8e:f8:
                    67:9d:be:c8:13:74:ce:ee:13:2a:6b:a4:c3:d4:e3:
                    53:22:49:a7:6d:1b:a7:72:16:05:6d:9b:d1:b3:02:
                    47:98:55:47:3d:a7:04:ac:37:8b:d1:f4:c6:8c:3a:
                    a8:20:d6:70:71:34:ef:9b:71:98:94:10:20:b2:b0:
                    0a:c1:29:72:e2:73:04:56:f7:cd:86:a9:e9:47:70:
                    3b:29:96:6e:fa:73:9f:d3:83:de:ab:77:64:57:b3:
                    e9:e8:29:3c:69:8d:eb:2a:1d:74:6b:82:ec:79:13:
                    93:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EC:E4:99:44:4F:59:DE:13:F6:58:D8:48:C1:3E:CE:1B:46:60:FC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03148F18E75511EE809270B4775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.218.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:30:b8:04:1d:b7:1c:cd:07:cc:1e:b4:6d:16:08:1f:77:9d:
         7a:bf:bf:7d:21:7e:86:23:ca:a2:6e:72:af:a9:57:00:4c:27:
         2d:e7:c8:e1:fd:8a:9d:da:bb:ad:0b:be:68:b8:2d:ec:bb:05:
         82:68:53:22:48:ef:6e:29:ff:11:6e:b1:01:a7:a3:8b:cd:a0:
         9b:13:d8:e1:79:ac:3f:c4:0d:95:42:07:10:d0:a3:e7:4e:bc:
         be:c1:14:a6:d8:62:f7:6e:b0:4f:d9:80:eb:4c:43:ae:ac:be:
         7a:05:16:68:b6:a1:72:cd:30:1c:f7:b2:22:0c:a3:fe:4d:5c:
         66:56:0e:a0:47:16:82:bd:38:ff:82:31:42:9c:0e:6a:6b:3c:
         17:3a:04:eb:85:01:83:91:bf:48:40:e0:29:c6:4d:9e:cc:31:
         7c:46:f7:a6:1c:c6:44:2c:b4:da:1a:6a:d7:91:f6:91:4d:9b:
         93:f8:f8:02:ed:61:a8:b6:e7:8c:76:75:11:7e:75:c7:c7:d9:
         b5:3f:84:4b:04:5b:5f:bf:c7:a6:42:f2:69:70:0f:6a:3e:6f:
         b8:79:fc:82:60:e6:d5:f9:6a:7a:ee:85:ed:f5:d8:5e:2f:60:
         de:65:35:cd:9e:c3:b0:0e:0c:59:cc:39:3f:52:d7:b0:5b:d8:
         b1:ca:ae:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:12 2024 by rpki-client on console-ams.rpki-client.org