Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0924B3B0F91711EDAB118D174AD9E6FC.roa
File:                     0924B3B0F91711EDAB118D174AD9E6FC.roa (raw, json)
Hash identifier:          7jyIoTnjEvCBKCZWwxqa/etBiFjsiOIx6d1/J9zKyi0=
Subject key identifier:   A0:02:1A:3B:3F:15:EA:EC:E2:29:76:59:2B:97:49:EB:1F:4D:3C:E2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       263A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0924B3B0F91711EDAB118D174AD9E6FC.roa
Signing time:             Tue 23 May 2023 03:08:05 +0000
ROA not before:           Tue 23 May 2023 03:08:02 +0000
ROA not after:            Wed 15 May 2024 03:08:02 +0000
asID:                     399674
IP address blocks:        154.94.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9786 (0x263a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 23 03:08:02 2023 GMT
            Not After : May 15 03:08:02 2024 GMT
        Subject: CN=646c2e15-3723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a0:c9:ec:e5:32:cb:07:cd:fd:3b:5c:13:d1:
                    03:32:ad:96:2b:0a:fe:9e:a2:43:5e:50:9e:ff:84:
                    93:fe:74:1e:0c:c6:91:f2:2f:c4:11:23:88:45:a3:
                    8e:21:53:78:7a:7f:8f:eb:08:c7:f1:91:cb:90:af:
                    f8:f1:3b:cc:3a:83:5b:2c:ac:41:2d:c8:4a:e8:92:
                    59:66:58:4e:6d:70:f7:4e:ff:f0:01:4a:85:25:81:
                    c9:02:c6:d0:94:d3:50:12:7a:f8:81:d3:93:9b:2e:
                    76:cc:ca:25:78:83:30:11:9a:fc:12:78:24:9d:ba:
                    78:16:e8:ff:b5:c3:ee:f1:b7:1d:7a:4c:b5:58:86:
                    03:45:42:92:0e:a7:c0:d3:62:8e:5f:ac:45:3b:96:
                    6d:ee:d2:73:e7:8e:dd:0b:19:7a:4d:30:92:e1:0b:
                    db:67:73:3b:50:95:07:3c:4c:c4:07:6a:6e:bc:4c:
                    f4:f4:e2:0a:b7:84:f3:e0:05:0b:b9:e6:af:18:ae:
                    62:b5:f2:c1:b4:38:98:41:a2:23:26:b5:96:8d:53:
                    ce:fc:05:fa:42:2a:30:2c:2a:0e:fa:5d:8f:31:c6:
                    ef:d0:61:7e:05:bb:3f:3e:a6:f9:5d:a4:0c:28:14:
                    25:2e:2b:76:3e:7b:37:b7:8d:f7:b5:79:78:87:bd:
                    d3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:02:1A:3B:3F:15:EA:EC:E2:29:76:59:2B:97:49:EB:1F:4D:3C:E2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0924B3B0F91711EDAB118D174AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:a2:ff:a2:4f:ad:aa:66:58:32:fd:1d:95:0d:8d:f1:22:80:
         62:51:76:b9:be:7b:14:ab:0b:cb:82:a7:2f:27:88:7e:bb:dc:
         40:1f:aa:74:45:5e:e6:93:b3:85:75:a2:c7:96:78:91:02:c7:
         a3:a5:c6:ec:77:ca:46:fc:4d:9c:bc:18:7d:fd:36:46:cb:42:
         2e:ba:ed:2e:d3:0b:c1:cf:48:bf:4c:55:21:6b:12:6b:75:e8:
         a6:54:14:62:34:9e:3f:23:80:a8:25:6c:26:ac:57:d4:c6:08:
         44:99:1a:6b:75:df:7a:be:fb:90:8d:db:ef:67:4f:68:0e:1e:
         8d:0b:2b:5e:5c:e5:fb:7e:58:d3:6f:0d:52:b4:99:e3:00:ff:
         81:c7:15:7b:7e:8f:78:ac:bd:53:d7:98:91:c2:1d:14:b4:5a:
         2d:b5:49:16:80:1e:78:0e:43:02:21:95:74:73:b8:16:66:6c:
         b5:64:54:cd:e5:34:0f:40:ef:62:7d:7a:37:01:b8:50:09:82:
         a0:4a:05:e6:bc:b2:b8:c3:05:03:53:99:c1:3f:b1:bf:91:f7:
         50:47:89:fa:8f:f8:0c:b1:67:75:5b:26:d2:ef:26:ad:b3:3f:
         94:ab:83:9c:32:31:f8:a1:91:fe:1c:e6:62:1a:a3:19:41:92:
         44:f2:d4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:02 2024 by rpki-client on console-ams.rpki-client.org