Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C9DC5BC278011EEA949EC174AD9E6FC.roa
File:                     0C9DC5BC278011EEA949EC174AD9E6FC.roa (raw, json)
Hash identifier:          7MLrRuzY0MQzIbj06zkAF3bGPcqCpiQRlbQRPZ9/pfk=
Subject key identifier:   6F:4B:74:3E:92:32:56:CC:89:47:80:EF:D5:D5:87:CA:15:3C:92:97
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       3387
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C9DC5BC278011EEA949EC174AD9E6FC.roa
Signing time:             Fri 21 Jul 2023 04:35:42 +0000
ROA not before:           Fri 21 Jul 2023 04:35:38 +0000
ROA not after:            Thu 13 Jun 2024 04:35:38 +0000
asID:                     22773
IP address blocks:        154.84.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13191 (0x3387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 21 04:35:38 2023 GMT
            Not After : Jun 13 04:35:38 2024 GMT
        Subject: CN=64ba0b1d-0995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f7:64:a3:1b:16:78:fa:4e:96:01:23:e7:12:
                    c2:50:29:d6:86:ac:34:68:08:30:ce:8d:71:bc:d8:
                    90:e0:71:33:54:86:38:47:c8:1d:ff:59:55:b7:ce:
                    7a:52:6a:a3:9c:83:55:24:ca:72:e0:73:da:e8:88:
                    1f:d4:45:09:4d:e6:59:1c:9f:38:47:a4:c6:13:7a:
                    21:b5:fc:2e:76:76:a4:b8:f0:3c:ad:bc:53:8c:e3:
                    10:78:6e:b5:37:e8:6b:c8:2c:d6:95:05:0c:0f:bd:
                    00:16:08:ad:b6:1e:b1:1e:68:03:11:f3:99:ce:c0:
                    f4:06:0f:df:96:24:f3:ef:96:57:1c:eb:8b:69:18:
                    58:fd:51:0e:e1:d2:1b:b4:73:27:dd:10:1c:5b:a9:
                    47:83:6a:ca:02:30:26:f9:c4:e7:36:a7:70:f6:cc:
                    74:d4:30:0e:05:98:04:6b:90:94:74:44:6d:0a:75:
                    85:72:93:d2:58:13:13:5c:b1:e0:14:b6:21:9e:00:
                    61:b1:df:e1:ad:d6:e2:d7:1f:8a:13:50:3f:a4:73:
                    b2:81:0a:80:38:9b:76:f1:4b:47:48:8d:2c:66:91:
                    f4:f2:81:1c:24:3c:10:46:8f:de:68:61:31:20:21:
                    7b:d3:ac:b1:b3:79:e5:ea:d1:e7:34:ad:9e:03:f4:
                    34:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4B:74:3E:92:32:56:CC:89:47:80:EF:D5:D5:87:CA:15:3C:92:97
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C9DC5BC278011EEA949EC174AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:e6:9d:f6:7d:1b:10:6b:e5:2c:03:67:b1:a9:d6:45:2f:69:
         84:51:51:0c:97:09:79:dd:b6:50:a6:ec:20:30:b5:e8:03:01:
         c6:17:c6:54:0c:40:05:26:6c:e6:c2:fe:d2:06:e0:b1:c0:fa:
         79:6b:6d:bc:82:ed:ff:b6:7e:6d:4c:db:28:f2:80:5e:c8:56:
         95:b9:fe:fa:c4:51:39:13:47:09:d9:7e:0b:32:02:3a:f2:01:
         00:2f:d7:97:c8:b1:5a:f6:20:9b:c4:5c:7f:c3:e5:2c:21:c2:
         d9:03:93:4b:6d:cc:77:af:87:fd:aa:56:bd:5e:b7:8e:bf:a7:
         ac:bd:71:02:4b:c0:52:b2:45:06:28:92:03:15:f8:46:98:e3:
         94:57:c9:97:97:e5:6e:b5:b3:4d:c6:11:f7:85:8b:5c:87:af:
         5f:0f:62:26:45:90:5f:9d:05:16:f6:9e:0a:b8:b7:6b:5d:0b:
         80:a7:7c:89:fc:88:b3:0b:60:94:95:78:69:40:24:80:42:fe:
         3a:0f:51:af:59:3a:e9:77:d7:2b:d9:98:3f:2c:3b:6d:e7:e4:
         13:b0:fb:c1:fd:a7:39:7f:89:dc:4f:ac:5e:6f:13:bb:af:39:
         03:45:64:60:24:70:cb:a4:f6:53:b0:89:1f:98:0e:37:af:b3:
         f6:83:39:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:15 2024 by rpki-client on console-fra.rpki-client.org