Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E74CE8AFBAB11EEBCC9781B017001B1.roa
File:                     0E74CE8AFBAB11EEBCC9781B017001B1.roa (raw, json)
Hash identifier:          9uFtJ/z9HwAVNbCn/ax+P+zHCRt+QA8wQ4kWuLLzSdM=
Subject key identifier:   B6:22:AD:4E:A7:5B:48:B2:C6:B5:8B:4D:64:14:EC:B0:7A:D7:E3:98
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       ADAF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E74CE8AFBAB11EEBCC9781B017001B1.roa
Signing time:             Tue 16 Apr 2024 04:37:40 +0000
ROA not before:           Tue 16 Apr 2024 04:37:36 +0000
ROA not after:            Thu 30 May 2024 04:37:36 +0000
asID:                     63139
IP address blocks:        154.94.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44463 (0xadaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 16 04:37:36 2024 GMT
            Not After : May 30 04:37:36 2024 GMT
        Subject: CN=661e0093-e9bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3f:d2:5b:cb:04:5e:d5:66:e7:e8:02:24:18:
                    db:02:36:96:b6:44:36:ed:c5:7e:ca:df:4f:f0:7c:
                    c5:6b:8b:48:2b:a3:ea:ea:bb:ac:7e:d9:14:71:21:
                    52:7f:f8:01:e0:cd:10:c9:7f:aa:ed:cf:af:15:8a:
                    34:a2:0e:d4:ff:0c:c1:e0:65:4b:5c:50:06:f5:1a:
                    ac:81:ab:74:32:7d:80:cb:94:ab:66:9b:b4:09:8c:
                    d1:f1:75:94:19:7a:ac:27:f2:b3:77:96:8a:77:f6:
                    f0:bd:c8:67:a0:5d:cb:41:c9:65:8a:53:e5:03:86:
                    7c:18:5e:c3:49:b5:80:8b:35:79:4c:91:4a:8d:ef:
                    f3:f1:f6:5a:7e:60:aa:95:8c:e3:8d:77:2a:d7:00:
                    b7:12:9e:dc:2c:8d:ec:07:66:11:62:5b:74:09:03:
                    05:e3:6b:09:e2:60:b8:a0:7f:9e:b7:35:85:05:bb:
                    9d:52:ff:35:d1:74:93:5a:c9:28:46:43:9c:12:c4:
                    f7:79:ba:2c:f9:28:41:a8:b2:cb:cd:55:8c:d7:23:
                    15:7a:31:b8:7e:9c:cc:ee:fe:3f:c6:31:1b:ea:22:
                    89:6a:1a:41:e2:09:4a:d1:c3:e5:5d:64:82:fa:72:
                    c8:d9:cd:91:0a:ce:a3:48:8f:40:4a:3d:c7:16:64:
                    80:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:22:AD:4E:A7:5B:48:B2:C6:B5:8B:4D:64:14:EC:B0:7A:D7:E3:98
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E74CE8AFBAB11EEBCC9781B017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:e7:36:9e:5a:29:f4:a7:3e:62:7a:db:1e:88:ef:15:64:4c:
         76:9e:0a:ef:49:69:cf:03:6b:5c:be:02:29:47:2a:fe:a1:3e:
         a0:1b:2b:09:55:1a:db:88:7a:83:a3:a5:6c:90:a3:6f:0f:bf:
         6a:27:60:e0:d7:68:8f:eb:60:3a:d4:6f:90:ed:29:cf:2e:a1:
         6e:9f:e3:cb:e6:f6:7c:01:14:3c:ed:bb:96:61:12:16:09:a3:
         97:02:35:16:e3:10:56:f4:71:a1:32:16:58:79:ae:61:97:72:
         6b:be:43:ef:f0:93:7f:bc:62:c7:b0:68:f3:60:e0:1e:30:6c:
         99:05:31:d7:cd:70:cd:73:9d:e0:37:4d:96:4e:df:69:3c:60:
         85:dc:9c:7e:65:e5:06:49:da:d2:5b:14:6b:71:7d:89:91:9d:
         00:ed:33:28:7e:4c:d8:10:1d:0f:88:7f:72:c8:e5:e9:67:01:
         96:60:8e:a3:17:1c:44:b3:1d:6b:7f:ec:a4:52:3a:00:1b:80:
         ac:59:0a:11:03:fd:c6:10:cc:12:3d:4d:62:eb:af:b6:87:d6:
         16:ea:d6:90:2e:b7:53:7d:be:c7:77:66:4d:16:55:a4:5c:bd:
         31:0b:3a:6b:42:40:ea:0a:48:8e:74:49:2f:a8:98:de:62:f6:
         9e:eb:d7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:02 2024 by rpki-client on console-ams.rpki-client.org