Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12871950EFF411EEAA5B67AD775412E6.roa
File:                     12871950EFF411EEAA5B67AD775412E6.roa (raw, json)
Hash identifier:          BDL53DwWwrWIy28I7Ahv/iU91pDW6E/zl+9xEp7ybas=
Subject key identifier:   A9:12:01:27:32:27:88:F2:D0:91:CC:E1:2A:BD:6D:23:50:02:0C:23
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A7E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12871950EFF411EEAA5B67AD775412E6.roa
Signing time:             Mon 01 Apr 2024 06:50:06 +0000
ROA not before:           Mon 01 Apr 2024 06:50:02 +0000
ROA not after:            Tue 07 May 2024 06:50:02 +0000
asID:                     138915
IP address blocks:        154.223.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42978 (0xa7e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr  1 06:50:02 2024 GMT
            Not After : May  7 06:50:02 2024 GMT
        Subject: CN=660a591e-adee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bc:3c:fa:1a:ca:5b:a6:bd:4c:59:40:17:43:
                    e8:7b:7f:96:7e:0f:25:39:62:88:57:95:a8:7e:dd:
                    4d:37:4f:17:ef:09:0c:2b:de:70:3f:6d:8c:d3:6c:
                    4e:7f:4f:6d:2e:1d:10:d6:92:fe:e5:ea:26:86:87:
                    7a:6f:79:13:c4:f1:77:e7:64:ac:84:66:a9:07:30:
                    4f:42:1b:09:ec:ab:ef:20:43:52:bc:f0:ff:8f:94:
                    4d:76:42:23:d9:66:d3:75:a0:3d:77:26:8c:53:97:
                    fc:25:93:6c:9a:df:99:b6:7c:09:f1:81:34:16:fb:
                    c3:35:ac:8b:63:1c:07:38:be:b2:f1:9b:99:55:58:
                    78:e7:4c:ba:5c:01:ea:8c:ef:97:de:6b:da:9e:20:
                    8e:c6:67:71:ec:6b:3d:83:eb:d2:06:ab:9a:ef:e0:
                    f2:63:7f:02:a5:93:ae:30:7b:0b:22:91:60:0d:9c:
                    74:ef:72:f3:eb:81:04:a9:6c:9d:35:7c:db:e7:33:
                    5f:94:6e:0a:f5:a8:f3:82:8c:51:b6:36:b8:a6:d0:
                    5f:21:fa:ff:0a:12:bb:41:88:09:97:86:12:cd:8a:
                    31:15:17:3a:7d:3b:f8:12:fa:35:67:b4:7a:9a:5d:
                    76:12:c2:33:d5:c7:69:2f:15:ee:21:fa:5a:a6:52:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:12:01:27:32:27:88:F2:D0:91:CC:E1:2A:BD:6D:23:50:02:0C:23
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12871950EFF411EEAA5B67AD775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:de:90:6b:8a:5d:07:b9:9e:7c:cb:2d:ad:02:04:0e:3d:79:
         3d:5a:26:b4:c4:c4:a2:64:c8:2a:37:4c:3d:d7:82:76:de:fe:
         5e:9d:ae:dd:a7:03:25:c9:ad:2e:7f:bc:9f:a5:66:8c:ed:7c:
         ca:4d:fe:3b:26:94:43:ad:45:a2:d2:c2:7d:06:bf:65:5f:e0:
         d4:3a:6e:b8:a5:58:45:65:0b:ea:b7:18:32:0b:1d:f5:21:6f:
         ba:ff:de:1f:a4:f2:d8:ce:63:41:c0:7b:89:65:2c:85:3b:6d:
         a6:c6:47:e4:6f:0b:20:2f:22:80:2c:59:2b:4c:d7:c9:05:e4:
         bc:b5:15:b4:2f:2b:f0:da:96:16:bb:d4:be:a2:89:84:53:4f:
         8a:a9:4a:85:8a:cb:0e:33:7e:a1:ea:8f:2f:d4:90:0c:e1:da:
         56:73:ff:ec:8f:c0:45:7b:cb:3e:c6:45:b8:5f:c6:d1:c0:2c:
         6a:11:5c:c0:56:c6:a4:e6:10:3f:40:78:25:9e:05:93:a6:e0:
         e9:5d:ca:39:7f:45:28:d9:a8:97:be:10:1a:29:7e:20:16:43:
         05:62:d9:90:f0:e3:94:0b:20:be:57:c0:47:00:77:70:10:30:
         ef:6e:56:74:db:e2:4c:b8:c9:42:cb:bf:44:a9:35:4b:33:98:
         1e:1d:10:f7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKfiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDAxMDY1MDAyWhcNMjQwNTA3MDY1MDAyWjAYMRYw
FAYDVQQDEw02NjBhNTkxZS1hZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqbw8+hrKW6a9TFlAF0Poe3+Wfg8lOWKIV5Woft1NN08X7wkMK95wP22M
02xOf09tLh0Q1pL+5eomhod6b3kTxPF352SshGapBzBPQhsJ7KvvIENSvPD/j5RN
dkIj2WbTdaA9dyaMU5f8JZNsmt+ZtnwJ8YE0FvvDNayLYxwHOL6y8ZuZVVh450y6
XAHqjO+X3mvaniCOxmdx7Gs9g+vSBqua7+DyY38CpZOuMHsLIpFgDZx073Lz64EE
qWydNXzb5zNflG4K9ajzgoxRtja4ptBfIfr/ChK7QYgJl4YSzYoxFRc6fTv4Evo1
Z7R6ml12EsIz1cdpLxXuIfpaplKHkQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKkS
AScyJ4jy0JHM4Sq9bSNQAgwjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMjg3MTk1MEVGRjQxMUVFQUE1QjY3QUQ3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt9BMA0GCSqGSIb3DQEB
CwUAA4IBAQAB3pBril0HuZ58yy2tAgQOPXk9Wia0xMSiZMgqN0w914J23v5ena7d
pwMlya0uf7yfpWaM7XzKTf47JpRDrUWi0sJ9Br9lX+DUOm64pVhFZQvqtxgyCx31
IW+6/94fpPLYzmNBwHuJZSyFO22mxkfkbwsgLyKALFkrTNfJBeS8tRW0Lyvw2pYW
u9S+oomEU0+KqUqFissOM36h6o8v1JAM4dpWc//sj8BFe8s+xkW4X8bRwCxqEVzA
Vsak5hA/QHglngWTpuDpXco5f0Uo2aiXvhAaKX4gFkMFYtmQ8OOUCyC+V8BHAHdw
EDDvblZ02+JMuMlCy79EqTVLM5geHRD3
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:02 2024 by rpki-client on console-ams.rpki-client.org