Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1505176E278011EE8A1703184AD9E6FC.roa
File:                     1505176E278011EE8A1703184AD9E6FC.roa (raw, json)
Hash identifier:          P508aqxSMVwI93nAcmKj6NGk9XBMDHjBcW4Bz0CAZTQ=
Subject key identifier:   60:7C:0F:2D:96:83:2D:0C:AF:22:E5:FE:8D:B7:99:DE:DB:20:2A:44
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       3389
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1505176E278011EE8A1703184AD9E6FC.roa
Signing time:             Fri 21 Jul 2023 04:35:56 +0000
ROA not before:           Fri 21 Jul 2023 04:35:52 +0000
ROA not after:            Thu 13 Jun 2024 04:35:52 +0000
asID:                     7018
IP address blocks:        154.212.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13193 (0x3389)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 21 04:35:52 2023 GMT
            Not After : Jun 13 04:35:52 2024 GMT
        Subject: CN=64ba0b2c-3fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cb:06:25:35:57:fb:a4:9b:82:35:f1:34:53:
                    f9:ca:c9:64:1c:0a:16:d3:25:e6:92:17:16:a1:09:
                    07:c5:f6:c2:47:22:53:26:ac:1d:3d:58:99:6e:a1:
                    30:e2:cc:cc:2e:78:e7:02:ae:d9:b9:eb:9d:fd:f9:
                    6c:57:66:92:f0:08:62:0e:89:d7:81:15:04:41:b4:
                    e8:63:b7:31:76:ff:77:d1:d9:f5:fe:a1:5e:e4:3e:
                    9f:7f:8e:36:52:d6:fa:75:f4:4b:08:74:ad:18:62:
                    a3:6d:17:b5:91:a9:5d:ff:15:fa:6f:30:f3:68:62:
                    23:1d:61:b7:ea:99:4b:0d:6f:d0:b7:4e:53:87:d8:
                    5e:10:be:8c:5b:2f:1e:ee:57:cd:ce:d1:46:0f:73:
                    19:22:4f:14:f8:b9:1b:f7:63:08:75:8d:3b:46:e3:
                    34:4d:16:8c:a4:ee:a1:93:44:2f:1d:72:ec:00:ff:
                    10:ea:a5:ce:24:7b:92:e8:1b:03:72:4f:6b:22:3d:
                    bc:e7:1b:c1:04:3e:9e:21:bd:41:3a:48:dc:aa:42:
                    32:72:de:c0:ab:f5:95:dc:2b:6e:83:a3:a9:c7:a2:
                    e7:e4:37:8c:69:d3:9b:4f:9f:8a:c3:24:63:ab:9d:
                    1c:fa:95:44:b6:47:e5:78:c9:a9:fe:a5:6a:f3:31:
                    c7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7C:0F:2D:96:83:2D:0C:AF:22:E5:FE:8D:B7:99:DE:DB:20:2A:44
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1505176E278011EE8A1703184AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.212.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:cd:d0:e7:3a:8b:56:f2:29:6b:0b:8a:89:bc:32:d1:34:ff:
         6c:8e:e2:f2:2d:1a:6b:4d:e4:76:4b:d3:31:15:9b:23:86:f1:
         d8:03:cf:a6:10:35:00:0b:ba:b3:93:65:c2:dd:81:ae:98:be:
         32:26:c4:08:b4:02:c7:90:36:8b:5e:fc:00:70:45:e6:05:66:
         4a:d6:e2:72:30:de:79:b3:fb:71:6a:05:3c:bc:6d:f3:c9:d9:
         e7:9c:4e:48:ff:37:49:86:4d:31:5b:c1:2e:20:c2:0f:5d:7d:
         ad:75:50:18:72:3c:4b:83:89:18:dc:9c:b4:74:fe:5e:b9:ef:
         3b:1f:43:bc:4e:3e:be:12:a0:44:a9:30:35:13:b6:03:1a:35:
         48:6f:ca:ed:ea:40:1b:ee:9b:96:5d:6a:b3:ad:38:6e:dc:07:
         f6:54:f4:6b:32:75:39:3c:be:1d:9b:91:02:95:a4:d8:07:a7:
         6c:67:0a:1b:51:53:2b:87:dd:e1:bc:49:e0:2e:93:be:20:19:
         b3:ef:eb:65:65:51:ad:e4:37:26:b9:61:cd:0f:d8:c3:01:ec:
         a8:9b:23:c4:7a:57:50:3b:54:da:5d:76:2f:c1:ab:4b:10:5c:
         a6:ad:a8:44:63:70:2a:14:78:75:a9:49:70:e9:f2:76:30:09:
         ec:b6:8d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:03 2024 by rpki-client on console-ams.rpki-client.org