Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17E61094FDCA11EDB47FAC5B4AD9E6FC.roa
File:                     17E61094FDCA11EDB47FAC5B4AD9E6FC.roa (raw, json)
Hash identifier:          +Gcx8OmdoYN1rKCO52hqulzYplr3pas2q8y/8yw7lxk=
Subject key identifier:   07:8A:F5:F8:C7:D8:65:CB:A0:C1:09:A4:ED:A5:3D:6B:66:7E:7D:10
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2826
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17E61094FDCA11EDB47FAC5B4AD9E6FC.roa
Signing time:             Mon 29 May 2023 02:39:55 +0000
ROA not before:           Mon 29 May 2023 02:39:50 +0000
ROA not after:            Wed 15 May 2024 02:39:50 +0000
asID:                     63888
IP address blocks:        154.207.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10278 (0x2826)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 29 02:39:50 2023 GMT
            Not After : May 15 02:39:50 2024 GMT
        Subject: CN=6474107a-4ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b8:79:c7:b3:27:16:4c:15:38:46:5c:eb:45:
                    a7:91:f4:fa:92:3b:e2:c2:22:3c:86:36:bf:66:92:
                    68:b1:27:ec:7c:7f:34:3b:bb:db:23:77:24:c1:3d:
                    4e:5a:2b:a7:d5:1f:b8:ec:94:d2:c6:82:d6:a9:f4:
                    67:45:fa:58:d7:21:ba:d2:c2:ee:88:62:3b:1b:f2:
                    6f:ba:b1:16:52:5b:cf:a7:77:77:67:a4:66:db:4b:
                    54:86:18:06:62:85:a9:27:65:7b:4b:e6:d4:e0:06:
                    1f:2d:f9:e7:0e:4a:22:c5:ba:81:01:28:0c:b3:9d:
                    0f:4f:d4:ef:5e:2b:81:79:ac:6c:da:9a:23:4a:6f:
                    9c:de:94:38:2e:77:f7:4b:cc:cc:ef:c1:0d:fd:f3:
                    41:15:c0:e6:3e:3e:54:fa:f6:37:a9:6c:3e:6f:94:
                    15:36:3b:5c:10:76:80:d8:74:a8:17:28:21:b2:8b:
                    29:6f:05:a3:6d:b8:3e:b5:58:f4:f2:87:76:d9:9d:
                    9e:d7:3f:d5:b8:0e:f6:bc:49:99:22:3d:6d:37:40:
                    99:5b:f5:63:3d:dd:de:98:62:5a:e0:36:3d:06:9c:
                    94:ae:b2:61:fa:b9:29:97:6f:54:48:a8:95:25:69:
                    58:68:68:04:63:f0:7a:7f:38:8f:3d:7e:42:9c:7e:
                    56:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8A:F5:F8:C7:D8:65:CB:A0:C1:09:A4:ED:A5:3D:6B:66:7E:7D:10
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17E61094FDCA11EDB47FAC5B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:07:2a:d4:a9:0b:29:8e:6d:76:d5:bf:a0:3d:c0:c0:9d:86:
         56:46:a5:4f:b6:80:cf:07:49:90:16:f5:c4:be:6d:0f:09:a5:
         24:6c:d1:45:8e:d3:ab:3d:5b:1f:25:d5:bf:90:f9:36:7b:15:
         fa:d5:46:24:87:82:42:bc:b4:dc:bc:24:39:5c:45:4f:aa:54:
         0a:71:ed:e2:ae:37:9a:ed:e5:3e:29:e0:0b:1d:7d:b6:63:de:
         14:a9:5f:9b:68:85:9b:a0:5e:02:f6:f1:18:d5:2d:62:86:0b:
         5f:4f:44:03:4e:10:7d:de:36:ae:a1:65:31:9d:4c:59:f4:c7:
         e8:bc:11:8c:36:a1:52:9f:69:67:6a:a7:c0:fd:a5:fa:23:dd:
         81:6d:8a:33:9d:fa:f4:a5:e1:2b:8b:de:3b:29:34:a5:37:b5:
         c4:a0:fc:bc:11:00:8d:38:b4:00:4d:1a:31:a3:0c:e0:d1:dd:
         d2:91:6c:c5:5e:17:c0:af:01:5e:bd:40:c2:7b:3d:d8:dd:2b:
         6c:c2:d8:52:ac:6b:15:aa:8f:9d:ed:fd:7b:e7:46:47:96:90:
         c1:d8:94:88:4d:59:2e:68:58:8f:3f:fe:6a:c6:33:36:c1:7b:
         26:76:56:b9:7d:61:9b:2d:1c:ad:dd:f0:31:ad:24:b7:b5:9a:
         50:7d:e3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:16 2024 by rpki-client on console-fra.rpki-client.org