Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18BF9C30473811EEB37F3C564AD9E6FC.roa
File:                     18BF9C30473811EEB37F3C564AD9E6FC.roa (raw, json)
Hash identifier:          RHOBolQMo+4+kOs/WIFM8vHKBe4AqKk6+Jn5KHnAof0=
Subject key identifier:   9B:6F:1B:A7:11:74:2B:6C:20:A4:C3:EC:2B:92:9E:61:AA:8B:8C:4A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       3ADF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18BF9C30473811EEB37F3C564AD9E6FC.roa
Signing time:             Wed 30 Aug 2023 13:21:15 +0000
ROA not before:           Wed 30 Aug 2023 13:21:12 +0000
ROA not after:            Thu 08 Aug 2024 13:21:12 +0000
asID:                     133199
IP address blocks:        154.204.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15071 (0x3adf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 30 13:21:12 2023 GMT
            Not After : Aug  8 13:21:12 2024 GMT
        Subject: CN=64ef424b-0971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:76:b5:5e:76:be:74:4e:a8:fd:b8:83:7e:60:
                    35:1f:27:3f:60:2f:99:53:08:4a:94:4c:11:6d:d3:
                    48:8f:56:2f:0e:eb:07:6e:a6:e1:2e:d3:ca:78:79:
                    f3:c9:b4:e0:9d:86:f2:7b:3a:0b:4a:ea:d2:ce:46:
                    bb:03:ae:a7:47:e9:8b:97:85:a8:be:98:07:1e:84:
                    82:bd:4d:d1:a1:82:3d:a8:01:49:a6:e3:7e:a7:0a:
                    70:ba:5c:c1:43:9d:91:7c:b0:a7:c6:5f:46:b6:ee:
                    97:3d:ac:d0:69:38:65:74:8b:b7:35:2b:2e:7b:52:
                    32:d1:c8:3a:b1:09:8e:3d:06:59:98:46:ce:56:9d:
                    35:74:43:42:b4:a4:13:1f:1d:ba:59:92:79:5e:a5:
                    ea:1d:fb:de:97:ee:c0:8b:80:7a:f7:a5:a9:6b:3e:
                    5e:4d:32:14:e3:13:ed:8c:75:b5:10:0f:bc:d6:44:
                    66:33:50:05:4e:a0:b8:47:be:29:88:e8:8d:b3:9b:
                    90:1a:93:b1:e7:84:76:d8:88:b7:e9:b2:ef:b9:81:
                    e9:ed:2b:4a:27:b0:4a:87:ac:cf:5d:29:94:d3:9f:
                    a6:81:0f:0d:12:0f:e4:dd:ee:3f:dc:db:10:d0:50:
                    23:8f:e7:af:70:71:ec:0a:1f:61:f7:34:44:95:31:
                    d3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6F:1B:A7:11:74:2B:6C:20:A4:C3:EC:2B:92:9E:61:AA:8B:8C:4A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18BF9C30473811EEB37F3C564AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:a8:3e:fb:6e:b2:3f:77:8a:eb:a7:c0:9f:96:17:d5:d7:75:
         58:3a:12:29:d4:f9:a1:9d:88:35:8c:40:c4:87:5c:bb:99:60:
         ff:42:6a:5c:c6:f9:ea:36:2b:8b:b2:a2:bc:59:25:b6:2f:96:
         6f:50:7d:37:1e:4d:78:5f:88:d3:38:20:d3:35:bf:d0:17:94:
         24:96:d0:ce:f3:94:03:99:56:1c:2e:c7:ed:10:66:e5:86:be:
         7b:7b:2f:93:15:41:ae:07:44:fe:d2:95:15:c5:bd:c8:68:e1:
         1e:52:a6:f4:57:a2:f7:a2:ea:48:17:c7:71:5a:94:e4:52:88:
         58:09:39:0d:54:94:9b:83:ac:e5:ac:a8:26:f4:8e:1c:e1:ea:
         24:2a:bf:2e:52:32:c8:af:42:ac:4e:16:16:c7:5d:3d:e8:70:
         f9:06:2f:62:7d:d8:82:da:66:85:17:47:e4:38:6c:eb:b8:22:
         50:44:2f:f3:4e:17:0b:f1:c4:a2:52:e7:fb:d6:a9:59:30:48:
         08:83:af:76:df:31:f9:bf:25:ce:13:45:e0:c8:5e:72:1c:43:
         5f:b2:0c:9f:0b:70:51:ac:6c:fe:9f:64:32:73:94:5f:6a:65:
         c0:6a:90:90:fa:a2:97:51:4a:72:5a:f0:20:03:6a:3d:18:42:
         93:29:b2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:16 2024 by rpki-client on console-fra.rpki-client.org