Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A0F8E1853A111EEA96034634AD9E6FC.roa
File:                     1A0F8E1853A111EEA96034634AD9E6FC.roa (raw, json)
Hash identifier:          wOSrhNTkOhi0H2VMzuE7BASRgurqOCRE92J5F7DeEWo=
Subject key identifier:   1C:5D:6D:D0:3F:9A:91:42:2F:2E:8C:5D:D0:79:EE:E2:9C:2E:F8:09
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       3D8B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A0F8E1853A111EEA96034634AD9E6FC.roa
Signing time:             Fri 15 Sep 2023 08:23:09 +0000
ROA not before:           Fri 15 Sep 2023 08:23:06 +0000
ROA not after:            Sat 08 Jun 2024 08:23:06 +0000
asID:                     142403
IP address blocks:        154.221.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15755 (0x3d8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 08:23:06 2023 GMT
            Not After : Jun  8 08:23:06 2024 GMT
        Subject: CN=6504146d-7c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:09:2a:79:ee:5a:8b:d0:d9:6a:59:ad:82:89:
                    2c:36:8c:26:ff:f5:c9:5a:da:05:d2:0d:05:03:75:
                    d5:e8:dd:f3:e4:c6:a4:bf:50:82:53:3f:4a:3f:e2:
                    c0:9c:d3:e6:2c:7a:e2:8c:d8:2a:fc:13:72:71:95:
                    60:00:b2:ac:43:4d:18:88:b6:cc:99:6c:0e:73:13:
                    09:1c:72:39:91:78:85:df:3d:d1:31:5a:59:85:1d:
                    19:88:0b:45:77:5a:77:fc:73:88:97:25:26:6f:03:
                    1f:67:4e:87:07:d2:f0:ca:74:29:27:1c:2e:90:bb:
                    38:ed:85:62:27:79:c7:5a:a3:d4:8c:99:5b:03:90:
                    0e:de:b9:d6:52:4d:a3:21:5f:8d:90:e1:50:73:c1:
                    0a:ec:39:9a:73:0c:7d:cb:85:ac:b3:b2:f6:a1:89:
                    8e:e5:ed:06:ed:b2:80:32:f2:71:a6:17:07:35:f9:
                    e0:53:4d:35:fa:1f:e1:ca:38:0c:52:b6:7c:19:f6:
                    aa:88:60:d1:32:ab:fe:0c:21:da:f2:38:fe:5f:23:
                    c1:e1:52:b3:89:b4:be:f2:07:e5:7e:72:36:5a:8d:
                    cc:a9:a2:e8:38:6d:31:b2:72:7b:61:66:b3:aa:47:
                    4f:06:4f:7e:63:21:aa:39:48:d4:29:95:fb:7a:af:
                    7c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5D:6D:D0:3F:9A:91:42:2F:2E:8C:5D:D0:79:EE:E2:9C:2E:F8:09
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A0F8E1853A111EEA96034634AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.221.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:eb:ae:50:eb:9f:c5:77:a8:a9:79:5f:cd:bd:77:1c:85:c8:
         0e:ca:bd:1d:cc:e6:2b:6d:5e:f9:b4:b9:fc:66:13:ea:9d:92:
         62:f5:1c:ad:6c:8d:63:4c:e9:d1:82:88:7d:72:f7:42:27:fc:
         13:ad:1f:24:da:4e:fa:11:42:59:58:39:a1:e1:f3:aa:7b:3a:
         b3:8a:a3:cb:e3:77:49:82:9c:05:13:4a:77:29:80:6d:12:7e:
         27:7b:77:38:71:9d:df:c4:63:19:37:6a:43:95:ba:9d:7f:65:
         cd:8e:63:2e:13:75:42:08:8d:5d:bc:8e:3f:12:98:90:2b:35:
         3f:45:f0:9a:fe:c7:5e:8e:4a:05:5e:e2:9a:e2:4f:d8:a9:10:
         61:8c:dd:b1:6d:3c:78:07:83:78:9a:d4:00:18:e5:bc:5e:b2:
         86:58:46:3a:a2:a1:cf:a3:87:48:38:d6:2f:44:f7:1d:ec:4a:
         31:06:b3:cf:83:3e:f9:88:8d:d6:ac:b0:f0:83:4d:27:6b:24:
         1e:90:f6:78:e6:47:44:c6:79:d8:a6:cb:bc:d1:cb:62:1a:8d:
         bf:5b:65:7c:ba:b0:54:c8:e3:4a:8d:f8:6f:d3:09:3d:86:eb:
         f1:ed:75:61:33:82:6e:cb:7c:21:f3:99:e8:02:e3:9c:8b:ac:
         cf:95:69:3c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICPYswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA5MTUwODIzMDZaFw0yNDA2MDgwODIzMDZaMBgxFjAU
BgNVBAMTDTY1MDQxNDZkLTdjOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCdCSp57lqL0NlqWa2CiSw2jCb/9cla2gXSDQUDddXo3fPkxqS/UIJTP0o/
4sCc0+YseuKM2Cr8E3JxlWAAsqxDTRiItsyZbA5zEwkccjmReIXfPdExWlmFHRmI
C0V3Wnf8c4iXJSZvAx9nTocH0vDKdCknHC6QuzjthWInecdao9SMmVsDkA7eudZS
TaMhX42Q4VBzwQrsOZpzDH3LhayzsvahiY7l7QbtsoAy8nGmFwc1+eBTTTX6H+HK
OAxStnwZ9qqIYNEyq/4MIdryOP5fI8HhUrOJtL7yB+V+cjZajcypoug4bTGycnth
ZrOqR08GT35jIao5SNQplft6r3xDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUHF1t
0D+akUIvLoxd0Hnu4pwu+AkwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzFBMEY4RTE4NTNBMTExRUVBOTYwMzQ2MzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa3RkwDQYJKoZIhvcNAQEL
BQADggEBADzrrlDrn8V3qKl5X829dxyFyA7KvR3M5ittXvm0ufxmE+qdkmL1HK1s
jWNM6dGCiH1y90In/BOtHyTaTvoRQllYOaHh86p7OrOKo8vjd0mCnAUTSncpgG0S
fid7dzhxnd/EYxk3akOVup1/Zc2OYy4TdUIIjV28jj8SmJArNT9F8Jr+x16OSgVe
4priT9ipEGGM3bFtPHgHg3ia1AAY5bxesoZYRjqioc+jh0g41i9E9x3sSjEGs8+D
PvmIjdassPCDTSdrJB6Q9njmR0TGedimy7zRy2Iajb9bZXy6sFTI40qN+G/TCT2G
6/HtdWEzgm7LfCHzmegC45yLrM+VaTw=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:03 2024 by rpki-client on console-ams.rpki-client.org