Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CCD46F81FE511EEA8EF1D524AD9E6FC.roa
File:                     1CCD46F81FE511EEA8EF1D524AD9E6FC.roa (raw, json)
Hash identifier:          Wzj9peluawhfGFWxl8NvY0mts1u2L30s//Uv4geFPYg=
Subject key identifier:   57:B5:DF:3A:D7:F3:26:27:C6:E7:A9:95:49:33:FD:F2:60:DB:6B:B4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       31A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CCD46F81FE511EEA8EF1D524AD9E6FC.roa
Signing time:             Tue 11 Jul 2023 12:18:59 +0000
ROA not before:           Tue 11 Jul 2023 12:18:55 +0000
ROA not after:            Thu 13 Jun 2024 12:18:55 +0000
asID:                     139811
IP address blocks:        154.210.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12708 (0x31a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 11 12:18:55 2023 GMT
            Not After : Jun 13 12:18:55 2024 GMT
        Subject: CN=64ad48b3-3e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b5:56:67:90:2c:21:60:c1:f2:7d:ee:ae:f9:
                    9a:d1:e3:52:64:84:4e:df:56:27:86:7c:55:b0:1a:
                    f1:ee:03:f2:e0:a4:87:15:69:50:6d:ca:56:d0:a7:
                    83:1f:33:19:56:af:4b:2f:26:60:23:7d:c2:c5:f8:
                    f3:1f:87:4f:7a:c0:70:51:c7:9e:1a:7f:ee:02:79:
                    ca:17:d3:ae:a2:01:67:55:1d:10:69:f0:8d:ca:6b:
                    1c:76:f8:c1:ae:9d:0e:1e:8c:3e:14:dc:de:bf:7b:
                    96:fd:20:8d:99:d7:e7:4c:c3:76:f8:6c:fc:67:8b:
                    d6:15:78:b8:ef:4e:c9:e7:10:61:13:68:5a:af:fc:
                    df:df:53:97:a8:10:e2:95:86:37:9f:e5:14:2b:c5:
                    3d:48:f2:07:e3:7c:85:9c:a6:a5:99:c1:c9:a2:44:
                    8a:63:4d:33:ad:65:f4:f1:c5:8f:62:6a:c7:ca:7b:
                    2b:e9:43:3d:52:6c:c3:ff:7d:ec:17:4b:28:c6:45:
                    16:d7:79:da:c8:2a:bb:ed:e0:cd:eb:27:85:4d:77:
                    94:16:07:12:6a:b9:fd:cc:d9:fe:42:eb:31:a7:ed:
                    d2:7f:41:ef:da:d2:69:80:80:35:a0:83:6b:02:3b:
                    6c:a5:ff:6d:8a:49:1f:3b:b5:33:44:aa:59:a8:64:
                    c1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B5:DF:3A:D7:F3:26:27:C6:E7:A9:95:49:33:FD:F2:60:DB:6B:B4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CCD46F81FE511EEA8EF1D524AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:65:33:15:1c:e8:1f:35:68:51:6a:8b:1d:f8:98:e5:87:c7:
         23:6a:b7:eb:92:36:8e:b6:61:17:b1:0d:48:a3:44:cf:f0:6a:
         a7:5c:c0:e6:37:3a:43:f2:8d:11:62:98:d4:b2:35:ea:26:bc:
         69:e4:e8:10:4d:f2:3c:47:40:e4:db:c2:96:66:96:33:ef:4a:
         31:10:0a:5b:82:f5:7e:15:aa:b0:72:85:13:db:7a:79:7c:d4:
         8a:ba:21:e6:b9:8a:15:92:ec:76:72:bd:dc:bd:e0:c1:7d:f0:
         d0:16:84:74:c6:76:aa:7e:53:0a:71:00:2c:0a:52:82:f7:0a:
         71:c6:91:3d:42:d3:33:87:0e:b9:3a:fd:3c:f4:1a:05:70:c7:
         a9:02:15:ca:8f:3c:31:bc:d4:4c:e3:9d:bf:f5:1f:42:1c:5c:
         68:90:9e:99:d0:94:f6:47:82:07:78:c6:30:1e:d4:bf:95:d5:
         eb:79:72:dc:b3:a5:84:dd:cf:6a:de:50:17:7b:10:b5:f2:21:
         77:d2:2f:1a:13:2c:68:ab:2a:67:86:b6:d4:29:5a:dc:fc:8a:
         85:da:69:f4:43:70:25:97:3d:29:19:4a:7d:c6:91:7c:26:27:
         03:9c:24:fb:13:98:1d:f7:08:65:fb:4c:c3:cc:6f:f0:e0:b1:
         98:bb:12:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:17 2024 by rpki-client on console-fra.rpki-client.org