Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F928BFE84F911EE93810F5B4AD9E6FC.roa
File:                     1F928BFE84F911EE93810F5B4AD9E6FC.roa (raw, json)
Hash identifier:          9WnecNnYEdEXt7eJXVdcv/iVuLgu5Va9/jZnGCfdgv8=
Subject key identifier:   74:F7:55:FC:4D:27:7C:98:AA:A9:54:74:44:31:26:74:8B:83:1C:45
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       507F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F928BFE84F911EE93810F5B4AD9E6FC.roa
Signing time:             Fri 17 Nov 2023 03:26:41 +0000
ROA not before:           Fri 17 Nov 2023 03:26:38 +0000
ROA not after:            Tue 12 Nov 2024 03:26:38 +0000
asID:                     397630
IP address blocks:        154.83.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20607 (0x507f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 17 03:26:38 2023 GMT
            Not After : Nov 12 03:26:38 2024 GMT
        Subject: CN=6556dd71-08f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5c:d9:c7:a4:12:b4:16:e5:ad:c0:ad:30:ff:
                    1f:ea:a5:ca:3d:09:f4:77:97:57:2a:09:58:10:dd:
                    6b:e9:5d:be:e1:65:35:f2:74:52:f9:bf:86:87:09:
                    0f:13:07:61:15:bb:fb:c5:a4:46:e5:4e:ae:95:42:
                    16:82:a7:69:2e:e7:e5:7f:cc:31:fc:84:52:b7:cf:
                    47:fd:ec:08:1e:10:60:ab:60:07:92:66:1b:ba:e9:
                    18:2c:d7:13:61:9f:23:5d:66:86:80:48:af:61:5d:
                    b0:f6:90:77:3b:9d:93:a8:13:a2:03:95:6e:27:56:
                    14:4f:2c:a0:3c:bd:28:7b:f9:34:21:9f:4d:8c:01:
                    ee:03:b1:91:ec:ce:50:36:6a:57:6e:17:2d:12:e7:
                    78:f5:bc:81:6c:57:83:4b:e3:ea:79:c7:07:2f:a0:
                    83:74:90:03:48:63:2f:aa:82:cf:17:97:9a:92:bc:
                    81:56:a1:5d:53:3c:b8:0f:30:35:4f:eb:21:33:4c:
                    13:e3:43:c7:0f:b6:7d:fa:17:66:5d:84:c6:9a:bf:
                    be:b7:0f:e7:79:e7:fe:5c:7e:79:43:da:a2:d3:6c:
                    4b:fe:7a:95:a7:d9:cc:1e:70:3e:f7:08:10:33:de:
                    5e:cb:4a:b4:a3:48:3c:25:a2:35:85:89:bb:65:10:
                    84:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F7:55:FC:4D:27:7C:98:AA:A9:54:74:44:31:26:74:8B:83:1C:45
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F928BFE84F911EE93810F5B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:59:f2:db:cd:e2:c1:c6:fe:fb:82:4e:5e:26:8b:96:ae:ad:
         64:e7:44:e7:13:f6:87:aa:ad:cb:b6:a4:47:fa:11:e5:a2:39:
         1e:c6:96:00:b5:d4:d0:7c:9b:3f:63:ce:ad:e9:5a:72:79:7d:
         1a:ee:95:27:58:23:d5:b4:6f:87:b6:d4:9f:e6:d2:2a:c2:c5:
         67:70:55:38:57:80:ad:9a:9f:5b:74:b1:c4:4e:83:4c:d5:ff:
         b1:de:00:a5:e6:79:73:9c:af:c3:4d:6d:85:f3:ae:cc:dc:30:
         ef:b7:aa:12:32:88:b2:aa:ee:ce:e4:48:66:12:52:09:f7:aa:
         18:f2:c9:d9:dc:47:86:ba:90:bd:b9:73:30:00:17:0a:99:b7:
         81:32:e6:c0:3c:58:99:e3:c3:c9:d0:94:12:a3:31:e2:d2:69:
         98:1f:9e:63:f8:b1:d1:fa:be:2f:99:c0:98:47:6f:a7:d9:b9:
         1a:be:5b:75:92:26:8e:62:96:a4:62:87:ce:57:bc:ea:4f:76:
         58:b5:ff:47:ff:ec:ff:82:ae:3d:5c:27:fd:a4:73:a0:4c:3d:
         68:77:46:48:44:af:6d:8d:81:7b:d8:9d:d2:60:54:b3:dd:89:
         b4:fc:24:e2:24:fd:82:ea:9c:95:26:30:02:ec:4d:9d:7f:01:
         a3:2b:6f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:03 2024 by rpki-client on console-ams.rpki-client.org