Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22C7D7D2B22811EEB0EBF86A775412E6.roa
File:                     22C7D7D2B22811EEB0EBF86A775412E6.roa (raw, json)
Hash identifier:          fPqmlHfte0xkf9MUQr9ZFYyo0M5UFv1sytNadMnXXIw=
Subject key identifier:   60:1A:4A:F4:3D:F8:57:E0:42:6B:8E:E8:F2:9D:35:5B:E6:9F:FA:F5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       74CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22C7D7D2B22811EEB0EBF86A775412E6.roa
Signing time:             Sat 13 Jan 2024 15:26:35 +0000
ROA not before:           Sat 13 Jan 2024 15:26:31 +0000
ROA not after:            Sun 30 Jun 2024 15:26:31 +0000
asID:                     133748
IP address blocks:        154.81.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29902 (0x74ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 13 15:26:31 2024 GMT
            Not After : Jun 30 15:26:31 2024 GMT
        Subject: CN=65a2abab-6004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:4a:72:26:8b:a7:fc:d5:2d:d8:bb:8e:98:
                    43:c3:1d:75:e7:8e:07:2d:fe:e2:fe:75:45:51:d1:
                    3f:c3:5e:00:82:67:69:55:df:df:6a:f2:da:91:50:
                    b9:26:e6:be:9f:8e:0f:22:b8:e8:25:eb:3f:be:f3:
                    7d:0f:d0:1f:51:47:94:8b:32:f9:ca:03:fb:83:32:
                    58:03:d0:0a:95:87:ac:9a:64:21:b7:d2:1f:81:51:
                    67:e1:85:85:48:44:7a:a5:52:2f:59:fa:f3:05:15:
                    08:89:42:98:b7:bc:e4:75:cb:7e:ea:78:75:87:2d:
                    57:1c:3f:ed:9e:5d:bb:79:21:08:e7:29:4d:2a:db:
                    d2:15:2d:f9:bf:5d:53:58:21:28:c4:58:6d:d6:11:
                    f4:d5:cc:51:31:fd:4d:26:90:28:3c:8d:fb:25:be:
                    9e:70:2b:a7:ce:03:17:7f:28:4f:9d:c8:aa:5e:2f:
                    38:eb:2c:c2:9e:32:68:96:c3:d0:10:12:c1:c4:eb:
                    ac:06:12:5a:c8:f1:fb:18:9b:e2:a2:fd:e6:c3:ef:
                    2b:e1:c4:8a:aa:1e:93:c4:8a:79:8d:eb:53:f3:ed:
                    aa:06:75:04:bf:9a:cc:6e:c1:1e:d3:5f:14:c4:7d:
                    76:eb:b2:c5:3f:d6:de:12:72:52:3c:7f:6c:4a:f9:
                    70:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1A:4A:F4:3D:F8:57:E0:42:6B:8E:E8:F2:9D:35:5B:E6:9F:FA:F5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22C7D7D2B22811EEB0EBF86A775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:1a:19:b2:0a:ca:b1:4f:6b:21:6d:cb:b0:e9:70:21:f9:f6:
         88:f6:fc:45:84:d0:bf:07:d1:e4:8f:50:88:c8:e8:c1:ed:b0:
         69:07:9e:f5:ad:14:3f:27:9c:13:5f:4b:a8:c5:fb:15:04:de:
         2e:24:5e:86:d2:b3:60:64:0b:99:28:38:45:38:f0:8b:90:10:
         d8:30:6a:8e:2b:5d:7b:24:1d:a7:55:c9:29:b1:4c:37:f8:e9:
         fe:9c:58:5e:2c:04:e1:35:e0:19:43:38:5a:16:9f:1d:ab:a6:
         c4:d5:38:9e:0a:2c:06:6f:b6:f3:38:df:69:23:fb:2b:9f:12:
         36:1c:77:bd:7b:ba:60:9a:b2:6d:b8:d1:77:a7:cd:e8:67:9a:
         62:c8:61:00:5e:bd:d8:11:c2:a5:cf:72:53:f8:79:80:05:cf:
         de:03:3e:91:c7:9c:54:79:fa:44:24:0b:4b:6c:1b:d8:be:8e:
         25:b7:31:6e:79:72:82:2c:a0:76:97:3a:2f:26:1a:3e:52:30:
         02:5e:92:0b:3f:22:91:a6:1c:a8:a2:5d:f1:35:ad:76:18:d1:
         02:57:ca:b8:25:09:9b:e9:b0:7b:06:5b:68:96:0a:40:95:73:
         0d:34:90:91:65:c2:9e:eb:b9:1c:32:1c:33:e1:39:2d:05:54:
         60:7c:3c:3d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICdM4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yNDAxMTMxNTI2MzFaFw0yNDA2MzAxNTI2MzFaMBgxFjAU
BgNVBAMTDTY1YTJhYmFiLTYwMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6X0pyJoun/NUt2LuOmEPDHXXnjgct/uL+dUVR0T/DXgCCZ2lV399q8tqR
ULkm5r6fjg8iuOgl6z++830P0B9RR5SLMvnKA/uDMlgD0AqVh6yaZCG30h+BUWfh
hYVIRHqlUi9Z+vMFFQiJQpi3vOR1y37qeHWHLVccP+2eXbt5IQjnKU0q29IVLfm/
XVNYISjEWG3WEfTVzFEx/U0mkCg8jfslvp5wK6fOAxd/KE+dyKpeLzjrLMKeMmiW
w9AQEsHE66wGElrI8fsYm+Ki/ebD7yvhxIqqHpPEinmN61Pz7aoGdQS/msxuwR7T
XxTEfXbrssU/1t4SclI8f2xK+XBFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUYBpK
9D34V+BCa47o8p01W+af+vUwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzIyQzdEN0QyQjIyODExRUVCMEVCRjg2QTc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaUT0wDQYJKoZIhvcNAQEL
BQADggEBABsaGbIKyrFPayFty7DpcCH59oj2/EWE0L8H0eSPUIjI6MHtsGkHnvWt
FD8nnBNfS6jF+xUE3i4kXobSs2BkC5koOEU48IuQENgwao4rXXskHadVySmxTDf4
6f6cWF4sBOE14BlDOFoWnx2rpsTVOJ4KLAZvtvM432kj+yufEjYcd717umCasm24
0XenzehnmmLIYQBevdgRwqXPclP4eYAFz94DPpHHnFR5+kQkC0tsG9i+jiW3MW55
coIsoHaXOi8mGj5SMAJekgs/IpGmHKiiXfE1rXYY0QJXyrglCZvpsHsGW2iWCkCV
cw00kJFlwp7ruRwyHDPhOS0FVGB8PD0=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:17 2024 by rpki-client on console-fra.rpki-client.org