Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D5D0C48F91A11EDA846B6214AD9E6FC.roa
File:                     2D5D0C48F91A11EDA846B6214AD9E6FC.roa (raw, json)
Hash identifier:          Gxb+e582MtpxRQphMjGCZqDv91h5d4TPOZSlTCIA5KY=
Subject key identifier:   16:2F:D6:BB:07:89:2A:13:15:15:07:7F:B2:64:0C:EF:67:E8:E0:F4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2666
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D5D0C48F91A11EDA846B6214AD9E6FC.roa
Signing time:             Tue 23 May 2023 03:30:34 +0000
ROA not before:           Tue 23 May 2023 03:30:30 +0000
ROA not after:            Mon 05 Aug 2024 03:30:30 +0000
asID:                     58879
IP address blocks:        154.209.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9830 (0x2666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 23 03:30:30 2023 GMT
            Not After : Aug  5 03:30:30 2024 GMT
        Subject: CN=646c335a-5f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fe:49:b6:23:71:4c:fb:38:15:64:6a:a0:20:
                    ec:88:23:2f:50:03:09:0f:21:da:c0:fa:a0:ab:b0:
                    53:72:0d:21:2f:c2:41:a5:e8:46:55:6b:5c:51:10:
                    e3:84:dc:b2:76:bc:fb:25:76:15:43:eb:0e:b7:d2:
                    f8:bf:08:92:b8:fb:54:a1:cb:00:7f:66:41:21:21:
                    7e:bf:cd:11:fe:55:aa:ea:b7:77:08:82:0c:88:81:
                    cc:39:c4:bb:e3:ee:9f:37:3f:1e:0e:da:6f:dc:de:
                    54:4c:38:b9:49:5d:56:ff:f5:9e:e5:f1:15:af:51:
                    35:43:51:57:23:cc:8b:8c:b1:c1:2c:02:f9:4a:1d:
                    79:6d:b1:2c:7d:78:a7:aa:49:e4:e7:2e:c0:ba:a3:
                    12:e5:c9:38:f2:fb:a5:b9:2a:24:d9:20:91:cf:af:
                    c0:4b:1e:7f:6c:db:82:fa:5d:89:a1:1a:52:dd:56:
                    22:b7:98:68:10:77:09:7c:d6:6d:3c:f2:60:24:5b:
                    bf:90:7b:68:d8:2a:dd:cd:1a:cd:39:c3:e1:a5:fe:
                    6e:74:9a:6b:c6:c0:f2:71:c6:fe:a2:92:93:23:16:
                    c8:63:83:7f:f2:9b:40:4c:39:74:9e:e6:cf:bb:c6:
                    4c:3c:9f:61:ce:91:a6:a8:86:01:97:4b:e1:b1:10:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2F:D6:BB:07:89:2A:13:15:15:07:7F:B2:64:0C:EF:67:E8:E0:F4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D5D0C48F91A11EDA846B6214AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:9b:71:ec:bb:16:cb:1a:f2:39:e4:ec:9f:2f:d5:83:fd:fa:
         c4:c3:3f:ed:90:76:cc:2d:b2:c2:23:25:8d:74:ec:75:f6:7d:
         ae:1e:55:66:49:ce:bf:83:3c:3e:91:7e:ed:eb:04:d2:cb:8f:
         1a:27:13:5d:7f:a0:fd:95:b1:e4:17:b8:c4:3f:ee:fe:ac:47:
         92:36:f6:74:a9:20:2a:52:f7:03:3f:cb:a4:22:5d:bf:a4:22:
         0b:88:47:9a:86:44:00:f6:eb:eb:c2:3f:2d:2e:14:cf:6c:68:
         60:c7:0d:64:d2:78:e4:fc:ab:dd:78:da:31:f8:d5:31:12:e5:
         54:a9:2b:96:d3:b0:3e:53:ed:97:4b:17:08:11:6a:b0:92:1e:
         f4:82:75:4a:a0:f3:02:9a:41:16:10:f9:e9:0a:fe:96:d3:13:
         74:af:f9:65:f3:0d:1e:c4:ff:87:9e:b2:82:cc:a7:a3:b7:da:
         3a:1f:e1:14:76:b0:ba:04:82:4e:0a:db:61:c6:ec:c5:b9:38:
         2f:49:f8:cf:c4:cc:fa:19:6a:7c:a5:a8:ca:c8:06:49:76:98:
         e5:8a:1f:a6:08:39:ca:54:08:82:62:71:c2:ff:3f:a3:9a:a3:
         6a:96:f1:df:72:d2:1a:87:f3:15:71:1b:ce:00:af:d5:34:ab:
         4e:79:0f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:05 2024 by rpki-client on console-ams.rpki-client.org