Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E242F5871BA11EEAC012A5A4AD9E6FC.roa
File:                     2E242F5871BA11EEAC012A5A4AD9E6FC.roa (raw, json)
Hash identifier:          u3qLb84INPd4favzDjssQ+b7dxXWlHCpvso0zvxCvR4=
Subject key identifier:   A1:24:82:1C:10:18:0A:F9:03:EA:94:26:92:E6:57:D3:CA:06:E5:C8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       46F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E242F5871BA11EEAC012A5A4AD9E6FC.roa
Signing time:             Mon 23 Oct 2023 15:38:15 +0000
ROA not before:           Mon 23 Oct 2023 15:38:11 +0000
ROA not after:            Thu 17 Oct 2024 15:38:11 +0000
asID:                     137443
IP address blocks:        154.91.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18162 (0x46f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 23 15:38:11 2023 GMT
            Not After : Oct 17 15:38:11 2024 GMT
        Subject: CN=65369367-eea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a9:a9:78:a9:da:e6:a9:87:c3:30:18:25:48:
                    69:5c:d7:02:4d:59:df:e9:7c:44:94:82:b0:ad:63:
                    96:5f:2e:36:ff:1f:26:63:48:68:0c:c3:c6:f8:b2:
                    56:3a:a7:da:09:37:de:96:60:50:1e:57:fe:29:05:
                    a7:d8:ff:f9:b6:c5:6c:83:cc:bf:86:bc:c7:36:66:
                    a2:25:89:aa:4b:28:34:2a:5a:4d:36:c9:43:65:8d:
                    f7:64:9a:f2:15:e4:7d:d0:a3:30:4f:05:f8:cd:df:
                    a0:a1:31:85:58:00:68:46:86:0e:a1:7b:33:ca:94:
                    01:76:e0:74:10:76:c7:92:73:3c:73:d0:1c:33:54:
                    c3:77:1d:b7:49:9c:c9:d6:39:ef:9c:c2:b4:79:b8:
                    bb:20:59:1d:86:3c:39:a1:ec:d2:3e:fd:9b:40:f0:
                    f0:5b:8d:0d:30:83:00:73:dc:0e:58:ea:20:c4:a4:
                    74:13:17:de:25:80:9a:4e:31:71:10:c2:ed:6e:3e:
                    51:d7:b3:46:3b:da:b2:b6:01:c0:e7:3f:f9:c4:f1:
                    15:c1:0f:26:37:bc:1a:e3:5f:c0:af:65:1d:9d:ea:
                    af:0d:ab:11:96:26:e9:30:7d:25:90:52:a3:a4:60:
                    85:05:bf:15:e0:bc:8d:76:8b:a9:22:6e:7d:05:d7:
                    47:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:24:82:1C:10:18:0A:F9:03:EA:94:26:92:E6:57:D3:CA:06:E5:C8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E242F5871BA11EEAC012A5A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:0c:3e:23:dd:7b:2d:c3:44:da:d9:62:4c:b5:23:9b:11:f4:
         9b:7e:4a:49:ab:e1:fc:17:bf:73:ea:59:87:94:c1:0d:bf:b7:
         40:2a:76:cb:1f:f6:ff:ed:9f:83:dd:8d:ac:59:96:ba:59:d5:
         ea:02:6f:55:09:db:71:33:16:59:41:97:b7:60:b6:3e:1d:7c:
         66:4d:71:b4:3e:34:1e:30:bc:74:3a:c1:78:be:72:f7:05:b2:
         46:9f:da:a7:c8:7a:99:40:45:77:f8:72:68:bb:70:16:c9:52:
         8f:e6:12:9f:3c:b5:ae:e5:5a:ea:95:9c:dc:8e:2e:68:b3:f1:
         f9:32:c2:5e:fe:59:e4:79:47:ab:24:9c:fc:72:f6:9d:d1:f4:
         07:39:aa:0b:7b:79:d7:0c:65:10:24:c0:9f:10:ba:a3:c6:e5:
         fb:21:a9:7c:8d:9c:ff:a6:84:bb:66:cf:c6:63:5f:af:d5:a0:
         2d:a0:7e:bd:e9:8c:c5:53:43:b5:d6:bd:8d:f6:2e:d8:90:fd:
         03:fd:7a:7c:f9:2d:67:5c:27:70:da:a2:f6:8a:e9:08:d9:57:
         88:2b:97:3a:13:92:40:17:88:26:b7:6a:06:32:4b:47:5c:88:
         0b:64:ca:78:39:f7:d0:79:4e:a8:6f:2c:78:e6:bc:93:fb:1f:
         3a:f6:e5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:42:23 2024 by rpki-client on console-fra.rpki-client.org