Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3076F780FD2A11EEAF443440017001B1.roa
File:                     3076F780FD2A11EEAF443440017001B1.roa (raw, json)
Hash identifier:          k5xk03xhTjAhjNOuLB7BCFpTkRw6jsEa5OIPO+7Dqd4=
Subject key identifier:   6B:BC:41:C2:39:7B:EE:E1:AD:5A:64:D3:04:F8:5F:F2:BA:95:D7:DE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       ADEF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3076F780FD2A11EEAF443440017001B1.roa
Signing time:             Thu 18 Apr 2024 02:20:14 +0000
ROA not before:           Thu 18 Apr 2024 02:20:10 +0000
ROA not after:            Fri 24 May 2024 02:20:10 +0000
asID:                     18779
IP address blocks:        154.203.48.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44527 (0xadef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 18 02:20:10 2024 GMT
            Not After : May 24 02:20:10 2024 GMT
        Subject: CN=6620835e-c1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:46:25:6b:58:9e:39:f9:fb:53:b1:eb:39:
                    70:db:55:a9:55:09:fe:82:b0:6c:e1:6b:e7:bf:e8:
                    90:f0:29:cb:e7:fa:de:5e:6a:e2:b9:eb:1f:84:4c:
                    07:a8:83:1b:c1:f9:bb:4b:ba:46:9e:10:9d:cc:c3:
                    28:73:b2:87:c4:b7:e7:44:b0:35:90:3d:98:a7:d3:
                    c1:8e:d6:38:30:37:54:d4:aa:ca:1d:92:e9:a0:1a:
                    fa:db:bb:d9:a5:fe:c9:da:12:f3:a4:cd:04:c1:81:
                    ea:ab:01:c3:db:71:d6:99:06:2f:b0:6e:50:66:11:
                    46:c1:de:79:67:df:d3:ca:36:a0:e0:55:d1:fa:60:
                    29:55:0f:0d:40:8c:7d:9e:2c:5e:39:e0:35:50:8e:
                    76:42:0a:ae:5d:0a:1e:66:f0:98:03:95:45:73:ab:
                    7c:5f:c3:e0:9a:2b:02:43:eb:36:46:55:5c:85:c9:
                    7b:65:f7:96:77:cb:22:f4:db:69:93:53:7d:02:61:
                    22:82:b0:3e:92:e9:5d:8a:d5:3e:e0:17:81:6c:f0:
                    da:95:34:b2:56:05:80:53:3e:b6:ec:d0:cc:9e:b6:
                    01:69:a3:7a:a2:2b:4f:6b:11:11:98:45:f2:64:40:
                    28:73:1e:c8:c7:12:21:3a:e3:93:77:65:d1:cf:90:
                    f4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BC:41:C2:39:7B:EE:E1:AD:5A:64:D3:04:F8:5F:F2:BA:95:D7:DE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3076F780FD2A11EEAF443440017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:fd:e4:44:d4:7c:32:a7:d2:95:1e:1c:1d:77:80:2e:96:27:
         fe:2f:3b:cd:fa:6c:18:e4:0c:30:95:f0:05:92:d6:72:36:f0:
         48:66:7a:30:7e:de:39:8b:57:24:76:63:c1:8b:a3:e6:64:2a:
         f3:e3:35:ba:b7:74:48:2e:7f:a2:35:ef:64:3c:9b:d8:b6:b1:
         d8:55:5a:6d:35:89:b6:51:6a:de:55:dd:88:46:3c:33:2b:d1:
         aa:25:01:1e:cc:95:ab:1b:5b:4f:8b:6a:15:ce:4d:09:1f:b0:
         1f:79:97:56:a9:f9:3a:ad:f3:9c:3e:1d:7e:c5:2f:07:b0:4e:
         d7:cb:0a:66:2f:d5:be:ad:f4:64:31:cb:92:f3:ac:30:79:17:
         7b:82:de:97:c2:5b:55:85:a1:82:00:c4:7c:c8:70:33:e4:43:
         ad:b7:fe:96:fa:ff:33:28:4c:5f:67:d1:b3:02:98:ac:52:83:
         ce:c3:43:33:3a:f9:8e:bf:b9:cd:2d:6c:1b:6c:21:bd:5a:ae:
         61:4c:48:d6:4b:89:3e:95:b0:f1:1a:3d:94:17:1e:d1:b1:dc:
         07:90:e2:dd:ae:59:0f:81:04:71:03:38:8d:f1:09:0d:b3:04:
         28:36:f1:f1:75:b2:e8:01:8f:52:85:68:ce:83:4a:de:e2:41:
         f9:e6:01:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK3vMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE4MDIyMDEwWhcNMjQwNTI0MDIyMDEwWjAYMRYw
FAYDVQQDEw02NjIwODM1ZS1jMWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs3ZGJWtYnjn5+1Ox6zlw21WpVQn+grBs4Wvnv+iQ8CnL5/reXmriuesf
hEwHqIMbwfm7S7pGnhCdzMMoc7KHxLfnRLA1kD2Yp9PBjtY4MDdU1KrKHZLpoBr6
27vZpf7J2hLzpM0EwYHqqwHD23HWmQYvsG5QZhFGwd55Z9/Tyjag4FXR+mApVQ8N
QIx9nixeOeA1UI52QgquXQoeZvCYA5VFc6t8X8PgmisCQ+s2RlVchcl7ZfeWd8si
9Ntpk1N9AmEigrA+kulditU+4BeBbPDalTSyVgWAUz627NDMnrYBaaN6oitPaxER
mEXyZEAocx7IxxIhOuOTd2XRz5D0ZQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGu8
QcI5e+7hrVpk0wT4X/K6ldfeMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMDc2Rjc4MEZEMkExMUVFQUY0NDM0NDAwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmsswMA0GCSqGSIb3DQEB
CwUAA4IBAQB9/eRE1Hwyp9KVHhwdd4Aulif+LzvN+mwY5AwwlfAFktZyNvBIZnow
ft45i1ckdmPBi6PmZCrz4zW6t3RILn+iNe9kPJvYtrHYVVptNYm2UWreVd2IRjwz
K9GqJQEezJWrG1tPi2oVzk0JH7AfeZdWqfk6rfOcPh1+xS8HsE7XywpmL9W+rfRk
McuS86wweRd7gt6XwltVhaGCAMR8yHAz5EOtt/6W+v8zKExfZ9GzApisUoPOw0Mz
OvmOv7nNLWwbbCG9Wq5hTEjWS4k+lbDxGj2UFx7RsdwHkOLdrlkPgQRxAziN8QkN
swQoNvHxdbLoAY9ShWjOg0re4kH55gGK
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:05 2024 by rpki-client on console-ams.rpki-client.org