Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/320CBD747EBC11EEAE3627654AD9E6FC.roa
File:                     320CBD747EBC11EEAE3627654AD9E6FC.roa (raw, json)
Hash identifier:          xeacPLZAcAr1GhbeXx9EqwU/1bRGdpq5wDFGsqzL41g=
Subject key identifier:   DD:03:61:40:C3:B8:B2:83:DF:D9:E9:7A:ED:68:51:9A:27:D7:3F:10
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       4DD7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/320CBD747EBC11EEAE3627654AD9E6FC.roa
Signing time:             Thu 09 Nov 2023 04:55:25 +0000
ROA not before:           Thu 09 Nov 2023 04:55:22 +0000
ROA not after:            Wed 06 Nov 2024 04:55:22 +0000
asID:                     139057
IP address blocks:        154.92.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19927 (0x4dd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  9 04:55:22 2023 GMT
            Not After : Nov  6 04:55:22 2024 GMT
        Subject: CN=654c663d-dd22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:1b:3e:77:60:f8:b6:61:fd:c2:41:52:d3:
                    65:27:3f:d2:e6:ee:84:df:4a:c9:89:ec:67:03:8b:
                    e5:1a:7b:03:39:c0:a8:04:3b:80:54:ca:41:80:fd:
                    f4:45:ab:f9:77:46:17:49:07:08:d6:f9:64:34:4f:
                    ba:ce:a4:10:5b:05:e9:19:28:15:97:71:9c:b4:e3:
                    eb:c8:07:16:45:40:ba:ad:4b:0f:79:9a:46:3d:39:
                    a4:58:c2:ba:f3:18:c6:b9:80:68:3f:56:c8:9b:31:
                    f7:0f:31:7b:06:c1:1f:b2:b9:27:44:5f:50:9d:14:
                    c5:16:d7:16:fd:4f:76:1c:c2:6c:a9:ac:18:62:e5:
                    74:37:fb:1f:7e:f0:c0:f3:62:f5:e2:e9:2e:22:bb:
                    3f:11:42:8e:82:c7:a6:36:73:0c:31:8e:ce:e4:4f:
                    77:c1:45:28:b2:bb:f9:0d:7b:50:0c:42:1d:fc:f7:
                    af:42:dc:bb:c2:b7:56:ca:d7:62:51:ad:2c:62:cc:
                    7a:bb:b5:b7:13:33:b2:5f:67:f4:77:77:d4:5f:19:
                    75:00:8e:c6:5c:02:28:3b:d1:70:d3:87:d6:e9:08:
                    da:9f:d7:f5:77:55:64:dc:92:c6:55:eb:dc:ec:3e:
                    91:ed:10:2a:38:c9:df:76:82:f6:c4:7c:2e:dd:9d:
                    9d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:03:61:40:C3:B8:B2:83:DF:D9:E9:7A:ED:68:51:9A:27:D7:3F:10
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/320CBD747EBC11EEAE3627654AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:01:c9:18:d5:bd:ea:f6:59:d3:f9:b7:1e:fd:63:80:ad:fd:
         6a:9d:9f:99:2b:38:d8:6c:0d:7e:f5:38:b9:bb:d5:fd:3a:35:
         ee:61:bc:b3:d9:6d:cb:36:57:96:79:2f:5a:1a:9f:5b:28:cd:
         4a:66:8a:c7:b3:15:1a:bf:1e:42:2f:94:c7:91:a9:28:41:41:
         73:ac:58:a6:fe:b7:d6:83:2a:82:b5:7e:3f:43:06:e8:3d:6b:
         79:c4:a7:b3:52:b5:56:b4:5b:cf:6e:b0:09:7d:7d:83:4c:31:
         fc:86:32:e4:fb:7f:9e:f7:dd:93:04:28:88:81:77:fe:b6:8f:
         20:cd:81:7a:bc:45:03:d3:37:9d:74:80:b3:6b:c3:a4:bd:5a:
         5c:5a:b3:87:ba:f0:2d:4c:b3:fa:f6:77:38:fb:eb:76:2a:52:
         ca:f6:e0:ed:42:bc:84:04:97:07:12:73:c4:84:f7:d6:03:08:
         f7:2e:d7:b4:82:af:e8:a4:2c:ba:c0:f6:47:d7:52:91:88:4c:
         3f:aa:71:ab:f5:55:f6:e5:84:3d:b2:95:12:46:d4:7d:32:0a:
         24:3b:15:21:6c:d8:d1:7a:58:f5:87:1d:3f:09:8d:b5:5e:1f:
         60:45:2b:bb:44:70:7c:76:bb:93:26:fe:c4:ba:c5:45:22:d6:
         49:9a:e7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:05 2024 by rpki-client on console-ams.rpki-client.org