Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/330B4C4E7EBD11EEB3CF33684AD9E6FC.roa
File:                     330B4C4E7EBD11EEB3CF33684AD9E6FC.roa (raw, json)
Hash identifier:          1V7qKq8yh4YmR9bLr/eLquGeKgvljAYrU5AFFeE4nQk=
Subject key identifier:   FA:52:40:8B:8E:DB:54:BB:8D:B9:1B:80:ED:13:FC:80:96:9B:8C:1D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       4DDF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/330B4C4E7EBD11EEB3CF33684AD9E6FC.roa
Signing time:             Thu 09 Nov 2023 05:02:37 +0000
ROA not before:           Thu 09 Nov 2023 05:02:33 +0000
ROA not after:            Wed 06 Nov 2024 05:02:33 +0000
asID:                     139057
IP address blocks:        154.92.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19935 (0x4ddf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  9 05:02:33 2023 GMT
            Not After : Nov  6 05:02:33 2024 GMT
        Subject: CN=654c67ed-668c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7d:43:71:54:d2:fc:a7:0e:25:d6:00:83:5c:
                    a2:07:f8:2b:5e:75:6e:76:6e:1a:64:3d:c5:b0:d3:
                    dd:46:08:f9:a7:55:e1:b9:ab:cb:79:f8:6d:e2:78:
                    fd:fa:de:a3:e4:06:a2:4a:8c:46:f0:3c:23:76:32:
                    5b:94:a1:07:73:f4:66:57:68:07:07:cf:d3:9b:f6:
                    cc:d9:00:86:d3:9f:c6:13:52:14:f8:bc:02:2a:21:
                    fb:8f:6c:8e:a0:c0:7f:73:37:e2:ef:ba:84:4f:f2:
                    89:a0:5e:c6:f8:38:bb:11:eb:65:05:e0:89:34:2d:
                    b7:59:a2:08:ff:87:00:60:25:d1:8e:54:17:eb:81:
                    07:c4:07:3a:5f:b3:6e:1d:28:3a:88:15:a6:51:19:
                    12:5a:be:d7:db:c8:2c:a9:a5:57:9c:54:e9:b5:93:
                    0f:f9:3c:52:24:87:e5:e5:60:34:4c:a4:97:e4:68:
                    82:66:a8:6a:a9:e1:3c:ba:22:27:7b:97:7f:5a:69:
                    98:32:14:f5:af:a0:8a:6d:bd:45:5f:98:0b:46:16:
                    ba:c0:88:73:58:c9:1d:d0:47:f9:79:28:b7:f2:ae:
                    27:6e:2c:12:9e:08:81:ea:38:e3:c4:a4:47:4d:e3:
                    14:2a:33:7b:b4:f4:f7:c6:f9:93:1b:45:92:75:d6:
                    6a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:52:40:8B:8E:DB:54:BB:8D:B9:1B:80:ED:13:FC:80:96:9B:8C:1D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/330B4C4E7EBD11EEB3CF33684AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:3a:83:09:f0:a8:fc:d9:97:c2:aa:7f:c1:15:dd:4e:a7:c7:
         1b:b4:99:fa:f8:8b:22:2e:70:bc:ef:25:20:15:ed:bb:02:c9:
         4e:fa:68:ee:76:f1:63:76:a4:59:bf:62:53:99:73:e5:a5:32:
         4c:6c:5e:3e:f6:8f:6c:b7:b0:47:5c:10:2c:47:c8:83:f0:88:
         82:8d:f6:e8:f7:67:89:3b:ce:b8:48:96:6d:f6:d5:06:66:4b:
         6d:df:fa:7a:30:3a:a4:b8:2f:9e:41:29:20:0e:1d:6f:75:45:
         8c:ba:92:15:b4:9c:25:cc:59:d5:8c:de:c1:df:55:3f:df:9e:
         0a:d1:0f:9d:4a:fa:78:9d:b9:63:93:c3:e4:4c:a4:35:34:1c:
         7d:77:9d:b1:81:56:ba:a6:af:67:d7:0d:5c:65:e7:f2:66:0c:
         c6:eb:bf:c7:2e:5a:4a:7a:e1:67:89:4e:77:57:29:9b:2b:58:
         f2:5e:04:2e:8a:3b:42:6e:df:0b:0c:68:7a:1e:4f:2e:c8:25:
         19:b4:fc:e1:d2:f5:d8:4b:e3:28:77:9b:d6:46:a9:a4:b1:8a:
         c6:d2:11:3c:73:bd:96:bf:a7:57:ed:cf:2e:3b:f0:8e:97:3b:
         fa:a2:99:16:b7:9f:76:f8:02:5a:7d:3f:09:87:5e:5f:22:83:
         5e:11:4e:eb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICTd8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMDkwNTAyMzNaFw0yNDExMDYwNTAyMzNaMBgxFjAU
BgNVBAMTDTY1NGM2N2VkLTY2OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKfUNxVNL8pw4l1gCDXKIH+CtedW52bhpkPcWw091GCPmnVeG5q8t5+G3i
eP363qPkBqJKjEbwPCN2MluUoQdz9GZXaAcHz9Ob9szZAIbTn8YTUhT4vAIqIfuP
bI6gwH9zN+LvuoRP8omgXsb4OLsR62UF4Ik0LbdZogj/hwBgJdGOVBfrgQfEBzpf
s24dKDqIFaZRGRJavtfbyCyppVecVOm1kw/5PFIkh+XlYDRMpJfkaIJmqGqp4Ty6
Iid7l39aaZgyFPWvoIptvUVfmAtGFrrAiHNYyR3QR/l5KLfyriduLBKeCIHqOOPE
pEdN4xQqM3u09PfG+ZMbRZJ11moJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU+lJA
i47bVLuNuRuA7RP8gJabjB0wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzMzMEI0QzRFN0VCRDExRUVCM0NGMzM2ODRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaXB8wDQYJKoZIhvcNAQEL
BQADggEBAFQ6gwnwqPzZl8Kqf8EV3U6nxxu0mfr4iyIucLzvJSAV7bsCyU76aO52
8WN2pFm/YlOZc+WlMkxsXj72j2y3sEdcECxHyIPwiIKN9uj3Z4k7zrhIlm321QZm
S23f+nowOqS4L55BKSAOHW91RYy6khW0nCXMWdWM3sHfVT/fngrRD51K+niduWOT
w+RMpDU0HH13nbGBVrqmr2fXDVxl5/JmDMbrv8cuWkp64WeJTndXKZsrWPJeBC6K
O0Ju3wsMaHoeTy7IJRm0/OHS9dhL4yh3m9ZGqaSxisbSETxzvZa/p1ftzy478I6X
O/qimRa3n3b4Alp9PwmHXl8ig14RTus=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:05 2024 by rpki-client on console-ams.rpki-client.org