Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/351E9900539D11EEB005C9564AD9E6FC.roa
File:                     351E9900539D11EEB005C9564AD9E6FC.roa (raw, json)
Hash identifier:          47Ut1ZmuO0C/RrA+au5kHuTSI17My3XMXpWMyZqIO3Q=
Subject key identifier:   53:BF:AA:27:AB:81:58:6B:06:B2:F5:41:E3:1E:D5:CC:C2:5F:39:D5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       3D77
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/351E9900539D11EEB005C9564AD9E6FC.roa
Signing time:             Fri 15 Sep 2023 07:55:16 +0000
ROA not before:           Fri 15 Sep 2023 07:55:13 +0000
ROA not after:            Sat 08 Jun 2024 07:55:13 +0000
asID:                     142403
IP address blocks:        154.83.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15735 (0x3d77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 07:55:13 2023 GMT
            Not After : Jun  8 07:55:13 2024 GMT
        Subject: CN=65040de4-8904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b3:88:00:47:06:61:9f:4d:fa:89:4f:d8:14:
                    ff:25:7d:19:be:f9:7b:d2:05:51:27:18:8b:34:20:
                    63:2a:bb:e9:37:19:2c:f0:07:ef:8d:a5:13:22:83:
                    c3:d6:17:25:a8:82:09:bb:d9:c4:06:b7:14:db:28:
                    86:cb:58:28:06:c6:b8:9a:50:0b:3b:ac:fb:1a:cf:
                    40:1e:58:6c:39:e3:40:89:92:97:62:eb:50:14:af:
                    3d:bb:23:28:f7:b2:03:31:c4:1f:33:04:23:41:5a:
                    76:f1:37:b9:c5:67:5f:62:98:bc:1e:63:ec:56:24:
                    4c:7e:64:72:4c:d1:67:5f:27:f6:8b:63:f5:e3:1f:
                    a4:29:61:3f:89:00:41:75:f7:77:f1:62:17:3c:ba:
                    f4:e7:c3:e1:52:0d:9c:c1:1c:aa:4e:18:52:37:50:
                    0d:86:47:7c:d8:b7:a0:b1:33:cc:f9:5b:03:5d:f5:
                    62:50:09:b6:b0:bb:1b:0e:ce:d0:00:3a:5a:82:a5:
                    36:17:9e:2b:43:75:e9:6b:95:7e:aa:3a:7a:53:33:
                    5f:98:7e:d3:dd:05:42:29:4f:67:60:c7:ba:99:e2:
                    38:60:f2:e2:04:7b:c5:c9:0a:e3:34:d5:e0:f0:d0:
                    44:cc:a6:3d:51:54:ec:16:e9:bd:09:a6:bb:20:8e:
                    49:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BF:AA:27:AB:81:58:6B:06:B2:F5:41:E3:1E:D5:CC:C2:5F:39:D5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/351E9900539D11EEB005C9564AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:f8:3a:45:90:d7:ef:8e:38:12:80:6e:21:3e:cb:30:b7:39:
         7d:3f:f2:7d:27:20:a0:77:e5:9b:a7:3b:d9:6e:e1:37:49:30:
         0f:2f:55:24:2e:4d:37:01:83:83:e5:43:d7:b9:e7:40:8e:33:
         d6:36:c4:26:29:9c:58:5a:11:46:ef:30:b3:69:7e:bf:98:3c:
         29:74:0b:27:98:51:81:c2:23:24:52:38:2b:73:d8:4c:46:fc:
         e0:e2:7b:fc:f8:93:73:9f:a1:02:d0:67:aa:11:4d:03:98:59:
         d0:ea:1f:97:2a:f3:42:a0:28:c0:e9:c4:b3:4d:27:09:b0:b3:
         0a:f9:f1:79:f2:3a:68:13:2b:90:ba:b3:ed:4c:12:97:a4:83:
         a8:38:1c:1a:55:89:13:35:1a:0c:e8:d2:ca:98:21:cf:ac:11:
         8b:95:2b:45:20:47:f2:d3:e8:b7:76:0d:b3:35:6a:73:7b:a1:
         bc:a4:6a:7c:08:0f:a0:42:91:4b:f6:be:5e:0a:86:7b:06:9b:
         34:96:d8:eb:91:10:f5:53:b1:c7:4d:e7:20:5e:f8:1a:2e:61:
         1e:4c:26:9c:40:3e:52:46:83:ae:79:c1:f7:62:1e:3f:14:f5:
         0d:46:0a:b5:9b:cc:d1:a2:89:c5:d2:82:2f:5b:e3:10:ce:81:
         85:8c:95:a5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICPXcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA5MTUwNzU1MTNaFw0yNDA2MDgwNzU1MTNaMBgxFjAU
BgNVBAMTDTY1MDQwZGU0LTg5MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDss4gARwZhn036iU/YFP8lfRm++XvSBVEnGIs0IGMqu+k3GSzwB++NpRMi
g8PWFyWoggm72cQGtxTbKIbLWCgGxriaUAs7rPsaz0AeWGw540CJkpdi61AUrz27
Iyj3sgMxxB8zBCNBWnbxN7nFZ19imLweY+xWJEx+ZHJM0WdfJ/aLY/XjH6QpYT+J
AEF193fxYhc8uvTnw+FSDZzBHKpOGFI3UA2GR3zYt6CxM8z5WwNd9WJQCbawuxsO
ztAAOlqCpTYXnitDdelrlX6qOnpTM1+YftPdBUIpT2dgx7qZ4jhg8uIEe8XJCuM0
1eDw0ETMpj1RVOwW6b0JprsgjknDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUU7+q
J6uBWGsGsvVB4x7VzMJfOdUwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzM1MUU5OTAwNTM5RDExRUVCMDA1Qzk1NjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaUw8wDQYJKoZIhvcNAQEL
BQADggEBAC74OkWQ1++OOBKAbiE+yzC3OX0/8n0nIKB35ZunO9lu4TdJMA8vVSQu
TTcBg4PlQ9e550COM9Y2xCYpnFhaEUbvMLNpfr+YPCl0CyeYUYHCIyRSOCtz2ExG
/ODie/z4k3OfoQLQZ6oRTQOYWdDqH5cq80KgKMDpxLNNJwmwswr58XnyOmgTK5C6
s+1MEpekg6g4HBpViRM1Ggzo0sqYIc+sEYuVK0UgR/LT6Ld2DbM1anN7obykanwI
D6BCkUv2vl4KhnsGmzSW2OuREPVTscdN5yBe+BouYR5MJpxAPlJGg655wfdiHj8U
9Q1GCrWbzNGiicXSgi9b4xDOgYWMlaU=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:20 2024 by rpki-client on console-fra.rpki-client.org