Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/366C5E7CE78711EEB36B0ABC775412E6.roa
File:                     366C5E7CE78711EEB36B0ABC775412E6.roa (raw, json)
Hash identifier:          ld9OO9Q7NIPRhSU4/Dfu0+FAygmYB1FurRchhQMgfT4=
Subject key identifier:   33:4F:A1:AE:B9:28:7F:CB:7C:23:7D:82:89:7C:13:54:73:A3:0A:52
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A5B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/366C5E7CE78711EEB36B0ABC775412E6.roa
Signing time:             Thu 21 Mar 2024 13:30:42 +0000
ROA not before:           Thu 21 Mar 2024 13:30:38 +0000
ROA not after:            Tue 23 Apr 2024 13:30:38 +0000
asID:                     44559
IP address blocks:        154.210.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Apr 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42417 (0xa5b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 21 13:30:38 2024 GMT
            Not After : Apr 23 13:30:38 2024 GMT
        Subject: CN=65fc3681-f5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:a5:08:e7:d1:51:aa:b9:92:ff:57:f2:5a:
                    c6:70:c8:f9:3d:e5:4a:7e:49:01:a9:31:7a:11:16:
                    83:ef:cd:5d:55:59:0e:46:54:0b:11:dc:b0:fa:e3:
                    ce:24:5e:72:79:6b:df:60:79:4d:03:f6:15:7e:16:
                    84:c7:c8:1b:d5:e5:57:a7:cc:61:54:69:34:d3:d2:
                    64:8e:e3:7c:ce:00:14:0b:0c:28:85:0a:06:1a:49:
                    03:34:d7:00:bc:46:af:19:7e:86:f2:56:4f:c1:d0:
                    63:7c:30:2b:36:1a:7c:57:9b:5c:5b:89:6b:06:cb:
                    74:df:41:60:e3:15:51:4a:36:47:e6:9b:9e:de:46:
                    5a:62:48:04:a3:8d:f9:18:5f:3e:fa:3d:0e:8b:11:
                    c0:04:05:94:ec:50:ee:33:37:25:ff:eb:99:5f:4f:
                    ed:df:c2:01:97:55:e5:00:18:cb:d7:c3:7f:2a:eb:
                    38:e7:86:da:ad:e4:81:57:eb:2e:99:dc:9e:1f:a9:
                    68:86:52:95:06:da:dc:28:ef:d6:33:d6:a1:21:ef:
                    12:6a:d3:d9:0c:af:f5:6d:99:98:1a:7b:a3:68:cf:
                    c3:55:56:ff:5d:96:13:60:c1:65:6e:87:f9:db:a3:
                    0d:b5:5a:9c:73:4e:ce:f1:41:e7:69:9e:8d:56:0b:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4F:A1:AE:B9:28:7F:CB:7C:23:7D:82:89:7C:13:54:73:A3:0A:52
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/366C5E7CE78711EEB36B0ABC775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:4b:ec:7b:64:f4:de:29:8a:38:64:53:92:2b:d0:43:65:8d:
         12:48:78:a3:40:4d:e5:87:1f:2b:c1:97:01:ae:c6:4d:ca:d7:
         de:84:bf:a6:50:eb:ff:33:d3:ed:63:f3:f3:bb:93:ff:64:d5:
         99:b9:1e:8d:5b:61:da:15:6f:ce:0c:29:cc:26:e6:94:c0:b7:
         e6:01:1c:54:36:52:b8:80:d4:04:6b:76:05:1f:31:72:fe:01:
         d3:30:2e:1c:23:39:0c:34:df:a1:9c:a2:e0:2a:da:47:74:49:
         a7:70:23:3e:3e:a0:b1:9c:d4:bb:23:48:45:94:bc:dd:55:b1:
         56:b1:43:dc:09:6e:ae:f2:4d:06:3d:ab:0f:bd:13:1e:f2:86:
         54:4d:cc:00:b5:28:4f:f4:51:06:30:c3:07:5e:6f:d3:10:1f:
         72:bf:cd:1e:77:8d:c8:46:9a:26:3d:51:8b:82:43:28:d7:f0:
         4a:67:8f:a1:6c:58:39:ad:69:93:1e:a4:b3:38:cb:7d:0a:c8:
         48:bf:d9:0f:7f:56:82:09:b0:8a:63:71:33:e6:be:27:d7:0b:
         f9:41:8d:85:34:95:85:40:b6:e7:56:a3:4a:00:e2:f4:8d:09:
         15:05:d9:77:b2:ef:cc:ef:d3:78:6b:93:2a:89:6c:35:f6:e8:
         73:24:c9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:17 2024 by rpki-client on console-ams.rpki-client.org