Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/368A82E0E74011EEBCEB4093775412E6.roa
File:                     368A82E0E74011EEBCEB4093775412E6.roa (raw, json)
Hash identifier:          oenh3SbAVkrC5w/kIgJn4cabcUbCTbw7xIFFBwj3IeQ=
Subject key identifier:   CF:26:66:47:2E:A5:72:E6:7D:90:4A:98:2C:73:C6:56:31:2A:F4:D6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A3CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/368A82E0E74011EEBCEB4093775412E6.roa
Signing time:             Thu 21 Mar 2024 05:02:27 +0000
ROA not before:           Thu 21 Mar 2024 05:02:24 +0000
ROA not after:            Tue 23 Apr 2024 05:02:24 +0000
asID:                     44559
IP address blocks:        154.221.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Apr 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41934 (0xa3ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 21 05:02:24 2024 GMT
            Not After : Apr 23 05:02:24 2024 GMT
        Subject: CN=65fbbf63-9013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ed:e2:0b:66:88:9b:a7:5f:a4:4d:56:43:f4:
                    dc:f8:f7:75:60:7c:22:af:e3:44:2e:80:c8:b3:88:
                    b6:ee:4d:27:b8:b1:93:4d:ba:f6:e0:fc:34:ab:18:
                    c8:42:b1:cc:74:28:bf:c0:ab:82:34:65:32:6e:48:
                    f8:87:b8:4f:b4:24:28:6a:f5:71:08:f1:b6:95:3f:
                    3b:e1:2a:42:38:22:3b:66:b6:52:f1:c2:46:b2:a2:
                    04:28:87:2d:93:47:15:19:a2:df:80:c5:d0:97:da:
                    10:4d:33:ea:af:bc:a1:9c:9a:a6:a0:01:8f:2a:39:
                    ef:a1:a3:e2:15:1d:fd:0e:b3:26:b8:69:40:68:b3:
                    8d:38:0e:ce:a9:8b:92:eb:85:b3:91:25:40:29:06:
                    82:87:6f:7e:82:d6:cf:5f:67:ef:3a:02:59:2a:26:
                    8a:df:8d:fc:9a:69:f0:e1:da:d6:24:d4:d3:d9:17:
                    6b:85:dc:6c:f4:c3:a6:e0:a8:d5:7d:c9:7f:e0:40:
                    31:4d:3a:06:3f:60:4d:a4:09:fd:7c:d1:5f:40:5a:
                    25:a3:ca:41:3c:e5:b3:73:cc:b3:2b:55:e3:4e:97:
                    65:f3:42:07:fe:4d:47:18:c7:53:90:2d:22:fc:5a:
                    55:92:50:9f:0a:66:91:a3:b5:c2:ff:86:50:70:44:
                    dc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:26:66:47:2E:A5:72:E6:7D:90:4A:98:2C:73:C6:56:31:2A:F4:D6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/368A82E0E74011EEBCEB4093775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.221.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:fd:8f:73:06:df:92:02:da:47:98:7b:5f:c2:bd:ad:0f:2e:
         02:62:00:98:85:37:52:02:35:c1:1a:d8:c5:de:c1:58:80:b3:
         68:89:57:c0:79:af:19:4f:29:a3:c3:0a:f9:54:c4:cd:dc:64:
         1b:45:ca:51:c6:f6:26:cf:cc:e7:36:21:50:e5:28:bf:74:a2:
         b9:cb:91:95:4e:e0:28:63:f3:c8:13:5a:f0:a7:65:5f:cc:0b:
         6a:a4:29:76:0d:08:69:98:ff:e9:b8:93:a2:df:9c:f3:e9:74:
         ff:01:8c:89:05:59:30:c6:5a:7f:d5:1f:32:f2:3e:43:2b:73:
         c3:8b:ce:a5:f6:65:e2:f9:6c:e7:dc:02:34:c3:8e:86:6a:ec:
         dc:7b:d7:e7:b5:8b:7e:8d:3f:b7:51:fb:63:eb:2a:a3:1c:55:
         b3:b1:e7:bf:99:d5:6d:48:36:02:9b:8a:71:21:03:c3:b1:fb:
         f5:8f:25:b5:f3:18:5a:90:1e:c2:b2:21:06:bf:e6:db:22:16:
         e2:31:03:5f:b0:f7:af:1e:b1:42:0b:a1:9c:9a:bb:93:bf:52:
         bd:f7:5a:02:97:ac:b4:06:2c:62:53:68:21:68:15:2b:73:60:
         4c:b1:ae:46:bc:5f:7a:24:41:be:fe:3d:5c:f1:a5:c4:aa:a6:
         d6:d6:33:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKPOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMDUwMjI0WhcNMjQwNDIzMDUwMjI0WjAYMRYw
FAYDVQQDEw02NWZiYmY2My05MDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAze3iC2aIm6dfpE1WQ/Tc+Pd1YHwir+NELoDIs4i27k0nuLGTTbr24Pw0
qxjIQrHMdCi/wKuCNGUybkj4h7hPtCQoavVxCPG2lT874SpCOCI7ZrZS8cJGsqIE
KIctk0cVGaLfgMXQl9oQTTPqr7yhnJqmoAGPKjnvoaPiFR39DrMmuGlAaLONOA7O
qYuS64WzkSVAKQaCh29+gtbPX2fvOgJZKiaK3438mmnw4drWJNTT2Rdrhdxs9MOm
4KjVfcl/4EAxTToGP2BNpAn9fNFfQFolo8pBPOWzc8yzK1XjTpdl80IH/k1HGMdT
kC0i/FpVklCfCmaRo7XC/4ZQcETcBwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM8m
ZkcupXLmfZBKmCxzxlYxKvTWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNjhBODJFMEU3NDAxMUVFQkNFQjQwOTM3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt3SMA0GCSqGSIb3DQEB
CwUAA4IBAQBR/Y9zBt+SAtpHmHtfwr2tDy4CYgCYhTdSAjXBGtjF3sFYgLNoiVfA
ea8ZTymjwwr5VMTN3GQbRcpRxvYmz8znNiFQ5Si/dKK5y5GVTuAoY/PIE1rwp2Vf
zAtqpCl2DQhpmP/puJOi35zz6XT/AYyJBVkwxlp/1R8y8j5DK3PDi86l9mXi+Wzn
3AI0w46Gauzce9fntYt+jT+3Uftj6yqjHFWzsee/mdVtSDYCm4pxIQPDsfv1jyW1
8xhakB7CsiEGv+bbIhbiMQNfsPevHrFCC6GcmruTv1K991oCl6y0BixiU2ghaBUr
c2BMsa5GvF96JEG+/j1c8aXEqqbW1jMv
-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:16 2024 by rpki-client on console-fra.rpki-client.org