Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B3FBA46F86E11EEAB2CCE2B017001B1.roa
File:                     3B3FBA46F86E11EEAB2CCE2B017001B1.roa (raw, json)
Hash identifier:          G6CrN9IjCv8tv3EY22SMETIQ4SOhPAD0uwD1s/04JLo=
Subject key identifier:   44:DD:88:4D:E2:2C:F7:4C:8F:5F:FD:37:D3:C0:B0:02:45:1A:97:72
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       AB9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B3FBA46F86E11EEAB2CCE2B017001B1.roa
Signing time:             Fri 12 Apr 2024 01:44:42 +0000
ROA not before:           Fri 12 Apr 2024 01:44:39 +0000
ROA not after:            Sun 19 May 2024 01:44:39 +0000
asID:                     138915
IP address blocks:        154.93.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43932 (0xab9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 12 01:44:39 2024 GMT
            Not After : May 19 01:44:39 2024 GMT
        Subject: CN=6618920a-9e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:02:6a:79:d6:98:da:f7:01:5e:37:2d:8d:b7:
                    10:8d:49:31:f2:4e:30:95:67:2c:21:fb:39:1a:7d:
                    a4:f6:5c:89:84:35:0f:17:f7:d9:49:36:29:48:ee:
                    12:10:8f:c9:1a:27:96:29:a3:4b:b4:26:27:62:f5:
                    82:af:1e:bb:e2:64:af:d6:f6:01:de:50:30:d3:56:
                    14:02:8c:c5:42:5a:9b:be:bf:be:a2:51:a7:ce:41:
                    2f:73:54:70:f6:75:b0:05:83:21:e2:d1:29:bf:18:
                    53:12:00:b7:45:38:e8:40:82:fa:c5:cf:0a:b0:b2:
                    3a:8f:94:01:01:c1:1b:43:1b:bc:6e:18:96:e3:25:
                    93:e8:91:3e:bd:f5:70:ed:fa:4f:19:6f:71:36:15:
                    f4:04:8a:79:ba:61:14:27:e9:1e:36:7b:a5:12:22:
                    dd:ce:df:83:fe:0c:38:28:aa:d4:48:6f:e0:f8:ce:
                    a5:e9:d4:64:f8:ec:43:a8:04:4f:ab:15:eb:fe:10:
                    0f:ee:94:1f:0b:0c:0d:6a:d3:99:85:30:6b:c6:de:
                    f3:bd:c7:7f:de:c1:34:54:09:21:bc:c5:52:b2:29:
                    5d:0b:e3:0d:39:ca:39:fb:ff:7f:76:a8:33:95:26:
                    ed:d3:e4:b4:86:7d:74:1d:0a:d4:d0:4f:a0:36:4f:
                    05:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DD:88:4D:E2:2C:F7:4C:8F:5F:FD:37:D3:C0:B0:02:45:1A:97:72
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B3FBA46F86E11EEAB2CCE2B017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:b4:13:d0:78:8a:26:0b:11:87:c7:de:09:cd:e1:77:86:af:
         2f:e6:23:38:60:f6:c7:c3:e8:ed:48:8d:62:26:a6:af:ac:b2:
         86:32:6e:d2:8f:5e:a4:5f:3c:bd:da:cd:a7:a7:8a:6a:91:dd:
         5c:1a:f5:d9:e1:60:67:82:1b:56:23:cd:69:0a:6f:a0:d6:9f:
         2c:35:cc:da:29:4f:b8:9f:e3:09:6d:74:7c:27:0d:9a:e3:f5:
         f8:f5:e4:eb:6d:72:d5:a2:3f:bb:6d:a8:5a:30:e5:c4:65:48:
         ff:a8:a1:7a:2a:e2:01:07:47:c3:27:8b:26:02:62:44:95:5b:
         35:81:10:16:d9:6e:81:2f:8b:a4:11:bb:f0:12:3c:49:51:a4:
         8f:f1:d2:95:34:25:4f:15:c8:70:13:db:cc:c9:2d:62:55:d7:
         96:61:87:2c:9b:fd:fb:c2:1c:f6:32:8f:f3:dc:53:b2:cd:0f:
         c9:af:d7:b2:32:30:30:07:a3:77:94:8d:de:ab:e2:c4:7d:d2:
         84:aa:d4:ae:cb:67:79:d8:48:58:05:51:3c:e5:bf:b1:67:2a:
         20:89:69:9c:76:24:d1:02:3f:0a:04:52:e7:55:c4:f9:ec:36:
         68:a2:cb:e5:66:1c:ec:5e:62:a1:0d:8c:f9:56:25:67:90:b0:
         a1:62:14:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:06 2024 by rpki-client on console-ams.rpki-client.org