Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42BAA04AFAF011EE8AE4BC21017001B1.roa
File:                     42BAA04AFAF011EE8AE4BC21017001B1.roa (raw, json)
Hash identifier:          aW7Tuoq/2lvx4ey9dwzkRPR6Gig71A8snFbZK5W+gzQ=
Subject key identifier:   97:E7:A4:B7:27:97:FD:5C:7E:E5:3A:A5:2D:3C:AF:B1:21:03:E6:A8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       ACC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42BAA04AFAF011EE8AE4BC21017001B1.roa
Signing time:             Mon 15 Apr 2024 06:20:31 +0000
ROA not before:           Mon 15 Apr 2024 06:20:28 +0000
ROA not after:            Thu 30 May 2024 06:20:28 +0000
asID:                     63139
IP address blocks:        154.94.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44226 (0xacc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 15 06:20:28 2024 GMT
            Not After : May 30 06:20:28 2024 GMT
        Subject: CN=661cc72f-2f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:66:f3:cb:85:27:0e:72:53:dc:09:c5:9b:85:
                    62:b4:8b:37:f3:9c:38:51:f7:19:51:60:63:28:c6:
                    d3:0e:6b:f0:18:43:06:7a:23:e9:89:82:2e:6f:3b:
                    ca:6f:26:39:ab:27:77:5a:5a:26:cc:31:06:64:b9:
                    98:57:ce:38:90:c5:ed:88:9c:b0:bf:a2:51:16:3d:
                    c3:9c:1e:90:69:db:80:46:65:03:33:fa:2f:cd:f0:
                    bf:d6:e8:39:83:66:52:c4:ee:99:1c:81:1c:38:8d:
                    67:66:0e:2d:78:6a:eb:7d:87:0d:d6:40:05:2d:47:
                    09:dc:54:24:5b:18:74:ce:55:5e:e9:42:a1:ec:7a:
                    f5:dd:b9:d5:63:d8:5b:e0:76:0d:02:f0:8f:c7:2f:
                    80:be:17:33:81:8f:41:b4:da:d0:da:ed:b1:27:b4:
                    97:58:7e:2a:a1:08:f2:8d:8c:bf:0f:d2:03:14:21:
                    83:e9:9d:9e:17:9f:e1:93:bb:4f:d0:46:59:eb:97:
                    65:ad:e9:dd:66:c0:8e:7f:02:e0:07:e8:e1:47:48:
                    1e:ff:28:fe:c0:2e:71:e5:e3:f4:a2:41:65:e4:82:
                    93:88:16:90:34:06:b1:3f:95:47:45:46:1a:cd:5b:
                    fa:78:83:c6:80:63:41:1d:1f:bf:91:e8:d8:ed:90:
                    db:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E7:A4:B7:27:97:FD:5C:7E:E5:3A:A5:2D:3C:AF:B1:21:03:E6:A8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42BAA04AFAF011EE8AE4BC21017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:46:3e:a5:10:6d:4a:d6:34:96:81:ff:b7:e8:b0:65:fb:24:
         44:06:42:1e:22:59:63:2e:88:60:0f:e9:2c:d1:cb:22:da:1c:
         39:72:06:dd:88:2c:35:fd:6f:df:40:c6:01:03:38:3c:e5:bf:
         e3:35:4b:5d:0b:2e:06:89:e5:e4:54:2a:1a:1a:78:d7:19:40:
         65:ff:c1:47:f8:9b:98:0f:b1:2e:a9:8d:82:3d:9e:d3:86:a1:
         52:81:e0:d2:31:2e:3e:58:bb:a4:05:65:7c:86:da:3f:bd:90:
         3e:b0:54:03:ec:da:02:64:c1:87:07:6a:e2:14:c9:24:68:f7:
         fa:05:23:9b:69:a7:f4:d1:23:14:9a:cc:08:b5:4d:1e:b3:3d:
         08:a5:5d:e0:53:46:15:9c:0a:d4:51:97:40:e0:6c:47:3e:01:
         70:b0:c2:38:48:26:2f:a9:e2:8b:93:e0:93:de:a1:f8:5e:6e:
         5f:44:01:cb:dd:88:9f:ee:e1:7e:26:f5:8c:9a:8d:02:c0:1b:
         fe:5b:fe:4f:0a:60:95:ef:cc:43:d3:59:4b:3e:8a:27:ed:7f:
         5c:65:29:c4:9d:64:0e:e6:e4:18:73:20:67:3d:ff:64:f0:23:
         2c:52:84:0d:9f:0b:4f:33:42:62:7b:9b:fa:b0:14:32:73:8d:
         8c:14:1b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:22 2024 by rpki-client on console-fra.rpki-client.org