Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44761B767FD511EEAB7D3D694AD9E6FC.roa
File:                     44761B767FD511EEAB7D3D694AD9E6FC.roa (raw, json)
Hash identifier:          NWa8dRO99A0XegsWdjFV2ko8Gtz00W4U/GWCWlgNNkY=
Subject key identifier:   86:BC:AF:66:9F:13:17:42:5C:F2:A8:E1:B9:25:8E:AE:FB:AB:71:83
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       4E52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44761B767FD511EEAB7D3D694AD9E6FC.roa
Signing time:             Fri 10 Nov 2023 14:27:25 +0000
ROA not before:           Fri 10 Nov 2023 14:27:22 +0000
ROA not after:            Tue 12 Nov 2024 14:27:22 +0000
asID:                     397630
IP address blocks:        154.201.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20050 (0x4e52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 10 14:27:22 2023 GMT
            Not After : Nov 12 14:27:22 2024 GMT
        Subject: CN=654e3dcd-0e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:ed:b4:67:3d:70:47:d0:f9:29:8c:7d:a5:
                    dd:ac:26:69:05:ea:e3:65:67:23:85:1c:e8:3b:e5:
                    1f:c0:2c:79:25:5f:65:5b:0d:56:aa:2f:e3:94:ba:
                    5e:2e:da:ab:a9:1c:34:27:14:68:aa:b5:54:84:c8:
                    fb:80:94:5e:5b:e6:9b:29:51:79:21:24:10:42:34:
                    82:fa:e1:e9:d4:d2:56:85:be:bd:86:11:27:7e:d3:
                    c0:64:8b:67:e0:81:98:aa:bf:a7:e0:14:99:a1:08:
                    f7:ef:5a:de:c0:73:66:04:2a:ca:a4:30:d4:b8:35:
                    cf:38:8a:c5:7d:0a:4c:5d:94:67:52:4c:4d:f0:c2:
                    b6:ae:08:c0:38:ca:c3:a0:d2:44:37:f8:b7:04:10:
                    70:91:61:b0:7f:2d:01:af:20:b0:d5:84:db:25:e1:
                    49:fd:40:76:92:94:00:f2:84:d8:c7:8f:54:25:65:
                    40:78:ad:7f:2c:4d:d9:e1:43:40:6e:10:a7:8a:dd:
                    71:11:5c:d2:f0:1d:05:42:3a:e1:24:54:2c:d1:b0:
                    24:71:0e:47:6c:1d:96:8f:54:0a:c1:6e:7c:90:ff:
                    49:5e:43:a4:bd:10:ee:97:1c:82:33:55:58:89:a3:
                    08:ab:75:db:be:ce:f5:42:a1:03:0b:a0:e9:c7:31:
                    ba:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BC:AF:66:9F:13:17:42:5C:F2:A8:E1:B9:25:8E:AE:FB:AB:71:83
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44761B767FD511EEAB7D3D694AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:dc:fd:9e:a0:ca:b8:55:10:e0:05:ba:dd:1a:23:a1:50:31:
         52:c5:45:a2:18:22:db:20:ed:86:d4:eb:58:83:02:2a:bb:bd:
         aa:b0:98:06:6d:b8:0d:ba:33:53:cf:30:f2:dc:b6:86:e8:a9:
         26:ea:25:e0:80:62:68:27:42:b8:53:9b:77:bc:8b:e2:a0:39:
         88:82:0c:a0:8b:cc:91:c9:15:f1:97:9a:38:ee:44:0b:ca:da:
         c7:2d:4b:87:b2:ed:31:f2:c3:9b:ea:db:a0:74:d7:e6:cb:cc:
         82:bc:5e:5a:9f:fa:5c:76:fa:32:36:ef:37:c9:4c:11:b2:c3:
         2f:40:39:76:72:ca:7f:ab:94:79:7a:ed:94:c4:0b:43:0a:b2:
         ab:91:64:2d:dc:4c:6e:60:31:83:73:1c:af:c4:72:aa:79:09:
         10:54:ab:5a:fc:a2:90:6f:71:07:36:74:cc:0f:4e:44:c7:0a:
         a5:8b:f0:61:cb:5e:0c:0f:55:75:dc:99:93:4b:dc:45:e3:5a:
         5c:91:8e:c3:dc:2b:84:e0:d9:d7:4b:fc:87:14:e1:c7:be:32:
         60:6f:8c:57:93:22:c5:8d:3c:41:ff:fe:af:50:2a:2f:8e:64:
         26:d4:86:2f:ad:39:3e:56:09:6c:8a:e8:76:65:61:66:7f:28:
         32:0c:6b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:07 2024 by rpki-client on console-ams.rpki-client.org