Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45B93BC0F7C711EE9A748360017001B1.roa
File:                     45B93BC0F7C711EE9A748360017001B1.roa (raw, json)
Hash identifier:          OeiPsmLtgEfXlEIqLvXZOa9NZI66ea3HWpNJLSnp0ho=
Subject key identifier:   D7:1C:8C:E5:8D:5E:AA:1A:46:FB:C5:E7:13:FA:C0:A5:AA:D8:AC:68
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       AB47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45B93BC0F7C711EE9A748360017001B1.roa
Signing time:             Thu 11 Apr 2024 05:49:34 +0000
ROA not before:           Thu 11 Apr 2024 05:49:30 +0000
ROA not after:            Sun 19 May 2024 05:49:30 +0000
asID:                     138915
IP address blocks:        154.90.36.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43847 (0xab47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 11 05:49:30 2024 GMT
            Not After : May 19 05:49:30 2024 GMT
        Subject: CN=661779ed-8906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:81:2f:93:3c:eb:1e:ed:d7:d2:3d:15:c2:
                    b3:e5:73:17:bb:2b:29:56:19:50:3c:81:11:12:0a:
                    b9:88:25:9c:71:0b:69:61:74:3f:75:2f:56:1f:43:
                    8c:5f:ba:0e:d1:e1:32:56:95:dc:59:b6:3b:65:b5:
                    21:d7:94:bd:cb:c0:14:a6:75:7d:78:2a:04:25:ee:
                    ce:d7:79:b5:03:9b:ab:56:49:14:87:e4:6f:51:9d:
                    f5:6e:8c:ef:92:06:8e:bc:5f:e2:e3:37:0f:e3:a3:
                    bb:20:68:48:19:45:ec:5b:6b:65:e4:0d:fb:f9:03:
                    c1:dd:3e:1d:76:fd:42:6b:ed:e1:d1:94:85:19:53:
                    ae:18:97:40:cb:a5:93:6a:43:51:c1:d0:d4:13:02:
                    12:ed:16:f3:7a:ea:43:aa:7e:60:03:75:7b:4b:c2:
                    fd:2b:2c:ea:5f:db:2e:e4:ab:ad:12:b4:0d:0a:ac:
                    42:fb:de:3c:f0:b7:38:1b:11:12:9b:b8:f4:cb:00:
                    87:74:9e:4d:74:e9:03:a0:25:e9:5f:50:4e:92:e3:
                    19:60:ce:2d:b1:ed:eb:5e:af:6d:f8:4f:98:7f:be:
                    3c:58:4f:75:06:8c:b7:60:c5:c1:18:e6:67:55:a7:
                    e3:a5:5b:f9:32:4b:f3:f3:cd:f1:30:01:ad:87:a9:
                    ac:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1C:8C:E5:8D:5E:AA:1A:46:FB:C5:E7:13:FA:C0:A5:AA:D8:AC:68
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45B93BC0F7C711EE9A748360017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:e0:98:51:ea:9b:79:a4:fc:2d:5d:a2:38:ca:e1:c1:4f:a9:
         e3:20:22:de:7a:2d:5b:fd:00:f8:6f:fb:70:5e:77:65:c8:64:
         47:e1:9f:a4:61:26:18:73:16:83:c9:b4:65:d2:a1:da:47:23:
         5c:b3:0b:f1:0b:04:f4:3b:20:86:76:2b:c4:8f:28:f9:fd:67:
         23:7d:1d:c9:af:7a:2f:9b:c6:74:7b:c3:b2:5d:c6:75:07:84:
         09:da:c7:1b:aa:92:e0:f6:a7:88:db:e7:42:33:2f:2a:f4:db:
         b2:9c:4e:9d:5b:6d:40:b7:a4:d2:b1:fe:0b:94:c4:50:87:40:
         2b:e4:5e:07:24:79:ff:41:46:ea:d0:d7:4e:12:0c:37:c2:80:
         5e:8d:32:3d:28:73:09:8e:70:2a:21:ca:59:ac:94:0b:5d:05:
         ff:f0:bf:9f:b0:39:b1:24:62:9f:92:a3:78:19:0e:e5:7d:56:
         d6:e5:1b:fa:3e:1e:54:12:1c:d3:17:d7:a6:1c:58:c5:10:e7:
         d9:22:1d:54:b2:dc:41:b0:3a:71:ba:51:33:0b:c9:0b:98:37:
         8b:ab:de:d4:d3:9e:b1:6e:b8:71:bf:bb:8e:14:69:68:9c:c5:
         bb:7c:1c:79:ee:f6:6b:0c:eb:95:72:84:e5:0a:6d:cf:8a:52:
         cc:fe:0e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:22 2024 by rpki-client on console-fra.rpki-client.org