Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48FE0E885F1811EF8E9C009E762E951A.roa
File:                     48FE0E885F1811EF8E9C009E762E951A.roa (raw, json)
Hash identifier:          1JxL0QW2sl408FVgCBgFL5hQeXDuQ0Tpkqv00x4GbJQ=
Subject key identifier:   16:B4:81:3E:4D:E0:BD:E1:82:A9:E1:68:1D:2F:B9:6E:8E:AE:6C:EB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       E350
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48FE0E885F1811EF8E9C009E762E951A.roa
Signing time:             Tue 20 Aug 2024 17:18:58 +0000
ROA not before:           Tue 20 Aug 2024 17:18:55 +0000
ROA not after:            Tue 21 Jan 2025 17:18:55 +0000
asID:                     63199
IP address blocks:        154.207.94.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58192 (0xe350)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 17:18:55 2024 GMT
            Not After : Jan 21 17:18:55 2025 GMT
        Subject: CN=66c4d002-bae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c8:bc:1e:f7:23:e3:4e:31:e7:f6:af:32:59:
                    a0:29:ab:1a:4c:48:c5:cd:88:85:bb:c0:a4:92:cd:
                    b5:f5:d9:ab:52:5a:ed:2d:c5:12:0b:ff:70:d9:a8:
                    a8:75:58:bf:26:9a:0f:8c:fc:60:9b:e3:88:bd:bf:
                    cb:81:01:e1:58:02:98:d6:58:11:1e:b1:3f:53:c7:
                    0e:5a:84:16:06:bf:aa:87:0f:5b:72:79:da:1f:96:
                    ed:27:61:3c:51:9e:e5:5b:ab:1a:b7:03:71:f0:29:
                    df:16:84:79:5c:d1:36:dd:87:11:99:98:25:ee:e3:
                    2a:1b:0d:5f:2b:69:c5:cd:0a:6c:b6:33:25:87:85:
                    60:5f:bd:76:f1:06:40:ef:06:6c:23:41:22:27:40:
                    6a:b8:84:b0:c3:ff:ec:36:ab:19:a3:86:eb:a9:2d:
                    3d:9e:36:2c:2c:4a:15:0b:99:d7:70:a1:09:85:08:
                    b2:50:36:4d:68:0f:35:da:1b:06:21:7a:a4:6d:4f:
                    b5:2b:69:df:01:a9:20:ae:b8:e5:97:d8:da:3c:99:
                    4a:a3:5b:52:13:de:7e:66:c7:5d:fc:33:ae:c9:c0:
                    2e:d0:47:c5:da:51:c4:12:dc:38:a4:61:e4:dd:6a:
                    e1:f3:3d:33:d4:8c:af:57:da:ba:46:dd:6a:bf:14:
                    84:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B4:81:3E:4D:E0:BD:E1:82:A9:E1:68:1D:2F:B9:6E:8E:AE:6C:EB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48FE0E885F1811EF8E9C009E762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:db:2f:84:29:54:b1:10:8c:8a:ed:69:54:02:2d:69:f5:8d:
         fe:0d:2d:db:44:de:3e:e9:1b:69:bf:48:79:80:3e:2c:27:5e:
         93:06:30:d7:f3:e4:10:5c:89:d3:39:14:5a:c3:6a:0f:dc:0e:
         0d:7d:5d:96:a7:b0:dd:99:2b:9e:03:e4:57:49:61:c2:e6:b8:
         68:1f:d8:5d:c4:7b:2b:c5:3c:c7:55:e6:a3:73:22:d0:29:f2:
         7e:98:45:1e:b5:f8:6d:15:0f:a1:fc:94:ac:8d:0c:15:64:51:
         d8:2f:da:26:40:a1:3f:d1:fb:1f:02:a5:33:f9:38:3b:ad:af:
         a6:43:6e:67:c5:28:7d:5d:1b:be:d4:d5:12:c2:fc:bd:dc:a9:
         d7:6a:65:75:1b:bd:0e:a1:98:88:f4:37:bc:99:70:59:60:e1:
         46:0d:66:e6:bf:de:f4:6f:0e:18:ff:71:c4:db:c2:95:af:88:
         ba:c8:c2:35:5a:cf:e1:7d:01:8a:aa:42:d4:35:bf:44:3f:61:
         d8:ef:cb:b8:75:a4:06:a0:d0:2a:6f:0e:2b:6e:18:95:80:00:
         61:1c:22:c3:23:22:d9:29:95:48:73:a5:22:16:a8:11:f1:67:
         14:99:00:50:9b:8c:42:bd:26:74:5e:8c:42:81:d7:12:bf:83:
         9b:39:ce:fa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAONQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwODIwMTcxODU1WhcNMjUwMTIxMTcxODU1WjAYMRYw
FAYDVQQDEw02NmM0ZDAwMi1iYWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1ci8Hvcj404x5/avMlmgKasaTEjFzYiFu8Ckks219dmrUlrtLcUSC/9w
2aiodVi/JpoPjPxgm+OIvb/LgQHhWAKY1lgRHrE/U8cOWoQWBr+qhw9bcnnaH5bt
J2E8UZ7lW6satwNx8CnfFoR5XNE23YcRmZgl7uMqGw1fK2nFzQpstjMlh4VgX712
8QZA7wZsI0EiJ0BquISww//sNqsZo4brqS09njYsLEoVC5nXcKEJhQiyUDZNaA81
2hsGIXqkbU+1K2nfAakgrrjll9jaPJlKo1tSE95+Zsdd/DOuycAu0EfF2lHEEtw4
pGHk3Wrh8z0z1IyvV9q6Rt1qvxSE0QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBa0
gT5N4L3hgqnhaB0vuW6OrmzrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80OEZFMEU4ODVGMTgxMUVGOEU5QzAwOUU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms9eMA0GCSqGSIb3DQEB
CwUAA4IBAQCr2y+EKVSxEIyK7WlUAi1p9Y3+DS3bRN4+6Rtpv0h5gD4sJ16TBjDX
8+QQXInTORRaw2oP3A4NfV2Wp7DdmSueA+RXSWHC5rhoH9hdxHsrxTzHVeajcyLQ
KfJ+mEUetfhtFQ+h/JSsjQwVZFHYL9omQKE/0fsfAqUz+Tg7ra+mQ25nxSh9XRu+
1NUSwvy93KnXamV1G70OoZiI9De8mXBZYOFGDWbmv970bw4Y/3HE28KVr4i6yMI1
Ws/hfQGKqkLUNb9EP2HY78u4daQGoNAqbw4rbhiVgABhHCLDIyLZKZVIc6UiFqgR
8WcUmQBQm4xCvSZ0XoxCgdcSv4ObOc76
-----END CERTIFICATE-----