Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A9E8E2253A011EEB848B9604AD9E6FC.roa
File:                     4A9E8E2253A011EEB848B9604AD9E6FC.roa (raw, json)
Hash identifier:          6Opfyt4eG6p825pmCm13OL7BAfhmpUjAYJoMmYu0xJU=
Subject key identifier:   87:E7:02:15:D2:B9:33:5E:6C:4C:A3:0A:83:83:4F:32:F9:7A:38:1A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       3D7F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A9E8E2253A011EEB848B9604AD9E6FC.roa
Signing time:             Fri 15 Sep 2023 08:17:21 +0000
ROA not before:           Fri 15 Sep 2023 08:17:17 +0000
ROA not after:            Sat 08 Jun 2024 08:17:17 +0000
asID:                     142403
IP address blocks:        154.221.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15743 (0x3d7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 08:17:17 2023 GMT
            Not After : Jun  8 08:17:17 2024 GMT
        Subject: CN=65041311-2028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e1:6d:b3:ac:b1:c9:dc:e7:b3:d8:f9:b4:9c:
                    26:1b:26:c8:b9:84:d9:0d:17:4e:e1:81:71:e6:55:
                    4b:5d:aa:34:4b:a0:e9:05:da:bb:70:27:f2:90:88:
                    2a:2c:1a:62:b4:f3:af:4b:88:99:e1:2c:5c:73:5c:
                    7f:b5:60:cd:99:1f:73:ea:89:18:1c:e8:47:d4:8d:
                    8e:3b:f4:c0:54:4d:50:cb:62:dc:b1:28:cc:68:0a:
                    d4:ab:61:d2:85:70:8a:ab:ce:1a:e4:69:db:1a:1c:
                    e9:b9:7e:68:66:7a:c9:ff:c4:97:b7:00:19:3d:2c:
                    7e:62:d9:db:ec:21:65:62:e3:86:48:86:da:4f:87:
                    4c:15:b0:8a:82:89:80:41:0c:53:6a:3c:9b:60:1b:
                    d4:9a:06:21:3c:27:a4:f9:f2:57:3d:c4:4e:78:25:
                    4c:4b:19:b0:41:a7:39:a9:97:0f:14:2d:a8:db:7f:
                    8f:15:eb:ea:67:40:50:76:7f:2d:34:9a:9d:a2:ca:
                    d8:27:95:af:17:45:ba:cd:f7:2f:2e:7b:51:e2:47:
                    c5:78:5a:86:32:76:40:6c:1a:51:82:c7:c7:89:d3:
                    fe:dc:51:be:aa:1d:d6:12:e8:ae:a7:eb:77:bf:c2:
                    42:e0:48:7d:c9:3b:fe:45:b2:f6:79:59:7c:aa:a5:
                    1d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E7:02:15:D2:B9:33:5E:6C:4C:A3:0A:83:83:4F:32:F9:7A:38:1A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A9E8E2253A011EEB848B9604AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.221.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:b7:12:ad:03:d7:b2:dc:01:8e:0f:99:c6:1f:8d:69:b8:20:
         56:ea:fc:0e:b3:12:d3:93:de:15:bc:07:6c:24:a6:47:95:93:
         c6:04:53:c4:4a:4e:5b:ca:e9:ab:19:77:7a:d5:ba:e1:99:fa:
         bf:61:e4:7e:6a:38:b1:21:e7:e3:6f:41:f4:a0:0b:5e:59:7d:
         aa:f6:1b:4b:81:bb:c4:80:a1:70:f4:42:06:de:62:53:7b:78:
         fb:27:56:0e:b6:82:e9:e1:73:de:83:fb:92:42:ae:44:a8:7b:
         7d:43:a3:66:3a:22:58:7d:20:0e:1d:6e:66:03:db:41:16:12:
         be:05:54:e1:e1:9b:81:cf:25:bf:72:7a:8b:a7:28:7b:53:cd:
         94:f5:df:9d:86:e5:e0:0f:9c:e8:f4:27:c5:dd:84:77:58:ad:
         0b:2f:11:29:b6:4f:3f:2e:af:32:16:00:0f:d0:d6:25:8d:60:
         30:bc:2d:fc:5a:a9:e6:bb:34:cb:61:7c:d8:e8:55:1c:63:2e:
         22:20:f8:63:08:46:70:cd:84:bf:c5:0e:56:c2:1b:2c:b4:4e:
         f8:50:18:9f:1c:2c:e8:79:78:87:60:c3:03:26:d1:02:8b:63:
         e2:8c:14:de:92:e6:0e:cf:89:44:dc:e8:05:55:00:4d:ad:98:
         79:48:e2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:22 2024 by rpki-client on console-fra.rpki-client.org