Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B30E9A8E78811EEB3B9ACC5775412E6.roa
File:                     4B30E9A8E78811EEB3B9ACC5775412E6.roa (raw, json)
Hash identifier:          TUVMsqvaaFiDHp+VFBOIZn/YMyVTkKhTOUoowUBGYfk=
Subject key identifier:   5B:16:99:D1:59:FF:8B:1D:21:1E:0E:6F:93:68:A0:C4:B3:CB:17:A3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A5BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B30E9A8E78811EEB3B9ACC5775412E6.roa
Signing time:             Thu 21 Mar 2024 13:38:26 +0000
ROA not before:           Thu 21 Mar 2024 13:38:21 +0000
ROA not after:            Sun 21 Apr 2024 13:38:21 +0000
asID:                     21587
IP address blocks:        154.194.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Apr 2024 13:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42427 (0xa5bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 21 13:38:21 2024 GMT
            Not After : Apr 21 13:38:21 2024 GMT
        Subject: CN=65fc3852-6404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d3:c9:a3:d9:ac:6c:71:5e:89:13:2d:e5:49:
                    a4:8d:ac:ec:fb:0c:12:41:2d:6b:47:3d:f1:c1:7b:
                    77:00:57:a7:cf:99:c0:bd:08:e5:fd:74:8f:91:db:
                    70:f5:3a:6d:c2:10:52:ba:55:52:77:97:6b:5f:c0:
                    19:9b:5c:ae:a4:c6:9d:e9:e6:75:91:37:c5:84:fa:
                    c4:18:dd:99:ca:41:24:43:d7:55:e8:df:c5:24:98:
                    a3:d3:10:13:bb:00:54:5b:c5:1c:05:47:71:48:7b:
                    a7:75:9a:6e:7f:4d:29:ae:ae:69:7c:04:b7:80:59:
                    3a:0e:55:29:23:2d:9b:5f:83:3f:59:8f:42:52:b1:
                    74:b5:43:04:eb:bb:6e:c7:b8:8b:cc:8b:5c:65:a5:
                    b6:0b:40:3d:1e:7e:55:a2:bc:f6:23:64:ed:19:ea:
                    e4:e7:8a:dc:3c:b2:8d:4c:bf:25:4b:12:29:c5:ea:
                    2c:e6:0c:52:7b:a5:3c:9e:fd:cd:6e:be:19:df:b0:
                    de:a3:35:39:d7:07:d4:2a:61:bc:e4:50:ae:39:7d:
                    a0:21:33:b4:2c:0a:f8:82:75:f1:13:82:47:ac:1f:
                    06:eb:8c:a0:57:29:e6:54:08:bb:47:61:53:14:84:
                    b0:a9:5f:be:b4:4c:1d:0e:4d:cf:df:c8:df:b6:50:
                    41:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:16:99:D1:59:FF:8B:1D:21:1E:0E:6F:93:68:A0:C4:B3:CB:17:A3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B30E9A8E78811EEB3B9ACC5775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:99:c3:5a:2e:60:80:a7:2e:a6:06:07:f1:45:76:34:2f:cd:
         84:14:f3:21:ad:8f:c5:44:20:95:92:a1:99:9b:d7:8e:cc:4a:
         25:08:8e:bd:a9:1c:f7:20:ac:1b:bc:61:be:d6:99:8b:a8:f8:
         34:00:19:75:e8:eb:8d:92:1b:80:fd:ab:80:60:e9:77:c3:8c:
         82:d6:11:5d:4c:08:0c:30:4c:2a:b9:46:c7:92:c4:2e:3a:f8:
         72:09:d1:34:8b:9d:df:dc:3c:b4:d1:11:2e:2c:b9:fc:f5:8c:
         6d:25:1b:5e:93:cb:7a:ea:50:38:a2:7e:05:df:fa:4a:97:9a:
         b2:3b:98:85:0e:1f:50:a7:be:1b:a7:20:13:0b:66:04:bd:b8:
         3e:ca:c3:2b:aa:7b:f9:d7:37:53:e0:90:1e:87:0a:5b:cc:1f:
         b0:26:d1:8d:5b:4c:f6:26:ae:dd:34:2b:1d:99:ab:6a:b3:97:
         92:dc:fc:61:a1:ad:00:a6:67:64:cf:aa:ea:e8:72:e1:06:28:
         a2:ed:67:93:eb:88:fd:7d:8b:33:80:f5:a2:af:6c:82:a7:03:
         00:b2:55:04:92:ac:81:c8:cc:b8:b0:54:6c:57:b9:02:06:f3:
         be:7e:a4:ab:ef:de:38:01:80:ef:61:07:7b:f6:aa:0c:cf:a6:
         fa:cc:bb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:19 2024 by rpki-client on console-ams.rpki-client.org