Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B394F948B9811EFA6E50B60762E951A.roa
File:                     4B394F948B9811EFA6E50B60762E951A.roa (raw, json)
Hash identifier:          OgUTtOmNENzTEsQQLm1/tKerP5FVljU5uqWcoPnPhug=
Subject key identifier:   AC:FE:61:57:A5:5F:31:B9:04:A2:DA:64:CD:A6:A1:8E:20:4F:2E:A2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       FE9D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B394F948B9811EFA6E50B60762E951A.roa
Signing time:             Wed 16 Oct 2024 08:26:09 +0000
ROA not before:           Wed 16 Oct 2024 08:26:05 +0000
ROA not after:            Fri 22 Nov 2024 08:26:05 +0000
asID:                     18779
IP address blocks:        154.203.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 22 Nov 2024 08:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65181 (0xfe9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 16 08:26:05 2024 GMT
            Not After : Nov 22 08:26:05 2024 GMT
        Subject: CN=670f78a0-3df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:62:e2:ed:19:06:4b:ea:54:09:b9:78:16:
                    dd:d7:ba:fe:81:fb:5e:a2:dc:f5:f6:b5:41:92:b0:
                    27:b6:3c:80:14:e9:26:60:c8:8b:69:21:c1:62:19:
                    aa:65:85:b3:ce:6a:5d:25:71:73:4c:57:b4:5e:13:
                    d4:ac:03:08:0c:c2:94:d9:90:fb:c6:50:97:01:c2:
                    00:1e:42:03:8d:4e:5f:db:ce:1c:a3:a6:6e:9e:05:
                    17:d3:d5:66:8e:21:06:c8:2d:f2:96:0c:06:64:4b:
                    9e:ee:1d:8e:79:9b:a7:bd:e6:ba:f0:e1:f7:bf:f5:
                    f3:5d:68:d7:75:ae:e4:12:83:ff:0d:ca:a8:86:96:
                    c1:64:a8:31:cb:9b:86:b3:df:be:76:49:16:66:3a:
                    06:28:e0:ae:c2:5f:9d:2d:53:d9:4e:93:ba:75:18:
                    1a:1a:6e:87:75:71:af:3c:e2:8e:7e:ca:20:5f:ef:
                    ac:cf:96:9f:88:f7:20:a3:f8:96:5e:a0:7e:bc:63:
                    c2:21:73:5b:f3:13:f4:2f:10:8c:a2:a3:a7:70:c0:
                    bc:40:bf:c5:09:fe:62:c8:ba:8f:cf:d4:40:e2:7d:
                    95:6e:35:70:b1:64:36:87:a3:47:73:bc:d0:6b:38:
                    45:c9:5b:87:0f:ed:85:13:d9:01:3c:8c:86:fd:67:
                    2b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FE:61:57:A5:5F:31:B9:04:A2:DA:64:CD:A6:A1:8E:20:4F:2E:A2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B394F948B9811EFA6E50B60762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:90:e9:a5:aa:9a:0e:97:e5:a0:15:0d:00:22:d5:10:69:bc:
         65:29:a7:3c:41:ad:d3:35:cc:e5:79:8b:dd:b3:c6:94:4e:82:
         f6:80:3f:13:e6:5e:1c:9b:74:0f:b8:29:61:fe:a8:db:31:e1:
         0b:3b:f5:fe:e6:7c:59:bb:b4:e3:9f:fa:a5:e8:8f:68:68:db:
         cb:b0:56:03:d0:f5:b1:e0:47:2d:72:91:c1:13:2c:ca:60:df:
         44:b7:c6:a2:33:9f:5a:8f:3f:15:f8:b4:38:f8:bb:a3:4b:2a:
         96:5f:df:12:8e:11:ab:5e:c9:57:cb:c4:83:3b:c0:58:ad:bd:
         85:92:1f:1b:11:7b:9c:27:51:bd:20:91:d2:76:80:bd:8e:e5:
         a9:37:a9:04:bf:70:09:3c:b6:9c:64:48:62:c9:e5:c7:fb:26:
         9d:26:b8:c5:c0:ae:15:13:2a:98:72:91:20:07:e9:b9:7d:dd:
         9c:e2:b9:b7:c5:e7:b3:0e:ec:49:49:a8:b7:90:62:a9:6f:fc:
         82:f4:74:df:44:5d:16:e1:7a:47:93:9b:8e:f0:39:5e:fb:76:
         1b:78:5d:34:f0:84:7f:f9:bc:cd:93:10:7e:c4:ba:8b:db:14:
         22:61:9d:41:57:3e:e4:36:35:72:e6:2c:d1:fc:05:ce:c6:07:
         41:14:9c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:38 2024 by rpki-client on console-ams.rpki-client.org