Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B3DDAE07C5411EE999FD12F4AD9E6FC.roa
File:                     4B3DDAE07C5411EE999FD12F4AD9E6FC.roa (raw, json)
Hash identifier:          IKcsUer4UycUdUgAf8YnDvmlduMOClO/shk5r5eUg3w=
Subject key identifier:   46:F5:50:88:E0:E0:7A:29:79:80:F6:83:4D:BE:D9:D7:A5:D1:E9:7B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       4BD1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B3DDAE07C5411EE999FD12F4AD9E6FC.roa
Signing time:             Mon 06 Nov 2023 03:26:38 +0000
ROA not before:           Mon 06 Nov 2023 03:26:34 +0000
ROA not after:            Tue 05 Nov 2024 03:26:34 +0000
asID:                     133448
IP address blocks:        154.92.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19409 (0x4bd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  6 03:26:34 2023 GMT
            Not After : Nov  5 03:26:34 2024 GMT
        Subject: CN=65485cee-6213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:42:d2:12:cf:7a:30:9e:dc:03:d7:a2:8f:
                    eb:5e:d6:b2:4c:27:69:f1:22:76:ee:05:f3:dd:46:
                    14:de:9f:85:ad:10:ae:e4:27:48:17:ad:03:f9:12:
                    9a:12:b7:57:0f:db:6f:6e:d5:e4:f9:78:ed:c4:21:
                    f7:ce:0e:dd:34:9d:94:da:e7:6d:a8:87:67:b5:98:
                    f4:b9:55:40:3f:23:d2:d4:20:68:b3:43:bc:7f:bb:
                    f7:39:2a:86:78:82:d7:34:1e:c2:2e:a4:88:c0:b8:
                    af:dd:47:47:f6:42:41:14:a7:c0:5d:54:1a:21:c3:
                    04:82:ab:ca:4a:7c:7f:81:72:bf:97:1f:28:c8:34:
                    91:5c:aa:d7:54:ed:1b:f2:9a:ea:d9:f3:fd:ef:c4:
                    b7:19:1c:0b:3b:bc:f5:8b:63:93:6c:dd:17:4c:46:
                    97:de:a6:00:70:64:06:1c:60:ba:3c:68:34:86:ff:
                    44:2b:26:db:31:39:21:f6:e7:3d:8f:9a:9a:00:93:
                    1e:79:0b:d5:e3:a5:3b:75:89:39:d7:11:ce:6e:1c:
                    cd:b8:fb:9a:8f:e1:95:57:92:99:3b:8a:2c:95:12:
                    d8:53:9d:e0:ea:98:13:c2:c6:19:c5:c9:28:47:72:
                    2a:56:fa:3a:ef:e1:db:ba:73:0a:1c:5b:a7:68:b1:
                    87:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F5:50:88:E0:E0:7A:29:79:80:F6:83:4D:BE:D9:D7:A5:D1:E9:7B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B3DDAE07C5411EE999FD12F4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:32:2e:cd:7f:96:88:f3:18:3c:0c:37:ae:7f:88:1e:d0:7b:
         81:04:d9:71:88:2c:c3:b7:e9:f8:f3:e5:c6:e0:b5:7c:50:60:
         54:b0:c9:42:71:f1:42:27:00:07:45:97:53:94:d0:be:4b:e5:
         4d:76:62:28:94:6d:88:a7:60:97:90:2f:02:6f:9e:f3:ab:e9:
         df:cf:43:36:e2:ed:ab:c5:7d:d1:b3:0a:61:7d:f6:19:fa:ac:
         55:77:17:ca:28:18:30:31:a2:2a:7b:75:18:38:f5:ef:34:86:
         87:f8:56:91:e9:32:28:34:bc:d9:82:86:97:57:87:e8:11:01:
         d0:14:9f:2c:b4:ae:d2:9a:a6:56:8d:73:1f:c1:4e:6f:e1:82:
         6b:8a:78:de:b6:93:4d:7e:b2:36:e0:6c:07:e9:c6:e5:da:61:
         4c:0a:21:3d:18:09:ad:d4:36:1a:a8:ca:6d:9a:d1:9c:d6:2b:
         cf:7f:3b:4d:7c:9c:49:a7:2c:8c:8a:0d:f7:1e:c2:ca:49:54:
         ee:2e:05:fa:d4:5e:1c:fc:5e:61:eb:bb:42:0b:51:71:88:65:
         05:f4:b9:ac:6c:29:6a:e1:73:c8:1e:94:59:4a:4f:25:cc:8d:
         f8:93:1b:7f:05:da:43:fc:ac:57:1a:07:81:10:85:a9:4c:a0:
         a0:d6:83:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:22 2024 by rpki-client on console-fra.rpki-client.org