Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E775D3EFB8611EDA89CBD7E4AD9E6FC.roa
File:                     4E775D3EFB8611EDA89CBD7E4AD9E6FC.roa (raw, json)
Hash identifier:          m2omaCewrigyb5C70EG1Ah/qLCJM55PidSokkd9vbfM=
Subject key identifier:   9B:3A:FE:BE:1C:EE:2D:67:F8:7B:FF:71:91:E3:9D:E2:4E:EA:15:A3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       27ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E775D3EFB8611EDA89CBD7E4AD9E6FC.roa
Signing time:             Fri 26 May 2023 05:29:38 +0000
ROA not before:           Fri 26 May 2023 05:29:33 +0000
ROA not after:            Sun 30 Jun 2024 05:29:33 +0000
asID:                     984
IP address blocks:        154.89.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10221 (0x27ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 26 05:29:33 2023 GMT
            Not After : Jun 30 05:29:33 2024 GMT
        Subject: CN=647043c2-a15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:86:d2:3f:8a:43:3d:18:96:e6:d8:05:4c:57:
                    99:f3:ff:e2:36:b6:6c:9d:48:d9:4a:d7:94:5a:71:
                    26:c8:33:eb:94:cb:af:0e:cb:8c:6d:0a:69:5f:26:
                    fb:ca:6b:0c:ea:df:d0:65:37:ba:c8:be:5a:b1:f4:
                    df:5a:94:f8:cc:f3:c2:b2:66:24:8f:d4:f4:9a:96:
                    58:c0:24:dd:8c:6c:4b:e6:eb:a4:91:8d:29:a1:31:
                    2f:d0:4b:30:02:8b:de:2f:78:92:6b:1d:96:9b:c4:
                    0a:15:5d:ad:ff:f6:40:e2:d7:76:5f:73:e4:1d:8d:
                    a4:fd:0f:a3:ce:1f:ee:2e:55:b5:12:47:b6:5a:3f:
                    7e:0c:49:e9:a3:1c:93:b4:8a:b5:98:7c:b7:23:13:
                    8b:08:7a:95:27:27:56:d8:91:c3:12:41:8b:95:b8:
                    99:fd:5f:63:61:d2:dc:5e:cf:6a:46:ad:8d:f4:00:
                    fb:31:76:32:7a:27:27:a2:2d:ce:3c:cd:58:2a:5a:
                    3b:ee:59:92:d5:15:1b:39:ae:a4:24:2d:ec:e7:38:
                    cb:bd:16:73:4a:18:80:22:a2:ec:56:86:f8:d0:be:
                    ce:84:1d:b0:b7:0f:22:20:b9:7c:27:2c:e3:f6:21:
                    b2:64:7f:77:f0:7a:2d:e8:d9:77:1b:7c:44:67:b6:
                    90:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3A:FE:BE:1C:EE:2D:67:F8:7B:FF:71:91:E3:9D:E2:4E:EA:15:A3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E775D3EFB8611EDA89CBD7E4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         29:06:a8:e8:02:de:0f:09:bd:54:ba:1d:56:0a:7c:c3:fe:72:
         08:ee:30:e6:cd:a3:97:1e:3d:f6:30:1f:79:34:6d:d5:9b:bc:
         6b:d0:b2:ec:9f:bb:98:89:86:5e:64:a1:2c:3b:fa:42:42:66:
         76:0a:9e:3e:75:12:db:30:9e:79:55:36:bc:e0:fa:41:87:d4:
         90:80:4c:39:0e:6c:e5:b4:66:bb:89:16:12:2b:e6:a6:22:14:
         05:b4:36:ed:6e:2d:b7:dd:bb:37:3e:f1:7f:a9:6c:a2:ab:f3:
         c0:10:20:7e:45:ae:98:3d:ba:d8:fa:f5:01:3b:9c:18:7c:60:
         de:df:5d:28:9e:f0:53:51:a2:fa:08:ac:df:88:9f:11:31:1c:
         70:f9:bc:f0:8d:d8:10:21:8b:16:8f:5f:8c:3a:74:fb:95:14:
         5c:c1:12:23:db:af:81:e8:73:85:a1:8e:7b:92:30:f5:cb:95:
         d1:ba:1f:6d:18:d8:b4:b6:fb:a9:7a:70:7e:4e:66:82:4e:87:
         6a:68:86:fe:72:ca:e5:d8:9b:fd:a3:c1:9e:24:f4:bf:8d:38:
         b2:d6:e8:61:62:06:51:2b:51:88:dd:bb:f2:f7:2c:70:a6:43:
         93:9d:38:ea:e9:eb:0a:ab:44:39:b9:57:9d:90:bb:94:56:bb:
         59:a5:07:83
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICJ+0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA1MjYwNTI5MzNaFw0yNDA2MzAwNTI5MzNaMBgxFjAU
BgNVBAMTDTY0NzA0M2MyLWExNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIhtI/ikM9GJbm2AVMV5nz/+I2tmydSNlK15RacSbIM+uUy68Oy4xtCmlf
JvvKawzq39BlN7rIvlqx9N9alPjM88KyZiSP1PSalljAJN2MbEvm66SRjSmhMS/Q
SzACi94veJJrHZabxAoVXa3/9kDi13Zfc+QdjaT9D6POH+4uVbUSR7ZaP34MSemj
HJO0irWYfLcjE4sIepUnJ1bYkcMSQYuVuJn9X2Nh0txez2pGrY30APsxdjJ6Jyei
Lc48zVgqWjvuWZLVFRs5rqQkLeznOMu9FnNKGIAiouxWhvjQvs6EHbC3DyIguXwn
LOP2IbJkf3fwei3o2XcbfERntpBlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUmzr+
vhzuLWf4e/9xkeOd4k7qFaMwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzRFNzc1RDNFRkI4NjExRURBODlDQkQ3RTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAeaWYAwDQYJKoZIhvcNAQEL
BQADggEBACkGqOgC3g8JvVS6HVYKfMP+cgjuMObNo5cePfYwH3k0bdWbvGvQsuyf
u5iJhl5koSw7+kJCZnYKnj51EtswnnlVNrzg+kGH1JCATDkObOW0ZruJFhIr5qYi
FAW0Nu1uLbfduzc+8X+pbKKr88AQIH5Frpg9utj69QE7nBh8YN7fXSie8FNRovoI
rN+InxExHHD5vPCN2BAhixaPX4w6dPuVFFzBEiPbr4Hoc4WhjnuSMPXLldG6H20Y
2LS2+6l6cH5OZoJOh2pohv5yyuXYm/2jwZ4k9L+NOLLW6GFiBlErUYjdu/L3LHCm
Q5OdOOrp6wqrRDm5V52Qu5RWu1mlB4M=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:08 2024 by rpki-client on console-ams.rpki-client.org