Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F08B8C896B311EFBB063959762E951A.roa
File:                     4F08B8C896B311EFBB063959762E951A.roa (raw, json)
Hash identifier:          0halzFArl3tHs4h/78Nzr9ipzJh8zuD4AJuLVQJOk+A=
Subject key identifier:   0B:61:6A:A5:F7:B2:2F:BB:72:D7:7C:A3:17:90:DA:2A:E0:B3:18:BD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01040B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F08B8C896B311EFBB063959762E951A.roa
Signing time:             Wed 30 Oct 2024 11:37:14 +0000
ROA not before:           Wed 30 Oct 2024 11:37:09 +0000
ROA not after:            Wed 11 Dec 2024 11:37:09 +0000
asID:                     138915
IP address blocks:        154.203.136.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Nov 2024 00:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66571 (0x1040b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 30 11:37:09 2024 GMT
            Not After : Dec 11 11:37:09 2024 GMT
        Subject: CN=67221a6a-4e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:92:31:88:e1:34:5d:c0:ce:f0:03:1b:79:
                    88:67:93:3f:7c:55:1d:c9:3b:df:4a:0c:34:55:87:
                    e6:24:6c:a7:3a:42:08:ec:8f:09:a3:75:31:e4:91:
                    02:1d:7a:5e:51:95:6f:62:83:f2:c9:ac:56:37:3d:
                    19:96:b4:b9:cb:44:63:d5:e5:44:43:a1:35:31:f8:
                    ca:7d:af:07:7b:81:a1:9b:9d:04:25:0c:44:15:60:
                    12:e5:2b:ee:7b:9e:3a:ee:fd:98:3d:44:1a:7e:26:
                    49:31:f8:67:d2:93:04:f7:06:f1:47:9c:b3:36:9c:
                    40:41:b0:26:f4:01:bb:ee:8e:d5:1c:09:08:89:d4:
                    c8:a8:fd:ae:41:db:d0:09:eb:44:78:b6:5a:da:2f:
                    13:37:7c:92:db:3f:a3:d4:c7:25:54:9b:36:4f:70:
                    e0:9c:69:a2:83:73:9a:38:f6:48:d2:cd:24:69:1d:
                    4a:b9:31:0e:da:39:6c:01:fa:26:05:6a:af:20:a0:
                    1f:61:a0:cf:30:b8:5a:90:c1:7b:92:02:77:68:17:
                    c7:dd:44:a6:c3:7f:3e:ec:4b:95:e3:de:97:3e:53:
                    99:c3:80:82:2e:5e:2a:8e:48:0f:1e:de:d1:bb:40:
                    10:6d:10:ef:b8:8d:83:b4:6d:7e:7c:bb:1c:71:6a:
                    ec:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:61:6A:A5:F7:B2:2F:BB:72:D7:7C:A3:17:90:DA:2A:E0:B3:18:BD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F08B8C896B311EFBB063959762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:1c:f5:a5:44:ac:79:a3:8c:7e:c4:a3:c9:4e:85:5a:19:91:
         ca:f5:bd:a5:f6:c7:68:06:1f:64:c6:6c:3a:c9:77:2a:c7:28:
         a0:18:96:d6:a0:7a:ec:4c:f3:2e:35:5e:8f:ff:c7:62:11:9a:
         54:6e:f1:a3:cc:27:6c:cb:27:eb:c4:57:b9:0d:02:79:43:5e:
         2b:f8:c0:c4:b1:72:1a:b0:e7:e1:13:03:b7:9b:15:96:94:8a:
         c9:30:b7:73:a9:32:44:23:c1:e4:6f:7a:36:2f:6f:9e:86:06:
         10:1c:07:95:9f:87:96:78:7a:e0:6b:06:d9:c8:46:50:f9:e5:
         ee:a9:11:07:60:2a:cc:02:35:97:5f:4d:5b:6b:b6:9c:84:b5:
         8f:c0:0a:22:3c:29:54:07:3c:c9:83:4e:ef:b5:3d:2f:53:9c:
         0d:87:66:e9:43:c2:6b:32:95:60:ae:99:0d:d0:b2:8f:e0:12:
         81:2a:1b:d2:c2:4c:3d:f2:05:b7:76:94:4c:25:d3:78:94:6b:
         06:1e:e7:ed:f2:b4:8f:dc:e4:ed:d0:b6:95:38:f9:2c:fc:08:
         e4:27:86:30:7e:e8:8d:01:9d:3e:a2:2c:41:1c:f3:2a:d6:e4:
         2e:9e:67:6a:3d:a1:2a:4b:55:f5:d5:b0:de:33:4f:09:43:21:
         82:11:13:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----