Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50F41604976811EFA0235353762E951A.roa
File:                     50F41604976811EFA0235353762E951A.roa (raw, json)
Hash identifier:          qpTMdA3lNT7unLPx9MbOiTEDffTWWM8Kl3MbVJYLcBs=
Subject key identifier:   AD:EC:ED:F4:84:BC:EE:B5:82:35:68:26:16:81:B4:83:4D:40:0A:AC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01048A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50F41604976811EFA0235353762E951A.roa
Signing time:             Thu 31 Oct 2024 09:12:56 +0000
ROA not before:           Thu 31 Oct 2024 09:12:52 +0000
ROA not after:            Sun 24 Nov 2024 09:12:52 +0000
asID:                     54467
IP address blocks:        154.223.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66698 (0x1048a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 31 09:12:52 2024 GMT
            Not After : Nov 24 09:12:52 2024 GMT
        Subject: CN=67234a18-47ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:9c:b8:43:4d:a8:80:c2:c0:8e:22:9e:3c:
                    f6:52:ab:96:43:55:0f:48:ab:8b:c8:ba:a8:b1:e4:
                    2a:cb:a0:2f:74:36:3b:96:c2:a8:cc:75:6a:0b:4c:
                    30:1b:27:aa:4f:4b:be:09:da:91:fa:ea:63:ec:a8:
                    4b:f3:52:f5:cc:01:f9:e1:7f:a9:5a:7f:5d:28:e8:
                    f2:a9:fc:e6:94:23:83:96:5f:d2:cd:58:ff:62:06:
                    cf:39:e5:f3:03:2b:87:4b:d7:fa:64:36:4c:fa:7c:
                    96:7a:cb:d1:05:a7:c4:0d:67:ba:6f:83:55:f8:59:
                    31:2d:c6:40:fa:e6:1e:f2:ab:b7:94:7a:da:04:f4:
                    9d:9c:b0:da:6f:26:fb:d0:99:da:4e:6a:bb:e4:b1:
                    cb:d0:36:27:2c:0f:0c:01:b4:8c:9c:5d:48:ef:a0:
                    32:0b:b5:72:01:79:87:4c:4b:49:7c:81:ae:0e:a2:
                    1d:63:f8:d7:00:91:37:38:fe:34:20:64:d4:55:52:
                    fa:2a:70:cd:bd:b7:94:1d:e8:a2:44:09:f8:fb:30:
                    a7:7d:ea:74:c0:20:92:c9:97:63:5e:01:2c:0c:a8:
                    2c:c6:58:75:09:73:0d:73:c9:e0:c1:07:01:3d:74:
                    f2:6a:89:13:c3:6d:d4:2a:83:8f:0c:9d:ec:3f:71:
                    6e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EC:ED:F4:84:BC:EE:B5:82:35:68:26:16:81:B4:83:4D:40:0A:AC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50F41604976811EFA0235353762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         97:3f:16:08:58:0e:41:60:8c:45:70:27:b6:67:a2:38:5f:77:
         2d:e1:f9:80:f5:da:ed:aa:00:c9:8d:3d:d8:bb:77:64:ad:06:
         42:c6:62:7c:25:42:47:6f:2c:bf:b2:12:e1:35:4a:e1:b0:c9:
         3c:89:75:9b:32:38:6f:70:89:9b:02:07:19:6d:d7:ce:7b:91:
         f7:54:40:09:ff:3b:58:79:79:6e:a9:11:52:ab:0f:f0:e3:2f:
         75:d3:10:3f:6e:f3:f1:c5:f0:74:31:b5:fa:7a:2a:4c:e5:5c:
         55:cc:c5:fa:e6:b1:d8:f2:42:3a:b1:a5:90:08:f5:ea:8f:4c:
         08:fa:dc:e3:47:52:94:21:7a:33:03:4c:6f:52:0a:27:41:c3:
         4a:e2:7f:24:d5:ec:01:56:e4:ef:c3:04:97:76:f0:93:73:36:
         b3:7d:38:da:d7:8e:ef:48:9c:df:c1:c7:ff:27:00:0f:fc:f0:
         e1:0c:24:30:a5:ae:1a:8e:21:8a:b9:aa:d7:a7:18:e3:04:fa:
         e4:98:89:ed:f4:e2:75:da:04:6f:4c:a9:13:38:3f:5f:73:62:
         0a:5a:f4:a4:e4:5c:46:37:ad:e7:f6:99:4d:ca:13:a4:1f:be:
         2e:3b:09:e4:a9:15:ec:a7:00:4c:95:6a:83:36:3d:c6:ee:f3:
         d8:a7:76:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----