Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53E6D538FEA111ED83D2DA694AD9E6FC.roa
File:                     53E6D538FEA111ED83D2DA694AD9E6FC.roa (raw, json)
Hash identifier:          HPVohRHbhH9gepfvL/InQuMrz4XKIlqFE+SEpKAy0eI=
Subject key identifier:   D2:54:EE:20:F7:4F:2F:73:CA:41:74:F0:3E:10:B8:FE:1C:5A:7C:F9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       285E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53E6D538FEA111ED83D2DA694AD9E6FC.roa
Signing time:             Tue 30 May 2023 04:20:37 +0000
ROA not before:           Tue 30 May 2023 04:20:33 +0000
ROA not after:            Wed 15 May 2024 04:20:33 +0000
asID:                     63888
IP address blocks:        154.207.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10334 (0x285e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 30 04:20:33 2023 GMT
            Not After : May 15 04:20:33 2024 GMT
        Subject: CN=64757995-96d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3a:72:ef:2e:93:49:2e:59:7f:61:b4:f6:c1:
                    c7:47:cb:14:ab:c2:e2:b9:45:3e:e8:43:51:5a:58:
                    71:ef:bf:23:41:38:2c:9f:57:43:17:af:01:81:92:
                    d8:6a:28:cc:57:53:73:47:20:e6:68:36:ca:3e:03:
                    f8:f5:c6:ff:cb:04:e0:74:8e:a5:f9:a2:88:bd:ae:
                    69:b5:11:ee:4b:67:cc:18:21:59:c1:ab:a1:14:f4:
                    07:0f:ed:4c:8b:b2:bc:2c:a8:47:e0:22:7d:fc:82:
                    cf:9f:1f:ad:63:0e:bb:5c:ed:8c:ec:d3:43:45:c5:
                    a5:8b:b2:3a:ad:a9:12:e3:ac:8c:b7:9d:6c:4e:97:
                    37:eb:43:e3:ec:52:2b:49:18:30:c1:e9:b7:d5:9f:
                    23:91:e4:c8:c9:62:3a:10:a5:dd:73:4b:d7:7c:6e:
                    a8:dd:88:4c:a7:21:70:df:2b:8e:d8:32:07:38:64:
                    40:74:cc:a1:4a:1c:3a:dd:55:64:d0:c2:93:31:c2:
                    b6:bd:07:9b:57:dc:d9:9a:c6:ce:41:38:36:00:d2:
                    36:9d:65:d7:10:a2:02:05:ba:4e:91:ca:15:4e:b1:
                    60:f4:46:19:2b:1d:f0:cd:fc:5c:1c:05:5d:4a:d6:
                    c8:cb:10:a6:ee:7c:16:78:4c:21:51:44:8b:af:e6:
                    bf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:54:EE:20:F7:4F:2F:73:CA:41:74:F0:3E:10:B8:FE:1C:5A:7C:F9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53E6D538FEA111ED83D2DA694AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:a2:ae:87:e1:e9:1f:b7:fa:5a:bf:b2:d6:0d:ff:6e:40:0b:
         40:52:6b:61:92:65:96:6c:a5:41:3c:f2:21:c4:ac:19:9d:40:
         fe:e0:b3:66:06:ff:19:1e:fe:7c:e8:ec:dd:be:a1:06:e0:2b:
         42:8f:4a:69:09:81:15:9d:0e:fa:ff:45:91:25:7c:e1:6f:d6:
         19:cb:8b:0c:05:f1:aa:83:97:90:ab:45:5c:b8:5b:6e:32:8b:
         1a:7f:38:5d:66:49:76:e3:2f:bb:d6:dd:2b:d6:7d:d0:47:44:
         6b:c5:b9:ee:cc:08:40:a8:ed:72:47:ab:37:97:d1:98:73:0e:
         5a:bf:7c:2d:2a:e2:d9:48:88:c2:06:63:8f:28:77:6f:cd:de:
         7c:aa:fe:6b:62:43:f3:a0:0c:77:9a:14:a4:11:52:f6:37:05:
         7d:9d:7e:03:6a:51:06:b8:84:ca:7c:44:4c:d4:5e:66:2d:b8:
         19:cb:0f:61:48:bb:51:c7:d0:34:22:1e:6e:7e:75:d0:d0:9d:
         16:9d:6f:51:89:a1:e5:e0:0d:d0:bd:0c:d7:00:76:33:05:13:
         c5:d3:8f:fb:f3:50:fe:be:a8:76:95:55:3d:2b:9e:3c:e5:36:
         2a:41:d7:8a:16:af:61:0c:87:35:0a:3b:b7:41:e2:4d:7f:bd:
         8d:75:c7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:09 2024 by rpki-client on console-ams.rpki-client.org