Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5562A112E47911EEB740199A775412E6.roa
File:                     5562A112E47911EEB740199A775412E6.roa (raw, json)
Hash identifier:          PTDa0YcNEQulyNMv1njq7krCRmKXiVRujc+g8RDhp7k=
Subject key identifier:   4A:4C:89:9F:93:49:EC:1E:D1:E7:30:12:73:A8:9B:DE:55:B7:83:75
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A26F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5562A112E47911EEB740199A775412E6.roa
Signing time:             Sun 17 Mar 2024 16:13:47 +0000
ROA not before:           Sun 17 Mar 2024 16:13:43 +0000
ROA not after:            Sat 04 May 2024 16:13:43 +0000
asID:                     209242
IP address blocks:        154.197.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 16:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41583 (0xa26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 17 16:13:43 2024 GMT
            Not After : May  4 16:13:43 2024 GMT
        Subject: CN=65f716bb-f956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:9f:50:7c:d1:6a:e3:d6:a4:31:1b:3e:11:
                    c0:46:c2:8b:f0:1d:f0:54:46:40:17:6f:5d:71:63:
                    aa:2d:0a:5f:3c:29:74:43:52:b9:94:39:4d:3b:0e:
                    ab:db:63:b8:a4:e8:73:a4:62:bc:a9:fb:c7:29:4e:
                    3b:77:00:1b:ad:6d:af:4a:0d:d7:ab:a4:09:cc:a7:
                    d4:0e:78:c3:d1:c2:f4:99:10:35:02:7e:cc:d1:47:
                    18:e3:9c:09:62:a7:f7:46:ab:e8:07:e8:cd:10:90:
                    e1:ac:f9:55:4c:3b:cc:4e:5d:5f:40:5b:88:68:2c:
                    57:b2:1c:b0:e8:a2:02:98:4a:69:57:bb:6c:8c:92:
                    e7:0d:a2:85:9d:db:4d:79:5c:a1:11:52:6f:c2:cc:
                    4b:11:e7:4d:12:b0:54:27:25:b4:fd:f0:58:f1:01:
                    1e:9e:5a:f5:1c:17:b2:b2:3a:2d:ca:1e:80:8f:73:
                    6f:b6:38:98:f5:ad:e7:70:23:d9:d5:cb:10:5c:1d:
                    81:42:7e:1e:5f:1d:28:bf:c7:f0:80:0c:d8:c3:58:
                    78:bb:7b:5c:51:e3:2a:37:bb:62:ab:c2:af:fd:fd:
                    5c:7f:d0:e7:53:39:f0:f1:4d:60:90:55:38:06:83:
                    9c:a2:26:9d:40:6a:66:47:cd:33:0c:15:8b:68:99:
                    44:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4C:89:9F:93:49:EC:1E:D1:E7:30:12:73:A8:9B:DE:55:B7:83:75
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5562A112E47911EEB740199A775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:6a:50:1e:29:37:54:84:44:c8:eb:24:9a:32:7c:b4:58:c6:
         f2:20:5e:62:96:e5:b6:0a:4d:c5:e1:2c:83:1e:e7:a0:76:00:
         4b:e6:90:53:d1:05:ba:5a:9c:6c:a9:4b:15:6d:ff:92:05:c8:
         0a:96:58:f3:1a:69:68:78:cc:92:4c:b6:d5:b4:b3:21:1d:57:
         8d:41:9f:9d:64:ae:e6:4b:23:5f:f3:73:c3:dc:30:f6:bc:ef:
         55:d6:6f:ee:0a:da:61:95:95:bf:ba:32:49:35:da:7b:d3:e9:
         a1:29:16:4c:6c:c2:bd:f2:43:9a:ff:fe:af:37:11:08:af:85:
         33:2d:e1:48:9e:fd:3e:25:94:c4:cf:07:b4:cc:60:47:d5:5f:
         6d:1b:3e:92:94:3e:e1:ba:d9:98:96:71:f5:41:74:ad:81:e1:
         de:3a:c1:ed:13:4f:e8:e2:25:94:24:fe:8f:24:23:a3:f2:72:
         40:2c:e8:67:d0:ad:43:f6:0f:a9:a7:38:25:f0:55:62:f0:f7:
         8c:13:e8:95:1b:4e:25:26:97:a3:11:86:3b:ee:92:c8:a0:76:
         e9:ef:ed:72:0c:73:04:ab:6f:0b:aa:de:87:41:f3:bd:a6:1f:
         df:62:91:26:54:10:b1:28:45:37:8c:f9:bc:a6:41:a0:7f:e7:
         81:ef:53:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:09 2024 by rpki-client on console-ams.rpki-client.org