Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55909CAE60EC11EE97C2A8534AD9E6FC.roa
File:                     55909CAE60EC11EE97C2A8534AD9E6FC.roa (raw, json)
Hash identifier:          b6BuXBO2mdgW8+Ll1DlHAv9CXqwdA4hPjybfvs+nXVQ=
Subject key identifier:   0B:52:DD:CA:ED:AC:81:CF:E5:D3:DE:33:48:FF:8F:B5:9D:C4:D9:68
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       445A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55909CAE60EC11EE97C2A8534AD9E6FC.roa
Signing time:             Mon 02 Oct 2023 06:24:26 +0000
ROA not before:           Mon 02 Oct 2023 06:24:23 +0000
ROA not after:            Tue 01 Oct 2024 06:24:23 +0000
asID:                     211392
IP address blocks:        154.85.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17498 (0x445a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  2 06:24:23 2023 GMT
            Not After : Oct  1 06:24:23 2024 GMT
        Subject: CN=651a621a-f62b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:79:33:c0:e5:74:cb:5b:49:3e:d4:bd:d6:50:
                    80:5f:5c:3b:e5:e1:20:e1:21:be:1e:86:df:18:de:
                    b4:b1:52:f9:be:59:2c:de:bc:7b:e5:a3:7b:55:51:
                    0e:f5:0b:cd:6a:6a:dd:ec:30:05:75:70:c9:9b:cf:
                    14:e9:ed:56:0d:72:c9:c1:fc:75:e7:34:99:c7:5c:
                    50:7a:f3:39:82:db:81:13:3a:de:7c:cc:2d:c3:cf:
                    b0:f6:d8:4a:37:b8:8b:74:b4:9a:4b:6c:4d:75:03:
                    ee:92:8b:da:86:76:68:83:02:86:c3:3e:88:0c:77:
                    53:4d:c1:b2:f2:1f:1b:7b:fb:f6:9c:99:2d:46:17:
                    89:ee:8a:ad:8e:86:46:52:10:2a:6e:ca:b0:2f:fc:
                    87:89:12:87:68:02:c1:0c:e9:a1:d0:d2:a5:fe:c0:
                    10:36:c3:7b:89:c6:cf:83:6d:44:fc:ba:c1:0f:3a:
                    e8:4b:9c:f3:f5:20:9c:b1:a7:16:2c:20:ae:6e:e0:
                    a0:5f:68:f7:e0:d4:6d:4f:53:17:76:3f:c4:63:54:
                    af:bb:7e:a3:42:6c:68:6e:dc:1b:79:bf:96:67:25:
                    4e:b4:aa:7a:1c:4b:f0:a3:16:df:b2:1e:ae:6c:76:
                    01:26:3d:2b:3f:e1:d5:1c:98:05:8e:d3:10:9b:ac:
                    2d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:52:DD:CA:ED:AC:81:CF:E5:D3:DE:33:48:FF:8F:B5:9D:C4:D9:68
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55909CAE60EC11EE97C2A8534AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.85.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:ea:7c:b7:79:d5:79:43:49:a4:df:8b:0d:a2:60:2f:df:bd:
         21:fd:7d:d2:69:54:d2:0c:31:1d:d9:fe:52:61:9b:c7:ed:bb:
         50:7b:42:29:6d:1c:7c:ca:cf:ee:2f:47:de:14:1c:37:48:69:
         c0:a5:f9:5b:b4:f2:ce:aa:89:f0:f0:aa:86:a9:6e:ff:fb:f1:
         06:d1:8d:cb:e5:90:27:64:0b:d1:24:c1:71:72:81:fe:88:74:
         0a:a7:ca:b6:35:32:82:8c:f0:cf:9a:81:97:3f:59:ab:56:34:
         ea:1e:d6:b3:67:37:4a:63:0e:c0:60:22:d0:34:14:2a:58:33:
         82:78:d9:0f:15:0b:2e:d8:78:82:e8:8d:bb:c0:81:ca:5b:15:
         58:5f:67:fa:7f:76:96:2e:bb:41:52:41:8b:e8:f5:9e:02:7e:
         39:ec:ae:f9:4b:f5:73:39:2c:ff:b2:d4:8a:ff:35:8f:46:34:
         3e:0a:9a:61:5f:d4:89:0b:97:b1:f2:70:4f:d8:d3:ac:69:86:
         dd:ef:c9:d1:64:5b:d7:9c:4d:73:16:b6:e8:2e:05:a9:68:90:
         f5:35:6b:8f:17:2a:82:ea:ea:c6:0d:62:f5:52:19:38:fe:f9:
         92:23:0b:16:80:46:49:f3:16:71:ec:1c:8c:5b:bd:d9:80:9d:
         db:6b:ce:61
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICRFowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzEwMDIwNjI0MjNaFw0yNDEwMDEwNjI0MjNaMBgxFjAU
BgNVBAMTDTY1MWE2MjFhLWY2MmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDpeTPA5XTLW0k+1L3WUIBfXDvl4SDhIb4eht8Y3rSxUvm+WSzevHvlo3tV
UQ71C81qat3sMAV1cMmbzxTp7VYNcsnB/HXnNJnHXFB68zmC24ETOt58zC3Dz7D2
2Eo3uIt0tJpLbE11A+6Si9qGdmiDAobDPogMd1NNwbLyHxt7+/acmS1GF4nuiq2O
hkZSECpuyrAv/IeJEodoAsEM6aHQ0qX+wBA2w3uJxs+DbUT8usEPOuhLnPP1IJyx
pxYsIK5u4KBfaPfg1G1PUxd2P8RjVK+7fqNCbGhu3Bt5v5ZnJU60qnocS/CjFt+y
Hq5sdgEmPSs/4dUcmAWO0xCbrC2lAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUC1Ld
yu2sgc/l094zSP+PtZ3E2WgwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzU1OTA5Q0FFNjBFQzExRUU5N0MyQTg1MzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaVQswDQYJKoZIhvcNAQEL
BQADggEBABnqfLd51XlDSaTfiw2iYC/fvSH9fdJpVNIMMR3Z/lJhm8ftu1B7Qilt
HHzKz+4vR94UHDdIacCl+Vu08s6qifDwqoapbv/78QbRjcvlkCdkC9EkwXFygf6I
dAqnyrY1MoKM8M+agZc/WatWNOoe1rNnN0pjDsBgItA0FCpYM4J42Q8VCy7YeILo
jbvAgcpbFVhfZ/p/dpYuu0FSQYvo9Z4CfjnsrvlL9XM5LP+y1Ir/NY9GND4KmmFf
1IkLl7HycE/Y06xpht3vydFkW9ecTXMWtuguBalokPU1a48XKoLq6sYNYvVSGTj+
+ZIjCxaARknzFnHsHIxbvdmAndtrzmE=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:09 2024 by rpki-client on console-ams.rpki-client.org