Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BBD24E4278011EEA777D1184AD9E6FC.roa
File:                     5BBD24E4278011EEA777D1184AD9E6FC.roa (raw, json)
Hash identifier:          1SAVBpO/Bz46v5Mufwt8S0d5zktDm1Pe7zXkslEycOg=
Subject key identifier:   35:E3:22:6A:53:B1:DB:F9:66:58:27:E5:A5:52:D7:B5:18:77:F8:B6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       3391
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BBD24E4278011EEA777D1184AD9E6FC.roa
Signing time:             Fri 21 Jul 2023 04:37:54 +0000
ROA not before:           Fri 21 Jul 2023 04:37:51 +0000
ROA not after:            Thu 13 Jun 2024 04:37:51 +0000
asID:                     7018
IP address blocks:        154.212.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13201 (0x3391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 21 04:37:51 2023 GMT
            Not After : Jun 13 04:37:51 2024 GMT
        Subject: CN=64ba0ba2-412b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:d5:72:85:68:f5:5f:e4:7d:0d:60:49:27:
                    e7:33:ef:8e:42:a7:4b:91:8f:b4:f4:e1:9c:94:53:
                    7d:11:9b:f0:1b:a6:a7:42:f6:c7:da:6c:5e:a7:15:
                    c7:e4:80:fb:20:cd:fd:c9:5d:cd:49:99:01:9d:f1:
                    d5:b2:ec:1b:88:7b:a8:bc:05:a7:93:33:7f:d8:2e:
                    ab:61:bd:9b:5c:0f:c2:36:a9:cf:34:1c:7d:34:76:
                    e2:b1:fd:b6:31:61:be:fe:5f:f7:7d:71:41:55:f5:
                    80:8b:94:e8:df:af:c0:2f:6c:3f:4d:13:a5:a4:db:
                    52:fd:5b:5a:99:4c:ca:e1:2c:3d:f2:02:2a:1a:0a:
                    be:03:f0:ba:68:c4:82:38:d9:ff:13:14:dc:8f:0f:
                    e4:26:60:ad:10:ec:23:32:ff:bf:c4:d9:e4:b9:b8:
                    56:87:82:ac:ae:cf:e0:fe:d2:c5:03:2d:1b:02:ad:
                    cb:e1:bf:c0:37:bd:fd:01:ff:b4:c3:70:9b:5b:7a:
                    e5:77:95:6c:e4:bc:d5:5c:23:b5:e0:89:a1:d9:e2:
                    43:ec:eb:6c:db:4b:c9:58:45:dc:75:ee:89:18:c2:
                    c9:b0:61:7b:c3:b0:ff:3e:ed:34:12:db:3d:13:da:
                    90:41:5f:40:46:7f:94:2d:f0:bb:a3:78:66:42:f8:
                    a9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E3:22:6A:53:B1:DB:F9:66:58:27:E5:A5:52:D7:B5:18:77:F8:B6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BBD24E4278011EEA777D1184AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.212.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b0:df:30:61:2e:7b:c6:0b:d3:de:7f:f6:bf:41:5f:00:38:a2:
         08:6d:39:10:8d:62:a2:f0:fe:24:37:e8:45:34:af:95:b6:5a:
         4a:e7:e3:df:dc:47:c2:20:04:a4:d6:13:3e:76:0e:70:5a:a3:
         46:8e:38:18:37:f0:0e:14:4b:1a:f3:e7:ac:f4:19:94:03:58:
         53:a5:7c:29:de:61:33:fd:a8:8f:30:bd:1e:ae:88:0c:fe:7e:
         b4:68:6a:5e:5f:66:17:c7:3f:bf:a4:ed:37:5d:ae:fc:b0:5f:
         5c:f7:2d:10:0d:22:4c:23:8d:e5:62:f5:80:bb:18:0f:19:76:
         c6:30:11:27:21:79:ff:20:6f:24:a6:4c:07:ba:bd:7d:75:fa:
         a4:71:4d:c1:44:55:90:8a:bc:3d:f6:04:6c:31:b5:65:a1:31:
         de:fd:8a:d4:2a:c1:79:dc:cc:9b:a5:f4:0d:7b:15:bc:ce:39:
         92:77:ed:55:ac:07:1d:9d:c4:d9:a7:48:5f:46:4c:e5:a5:d6:
         55:38:f5:f4:e6:04:2d:60:99:d5:99:9b:36:93:fc:3c:79:43:
         83:d8:19:cc:24:74:e1:07:1a:19:5a:f2:52:68:d2:d7:9e:fb:
         75:6b:1f:bc:76:d4:7a:11:72:6d:4f:9d:f5:30:7e:d4:99:c9:
         60:7c:38:5b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICM5EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA3MjEwNDM3NTFaFw0yNDA2MTMwNDM3NTFaMBgxFjAU
BgNVBAMTDTY0YmEwYmEyLTQxMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuxdVyhWj1X+R9DWBJJ+cz745Cp0uRj7T04ZyUU30Rm/AbpqdC9sfabF6n
FcfkgPsgzf3JXc1JmQGd8dWy7BuIe6i8BaeTM3/YLqthvZtcD8I2qc80HH00duKx
/bYxYb7+X/d9cUFV9YCLlOjfr8AvbD9NE6Wk21L9W1qZTMrhLD3yAioaCr4D8Lpo
xII42f8TFNyPD+QmYK0Q7CMy/7/E2eS5uFaHgqyuz+D+0sUDLRsCrcvhv8A3vf0B
/7TDcJtbeuV3lWzkvNVcI7XgiaHZ4kPs62zbS8lYRdx17okYwsmwYXvDsP8+7TQS
2z0T2pBBX0BGf5Qt8LujeGZC+KmnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUNeMi
alOx2/lmWCflpVLXtRh3+LYwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzVCQkQyNEU0Mjc4MDExRUVBNzc3RDExODRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOa1AgwDQYJKoZIhvcNAQEL
BQADggEBALDfMGEue8YL095/9r9BXwA4oghtORCNYqLw/iQ36EU0r5W2Wkrn49/c
R8IgBKTWEz52DnBao0aOOBg38A4USxrz56z0GZQDWFOlfCneYTP9qI8wvR6uiAz+
frRoal5fZhfHP7+k7TddrvywX1z3LRANIkwjjeVi9YC7GA8ZdsYwESchef8gbySm
TAe6vX11+qRxTcFEVZCKvD32BGwxtWWhMd79itQqwXnczJul9A17FbzOOZJ37VWs
Bx2dxNmnSF9GTOWl1lU49fTmBC1gmdWZmzaT/Dx5Q4PYGcwkdOEHGhla8lJo0tee
+3VrH7x21HoRcm1PnfUwftSZyWB8OFs=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:25 2024 by rpki-client on console-fra.rpki-client.org