Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C1F26FC539B11EEB697FD504AD9E6FC.roa
File:                     5C1F26FC539B11EEB697FD504AD9E6FC.roa (raw, json)
Hash identifier:          JO2PnqKJJQDuo4Pmfmi7xGEi4Xsuv3oEaeZqfZB5ShM=
Subject key identifier:   26:9C:1E:49:1C:50:DA:F4:61:79:4F:EA:90:16:BB:87:69:3A:FD:56
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       3D5D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C1F26FC539B11EEB697FD504AD9E6FC.roa
Signing time:             Fri 15 Sep 2023 07:42:03 +0000
ROA not before:           Fri 15 Sep 2023 07:41:59 +0000
ROA not after:            Sat 08 Jun 2024 07:41:59 +0000
asID:                     138152
IP address blocks:        154.94.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15709 (0x3d5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 07:41:59 2023 GMT
            Not After : Jun  8 07:41:59 2024 GMT
        Subject: CN=65040aca-60a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:8f:cc:30:bd:bc:67:d7:f6:83:79:50:aa:
                    2e:50:90:b9:c9:8f:c1:ce:2b:39:5f:23:4c:6b:47:
                    62:25:b6:83:00:86:a3:23:ae:ff:70:f5:05:ae:e8:
                    d3:2d:46:45:03:84:7b:7d:2c:af:ae:77:e8:d4:8f:
                    66:fc:8e:72:05:7b:5b:44:e7:a5:14:b5:ed:ba:67:
                    69:5b:c8:3a:d5:9f:cf:54:f2:1e:51:c0:2e:d8:8f:
                    ab:6b:88:68:4e:33:32:6b:43:62:ad:30:7c:e7:ce:
                    a9:7e:40:93:7c:cf:f4:d7:08:9c:e2:6e:e0:b6:49:
                    57:5c:33:68:84:80:ea:27:fa:49:9c:33:2c:c5:90:
                    42:fc:52:ee:78:86:7f:46:0c:94:d9:2b:54:d5:a6:
                    6a:33:41:19:09:1d:bb:84:69:e2:c5:45:d1:85:e1:
                    33:a7:10:3b:9b:e7:f4:a6:5c:96:cb:5f:f4:2c:39:
                    cc:32:86:86:e2:e6:b6:71:1c:95:41:99:21:60:c2:
                    f1:eb:7f:87:54:93:2b:17:92:b7:b4:f3:08:38:82:
                    33:2c:69:59:95:d9:df:d3:08:d3:a7:2c:63:c5:b9:
                    63:ce:90:01:86:0c:13:0a:8c:72:26:4c:00:fb:c0:
                    ef:cb:a7:b5:eb:08:2a:5d:97:3d:97:a0:08:49:53:
                    13:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9C:1E:49:1C:50:DA:F4:61:79:4F:EA:90:16:BB:87:69:3A:FD:56
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C1F26FC539B11EEB697FD504AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:a5:e3:bc:f8:20:93:70:a1:46:48:ae:de:93:25:b4:6d:e4:
         d0:a3:6a:79:b7:63:ae:3a:a4:af:e9:7c:84:f0:16:d6:25:ca:
         15:1d:ba:3c:df:8b:b1:91:33:27:8f:73:ed:96:0b:cb:57:79:
         6c:03:b2:ce:d3:50:92:c0:9b:31:31:58:92:77:09:1e:32:41:
         29:00:31:c0:42:25:fb:57:8d:3a:d2:c3:0b:b3:62:48:d2:cf:
         cd:bd:8b:d5:95:3d:73:ec:c1:7f:1f:35:57:ef:3f:3e:0f:3e:
         99:29:d4:b5:6e:b5:95:53:6f:56:8e:bc:61:30:c3:18:ac:d1:
         d3:06:4d:a8:07:4b:c1:ca:44:8b:cc:02:0e:b1:4b:2b:2b:e7:
         02:ee:1d:95:26:a9:58:0e:fb:13:dd:6c:88:36:de:28:22:9d:
         cb:cd:33:7a:ad:a3:34:0e:18:88:eb:65:89:63:18:4c:e4:73:
         2e:35:6e:af:8e:a1:ca:26:93:12:bf:54:68:65:c3:fc:e0:f1:
         d0:7c:03:ed:d8:de:31:fa:2b:89:6d:fe:57:6f:92:3b:94:cf:
         40:e3:7a:c6:35:13:58:00:2d:f7:32:06:51:24:a8:6f:ba:17:
         d9:bd:1a:e0:64:33:6c:63:e9:1b:9e:11:f2:23:34:c9:11:a5:
         2f:a4:12:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:10 2024 by rpki-client on console-ams.rpki-client.org