Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/606D1C1E10DE11EEB8ED0D2F4AD9E6FC.roa
File:                     606D1C1E10DE11EEB8ED0D2F4AD9E6FC.roa (raw, json)
Hash identifier:          DIv/2s7JE1yFBdEoMsxYXsdLRQAsJoW/U1wbe2gwJ4Y=
Subject key identifier:   83:26:BF:4C:D3:0A:5C:EC:16:7A:0C:E5:36:1E:DE:B6:98:3B:5E:BE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2D82
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/606D1C1E10DE11EEB8ED0D2F4AD9E6FC.roa
Signing time:             Thu 22 Jun 2023 09:22:58 +0000
ROA not before:           Thu 22 Jun 2023 09:22:55 +0000
ROA not after:            Fri 05 Jul 2024 09:22:55 +0000
asID:                     146993
IP address blocks:        154.203.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11650 (0x2d82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 22 09:22:55 2023 GMT
            Not After : Jul  5 09:22:55 2024 GMT
        Subject: CN=649412f2-b2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:ca:b1:3e:3f:d3:26:d5:67:ff:93:06:ff:
                    1d:c7:b8:15:1e:2a:e7:82:9b:09:e5:62:de:23:41:
                    6e:58:8b:77:41:a1:30:13:43:fa:9e:78:2d:01:6b:
                    20:31:59:d4:62:78:e4:85:3d:e5:dd:9c:3f:62:58:
                    91:ab:73:da:c1:b0:10:4d:52:00:85:b2:3b:37:30:
                    4f:bb:41:94:9b:eb:a4:4d:0f:35:48:c7:5c:f6:6a:
                    05:b8:c2:b7:91:e2:ef:4c:31:b6:82:34:e0:d5:d4:
                    17:72:56:08:cc:2a:ae:0e:dd:01:13:9c:77:b9:57:
                    06:f6:e8:d0:17:cd:1e:8b:1c:4d:d4:4d:7b:49:fc:
                    56:7d:5e:f1:5c:ce:8f:d8:e8:90:06:b7:5c:0a:45:
                    96:6b:89:d1:8c:d1:10:35:3c:19:74:17:05:39:e9:
                    64:a3:47:d0:26:1b:81:af:20:90:00:fe:d1:56:5f:
                    71:94:ef:7c:f4:f3:59:e3:ee:ad:f4:dd:10:78:91:
                    cc:df:e1:36:d3:95:17:94:cf:1b:63:ae:eb:81:39:
                    1a:f6:6e:11:cb:36:e5:0b:11:af:c7:22:76:f8:da:
                    c7:5d:5c:98:f2:e0:09:07:a1:ad:03:a0:b9:88:19:
                    18:f4:99:ea:2f:ef:81:f6:e7:92:2e:82:2f:3e:00:
                    57:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:26:BF:4C:D3:0A:5C:EC:16:7A:0C:E5:36:1E:DE:B6:98:3B:5E:BE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/606D1C1E10DE11EEB8ED0D2F4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:d3:c3:35:41:3d:1c:10:9f:48:ff:e6:b6:bd:82:df:6b:29:
         d3:17:5a:b3:ca:78:c0:f6:3e:31:43:d3:83:57:b4:35:36:51:
         1d:87:9c:ab:1e:7e:82:b9:18:06:8e:f0:9e:c3:d9:a5:69:aa:
         e7:5c:6e:46:89:dd:84:09:69:8f:b3:ef:de:dc:07:d9:ac:39:
         d0:28:33:8f:70:75:4d:a6:23:77:f9:8c:60:39:38:30:c2:46:
         b5:ec:fc:bc:c9:3e:42:56:a4:b6:83:62:4d:59:3c:eb:d7:be:
         77:33:29:b1:27:a6:08:1d:5e:81:44:90:2f:4b:b4:56:f6:cf:
         4c:7c:10:80:b2:c7:6d:18:7f:f3:7b:ec:e8:c6:bb:80:75:15:
         51:78:fb:74:fd:f0:55:d7:a7:e2:34:ed:3f:ec:ab:50:04:bc:
         28:cc:76:9e:f9:f0:17:e1:b3:77:4a:58:84:c0:64:59:81:8a:
         37:ea:ee:27:96:cd:2e:15:8b:bb:8f:95:e0:3f:e2:53:f2:70:
         65:f0:81:9b:fc:5a:03:15:72:52:01:a3:80:88:fe:5d:da:9f:
         5a:df:da:a7:06:be:3a:03:ac:a0:1e:d3:b3:13:9a:9e:ee:6b:
         dc:bc:bb:3c:59:95:46:d0:3b:af:aa:32:47:4a:78:e5:1c:51:
         7d:59:1f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:26 2024 by rpki-client on console-fra.rpki-client.org