Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C23E9DE53A011EE87860C614AD9E6FC.roa
File:                     6C23E9DE53A011EE87860C614AD9E6FC.roa (raw, json)
Hash identifier:          hnYox6EzZiACbdo2BqtFgPez5sIir0XsoqRKJ7MV6qE=
Subject key identifier:   A3:49:5B:D9:20:2A:37:C1:1E:ED:2D:D5:E3:8D:F0:A4:ED:37:22:8E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       3D81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C23E9DE53A011EE87860C614AD9E6FC.roa
Signing time:             Fri 15 Sep 2023 08:18:17 +0000
ROA not before:           Fri 15 Sep 2023 08:18:14 +0000
ROA not after:            Sat 08 Jun 2024 08:18:14 +0000
asID:                     142403
IP address blocks:        154.221.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15745 (0x3d81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 08:18:14 2023 GMT
            Not After : Jun  8 08:18:14 2024 GMT
        Subject: CN=65041349-0506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:ce:b2:3e:4a:cf:a6:de:7a:9b:05:ab:ef:
                    1b:c2:e5:e2:46:f3:0d:75:39:7c:e0:89:03:a3:24:
                    b9:f4:e4:bf:0b:88:ba:0f:06:10:3e:53:ec:66:a6:
                    7a:23:0c:5d:e9:d4:13:3d:51:d2:36:00:67:2c:4d:
                    b5:aa:0b:a7:2d:4c:0c:46:66:98:71:36:d5:49:9e:
                    27:8b:a7:af:dc:40:0a:d1:52:19:0c:8f:47:43:1c:
                    02:9b:b3:71:38:0c:0c:e0:a8:d7:86:b2:18:03:d6:
                    ef:87:90:af:4d:26:41:9d:9e:e4:9b:11:94:77:12:
                    23:3d:bb:f2:b5:16:6c:e3:ec:4c:ff:42:44:3e:10:
                    c0:c9:27:71:83:17:86:1e:c4:e9:1a:0e:f0:d1:93:
                    64:b9:91:d7:2c:d0:1a:fd:03:2d:4c:af:a1:64:44:
                    29:cb:01:7e:53:4b:50:c7:4b:ba:29:7e:9e:ba:91:
                    03:02:5a:71:c8:c8:bf:b6:b2:a1:0d:c5:eb:f6:8d:
                    2b:c7:a0:ac:1d:d4:ac:7f:92:21:93:77:67:78:0e:
                    4d:16:b3:db:27:cf:92:64:0f:09:ba:bf:60:fb:8e:
                    f1:17:95:6d:c3:5d:60:85:55:76:f8:21:e8:c1:32:
                    33:a3:95:b1:f9:fb:6f:e6:ca:45:4f:39:a8:9e:94:
                    2b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:49:5B:D9:20:2A:37:C1:1E:ED:2D:D5:E3:8D:F0:A4:ED:37:22:8E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C23E9DE53A011EE87860C614AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.221.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:bd:50:57:48:4c:4e:16:a5:03:3e:92:74:a5:dd:07:1b:a7:
         cd:cd:38:e8:c9:f8:a2:b5:21:47:5a:71:ac:84:1e:f9:b3:1b:
         5c:84:a3:e9:f6:d8:c8:e4:85:9a:5a:d7:c0:f3:70:14:ba:0e:
         0f:54:b0:ad:a5:de:bc:9a:6e:38:ff:ec:f3:c1:cc:19:46:3c:
         2c:b9:b1:8d:c6:9c:96:9e:2a:dd:71:a6:5e:dd:7d:12:7f:95:
         a4:be:ba:99:b9:8e:11:f8:3e:9d:8e:da:4f:3c:f3:5d:85:78:
         43:cb:44:28:82:07:5c:3e:f2:6c:f2:24:29:93:ef:9b:5c:31:
         c8:67:38:14:e5:61:7a:9c:c5:5d:f1:7d:e5:22:0f:ae:d8:cd:
         11:9e:7f:47:63:34:53:1f:d7:c8:71:59:02:8b:80:eb:9b:fb:
         61:d8:f1:9d:ac:a7:96:2e:d0:91:94:7b:7d:ef:ca:c2:f3:26:
         3d:fa:74:2b:60:70:7d:62:ca:8c:6f:04:3c:11:c3:bb:92:b3:
         ea:d8:d4:f3:24:01:2b:f7:09:0f:8f:75:b6:f1:fa:27:ab:79:
         79:32:58:1a:d9:73:5e:1e:9f:c0:39:8f:7a:99:4a:a4:f6:da:
         d9:53:84:c3:23:b9:07:30:04:d7:4f:07:e5:03:49:93:f1:ad:
         75:69:50:8a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICPYEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA5MTUwODE4MTRaFw0yNDA2MDgwODE4MTRaMBgxFjAU
BgNVBAMTDTY1MDQxMzQ5LTA1MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOoM6yPkrPpt56mwWr7xvC5eJG8w11OXzgiQOjJLn05L8LiLoPBhA+U+xm
pnojDF3p1BM9UdI2AGcsTbWqC6ctTAxGZphxNtVJnieLp6/cQArRUhkMj0dDHAKb
s3E4DAzgqNeGshgD1u+HkK9NJkGdnuSbEZR3EiM9u/K1Fmzj7Ez/QkQ+EMDJJ3GD
F4YexOkaDvDRk2S5kdcs0Br9Ay1Mr6FkRCnLAX5TS1DHS7opfp66kQMCWnHIyL+2
sqENxev2jSvHoKwd1Kx/kiGTd2d4Dk0Ws9snz5JkDwm6v2D7jvEXlW3DXWCFVXb4
IejBMjOjlbH5+2/mykVPOaielCu5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUo0lb
2SAqN8Ee7S3V443wpO03Io4wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzZDMjNFOURFNTNBMDExRUU4Nzg2MEM2MTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa3R4wDQYJKoZIhvcNAQEL
BQADggEBACe9UFdITE4WpQM+knSl3Qcbp83NOOjJ+KK1IUdacayEHvmzG1yEo+n2
2MjkhZpa18DzcBS6Dg9UsK2l3ryabjj/7PPBzBlGPCy5sY3GnJaeKt1xpl7dfRJ/
laS+upm5jhH4Pp2O2k88812FeEPLRCiCB1w+8mzyJCmT75tcMchnOBTlYXqcxV3x
feUiD67YzRGef0djNFMf18hxWQKLgOub+2HY8Z2sp5Yu0JGUe33vysLzJj36dCtg
cH1iyoxvBDwRw7uSs+rY1PMkASv3CQ+Pdbbx+iereXkyWBrZc14en8A5j3qZSqT2
2tlThMMjuQcwBNdPB+UDSZPxrXVpUIo=
-----END CERTIFICATE-----
Generated at Fri May 3 01:29:57 2024 by rpki-client on console-fra.rpki-client.org