Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FC2D1DCE75611EEA6AE57BF775412E6.roa
File:                     6FC2D1DCE75611EEA6AE57BF775412E6.roa (raw, json)
Hash identifier:          PG1fYsijUHLpTbTgNnypk13haLTJunVAkzPJ2aMjNgg=
Subject key identifier:   A2:7E:CA:45:4B:94:DB:F3:89:07:50:95:C8:49:1A:A6:CD:1D:2C:93
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A4A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FC2D1DCE75611EEA6AE57BF775412E6.roa
Signing time:             Thu 21 Mar 2024 07:41:32 +0000
ROA not before:           Thu 21 Mar 2024 07:41:29 +0000
ROA not after:            Tue 23 Apr 2024 07:41:29 +0000
asID:                     44559
IP address blocks:        154.218.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Apr 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42149 (0xa4a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 21 07:41:29 2024 GMT
            Not After : Apr 23 07:41:29 2024 GMT
        Subject: CN=65fbe4ac-c428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b6:c7:5f:dc:e5:9b:3c:8e:5a:c6:a6:85:22:
                    ec:67:c7:72:89:d2:06:30:10:ec:ed:de:b9:e5:84:
                    33:2d:cf:1b:61:89:a9:a7:fd:0c:be:ff:04:4b:be:
                    29:04:56:66:9a:c4:a1:8b:42:10:4f:0f:3e:be:ce:
                    6a:f8:91:75:b2:da:81:c0:6a:05:ee:45:c2:6d:5d:
                    96:48:56:49:2c:fc:96:08:87:19:69:71:ec:6e:8c:
                    33:3b:d7:ad:5d:8b:98:47:a3:88:3e:a4:c5:5d:90:
                    70:68:56:a4:ea:cd:82:c7:59:25:96:80:bd:09:69:
                    27:49:28:1a:d8:f9:46:14:18:b5:c0:fd:d6:f4:75:
                    81:2b:37:1e:a2:cf:6b:14:2b:99:e4:fa:2c:97:2a:
                    32:00:84:d2:0e:81:8c:4e:33:c2:69:ef:07:f0:3c:
                    a0:a0:7f:7e:4f:e0:e1:0a:a8:5c:c4:7f:c3:a0:a7:
                    90:b7:a3:8b:11:23:9a:52:9a:d3:95:87:bc:dd:9b:
                    72:40:1d:54:c1:ec:61:07:b4:04:c8:93:ac:b7:65:
                    06:b3:c7:0c:14:6e:6c:26:d6:e7:ff:58:25:2f:ef:
                    b7:59:dd:49:d9:78:e9:ed:82:95:9b:e0:7e:96:48:
                    d4:3d:0a:b6:cc:dd:8f:10:fb:7e:91:a5:86:b4:88:
                    0d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7E:CA:45:4B:94:DB:F3:89:07:50:95:C8:49:1A:A6:CD:1D:2C:93
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FC2D1DCE75611EEA6AE57BF775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.218.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:f7:31:3f:e1:69:dd:68:de:b5:1e:d9:0f:57:1e:e5:81:fb:
         a8:b6:8c:0d:86:f1:09:72:20:09:5e:a1:ce:86:04:31:a5:66:
         f5:5f:42:29:1d:ed:e4:30:88:82:d9:5b:8d:58:a6:3c:b5:04:
         54:ec:39:14:7f:8e:3c:c9:28:8a:ab:18:22:57:f0:84:dc:ce:
         5c:fc:f6:fc:db:5d:f5:1e:22:e5:2e:71:e6:3b:61:91:a7:2b:
         6a:4e:b6:21:ba:19:4e:08:43:42:9a:9d:ed:19:ef:74:bf:38:
         fc:ea:75:1c:6c:0a:ed:17:23:50:2e:da:be:9b:7f:a9:1c:84:
         e1:78:91:10:d1:d1:b9:28:34:ad:0b:bf:1a:22:83:12:93:1f:
         b8:4b:5a:af:ae:1f:8f:97:fd:94:ea:ee:b1:a3:38:00:cb:51:
         d1:51:b2:97:8d:a2:fe:c3:e6:73:e0:ad:00:fd:31:6f:74:8a:
         73:6b:76:dc:fe:40:10:8a:39:6b:67:fb:0a:4e:90:e8:8d:da:
         14:2e:f9:97:7b:57:d1:ee:43:76:cc:9b:c6:60:c3:ac:3c:90:
         35:3a:ba:ab:88:db:ed:3e:dd:dc:57:5b:e4:50:90:38:c9:65:
         3f:47:48:6b:e0:72:a1:10:3b:e5:d6:06:31:60:a4:1f:bb:12:
         32:3c:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:22 2024 by rpki-client on console-ams.rpki-client.org