Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74E7762484F811EE8E44ED584AD9E6FC.roa
File:                     74E7762484F811EE8E44ED584AD9E6FC.roa (raw, json)
Hash identifier:          ToXHpGgHYYZ6Sjst0rQXwX9zLcGu2RpxSDx2OJyE5ns=
Subject key identifier:   F5:25:1A:1F:B4:31:AC:43:DD:BE:DD:A4:1C:3F:98:93:51:EF:65:B8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       507B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74E7762484F811EE8E44ED584AD9E6FC.roa
Signing time:             Fri 17 Nov 2023 03:21:54 +0000
ROA not before:           Fri 17 Nov 2023 03:21:51 +0000
ROA not after:            Tue 12 Nov 2024 03:21:51 +0000
asID:                     64267
IP address blocks:        154.84.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20603 (0x507b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 17 03:21:51 2023 GMT
            Not After : Nov 12 03:21:51 2024 GMT
        Subject: CN=6556dc52-5668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:ec:31:3e:a8:f0:3b:2c:5e:15:c9:92:cf:
                    3c:a5:25:4c:f6:28:71:39:bf:58:ed:b7:cd:cb:53:
                    ca:4d:e6:b5:76:84:71:ff:76:dd:14:13:03:1d:a6:
                    4b:fc:3f:2c:fd:b5:16:ac:4a:0f:a3:d5:a3:bf:db:
                    d0:a4:cc:f2:39:ff:5f:81:9f:7f:b3:0f:cd:34:fc:
                    c8:93:28:5a:51:87:da:eb:81:75:96:16:2c:bb:20:
                    35:81:0c:85:7b:b1:c3:94:43:6f:e9:bf:7b:08:39:
                    19:61:f0:5a:33:9c:a0:da:ca:23:65:92:2d:2e:33:
                    4b:f8:52:f5:03:2e:67:6a:61:39:30:04:23:61:6b:
                    1c:c8:1e:6b:8f:58:48:2b:11:31:df:73:61:fb:bd:
                    6a:ac:01:92:d8:44:15:64:cf:ba:7a:20:17:c9:68:
                    e1:c9:ce:5c:a8:cc:f5:51:70:ae:10:db:90:66:8b:
                    91:27:48:52:17:1e:20:f1:ae:34:14:33:e6:f8:d4:
                    36:e3:40:2a:6e:93:5a:f3:80:2d:f1:ae:b6:44:37:
                    55:fa:e0:21:49:7c:8b:92:2a:ac:e6:18:15:39:be:
                    70:21:7d:1a:9c:58:d1:3a:a6:9b:61:30:b1:75:72:
                    bb:e1:89:3d:8e:c9:14:3a:f3:81:35:31:62:78:5c:
                    01:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:25:1A:1F:B4:31:AC:43:DD:BE:DD:A4:1C:3F:98:93:51:EF:65:B8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74E7762484F811EE8E44ED584AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:29:6c:ba:86:30:8c:27:99:72:64:48:a3:99:42:5a:05:d9:
         f7:b1:10:5a:4b:f8:46:74:f0:9f:d5:e4:c5:13:72:f6:77:6b:
         84:6f:0a:f1:34:e7:d4:bb:75:e2:47:80:4e:2e:d5:4d:57:21:
         75:85:58:d2:e8:30:f3:a7:9f:82:41:69:96:a9:f6:7f:9a:80:
         95:23:36:39:39:15:37:f1:39:7e:a9:6b:64:71:f1:94:39:d1:
         26:a1:e8:be:52:9f:75:2b:2a:54:b7:de:43:98:16:8e:ba:d1:
         bc:66:ac:bc:3e:e8:3b:84:fc:91:67:12:06:63:1c:8a:ac:cd:
         f1:41:75:dc:e0:97:2e:16:07:64:cb:e1:44:c4:7a:41:17:df:
         50:92:14:db:b4:c6:56:29:cc:5f:13:c1:75:7b:8a:c0:a8:39:
         70:a7:ef:9f:cf:17:e2:d4:4a:5a:04:c1:77:47:88:65:6d:4a:
         27:b7:25:cf:14:8c:66:46:93:0d:b5:2b:e7:bd:be:58:4c:eb:
         47:f8:ba:0f:14:db:d7:c4:59:e4:c7:ae:56:34:2f:89:61:7b:
         2e:d3:18:16:fc:e7:b0:8d:2c:96:ab:45:f1:54:fe:08:70:bf:
         b7:0d:8b:6c:c4:60:ce:54:c0:c9:1a:7f:e7:60:8b:f5:39:e8:
         cb:7f:98:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:28 2024 by rpki-client on console-fra.rpki-client.org