Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/770D3778F00E11EE90FE397C775412E6.roa
File:                     770D3778F00E11EE90FE397C775412E6.roa (raw, json)
Hash identifier:          YVAspRo/6PC6uoOeyDLb/PPEGPVItYp9kWrx5uZnhUc=
Subject key identifier:   2F:1D:02:74:1E:38:50:8E:9A:BE:80:34:23:EC:B6:3A:17:CB:D2:1B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A86A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/770D3778F00E11EE90FE397C775412E6.roa
Signing time:             Mon 01 Apr 2024 09:59:01 +0000
ROA not before:           Mon 01 Apr 2024 09:58:58 +0000
ROA not after:            Sat 11 May 2024 09:58:58 +0000
asID:                     63139
IP address blocks:        154.203.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43114 (0xa86a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr  1 09:58:58 2024 GMT
            Not After : May 11 09:58:58 2024 GMT
        Subject: CN=660a8565-41ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3f:13:e0:ff:db:fb:ab:92:d6:f2:07:2b:f2:
                    b2:05:e1:04:9a:e0:0f:76:09:e2:a5:58:5b:7e:2b:
                    76:75:1b:3a:c6:0b:9d:7d:11:50:3b:a8:e1:6a:e0:
                    4f:e3:f6:66:3c:6f:46:f1:d1:40:22:3f:81:2a:bf:
                    59:a3:57:1c:7c:02:9e:de:4c:02:af:97:16:c0:a0:
                    bb:3e:a9:e7:b4:2f:36:21:99:85:4a:b5:a5:c1:40:
                    bb:b6:1c:00:f9:1b:06:80:78:9a:90:7d:c9:37:6b:
                    8c:36:d1:97:a2:72:27:84:14:76:f0:dc:19:5c:4e:
                    4b:3f:32:01:b5:c7:18:1b:14:35:d1:4b:03:68:2f:
                    45:ae:f3:3c:ee:b9:34:ba:71:23:a2:15:85:b9:a5:
                    0a:ac:ce:7b:dc:1c:d6:a7:9e:de:df:39:10:8f:8c:
                    9e:f1:a8:da:cf:6e:97:87:7a:2e:04:76:09:0a:7e:
                    29:94:e3:80:a2:2f:d0:b3:e9:82:91:53:0e:3f:62:
                    5c:c4:81:a2:75:28:d6:ee:da:5f:cf:04:50:8a:54:
                    fa:4b:56:3c:fc:11:fb:30:2c:73:85:09:f1:73:70:
                    9e:6a:00:62:9d:2d:ff:b0:1e:b7:73:ba:1b:03:c8:
                    80:7b:a5:ba:4a:b2:e1:b8:98:cf:80:38:55:2d:82:
                    4a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1D:02:74:1E:38:50:8E:9A:BE:80:34:23:EC:B6:3A:17:CB:D2:1B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/770D3778F00E11EE90FE397C775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:63:b9:b8:a4:ee:a1:32:15:d1:38:db:91:3d:da:48:87:08:
         e0:2f:f1:82:97:3a:3a:17:6c:b6:4c:cb:c8:10:e8:1a:96:f0:
         b3:18:30:03:e4:07:50:97:9b:36:1e:74:1e:50:d0:28:36:40:
         3e:2b:8a:8c:5a:f9:cd:d4:b1:11:40:5b:cc:af:a0:ce:e9:22:
         4d:bf:b3:4e:22:99:b9:6d:af:8d:a3:19:16:e2:ba:07:3a:b8:
         ad:5d:66:c0:90:74:2a:09:9e:e6:30:b3:64:df:ee:76:d8:47:
         0c:cd:7e:67:7d:65:11:60:98:5c:d6:52:6f:68:a9:31:44:73:
         21:e8:0d:9b:31:64:0b:62:f6:44:4b:8b:cc:ec:62:73:b4:33:
         4b:7e:13:f9:eb:70:84:fd:b0:10:7e:7e:60:3d:24:67:21:55:
         9d:8f:63:fb:1c:bc:39:b3:1d:3c:a4:5e:25:1e:bd:06:34:41:
         85:23:08:6a:05:3d:0c:db:f4:1c:f6:8e:71:5c:ce:00:d9:d9:
         50:e6:b4:ea:cd:63:f9:08:de:3d:98:c6:c5:14:a4:31:ab:30:
         4b:0d:d1:f7:fa:91:2f:9d:52:ea:db:2e:52:69:bf:de:22:0d:
         82:8f:8a:5a:09:cd:b5:40:12:5b:93:07:ad:7a:3a:92:82:01:
         4d:e7:db:e4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKhqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDAxMDk1ODU4WhcNMjQwNTExMDk1ODU4WjAYMRYw
FAYDVQQDEw02NjBhODU2NS00MWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvT8T4P/b+6uS1vIHK/KyBeEEmuAPdgnipVhbfit2dRs6xgudfRFQO6jh
auBP4/ZmPG9G8dFAIj+BKr9Zo1ccfAKe3kwCr5cWwKC7PqnntC82IZmFSrWlwUC7
thwA+RsGgHiakH3JN2uMNtGXonInhBR28NwZXE5LPzIBtccYGxQ10UsDaC9FrvM8
7rk0unEjohWFuaUKrM573BzWp57e3zkQj4ye8ajaz26Xh3ouBHYJCn4plOOAoi/Q
s+mCkVMOP2JcxIGidSjW7tpfzwRQilT6S1Y8/BH7MCxzhQnxc3CeagBinS3/sB63
c7obA8iAe6W6SrLhuJjPgDhVLYJKnwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFC8d
AnQeOFCOmr6ANCPstjoXy9IbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NzBEMzc3OEYwMEUxMUVFOTBGRTM5N0M3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsuxMA0GCSqGSIb3DQEB
CwUAA4IBAQDYY7m4pO6hMhXRONuRPdpIhwjgL/GClzo6F2y2TMvIEOgalvCzGDAD
5AdQl5s2HnQeUNAoNkA+K4qMWvnN1LERQFvMr6DO6SJNv7NOIpm5ba+NoxkW4roH
OritXWbAkHQqCZ7mMLNk3+522EcMzX5nfWURYJhc1lJvaKkxRHMh6A2bMWQLYvZE
S4vM7GJztDNLfhP563CE/bAQfn5gPSRnIVWdj2P7HLw5sx08pF4lHr0GNEGFIwhq
BT0M2/Qc9o5xXM4A2dlQ5rTqzWP5CN49mMbFFKQxqzBLDdH3+pEvnVLq2y5Sab/e
Ig2Cj4paCc21QBJbkwetejqSggFN59vk
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:12 2024 by rpki-client on console-ams.rpki-client.org