Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7993C1DA141A11EFAAEDD83F017001B1.roa
File:                     7993C1DA141A11EFAAEDD83F017001B1.roa (raw, json)
Hash identifier:          vzGOR5hUzpxjhSfcgNKjg14yNbKFCgfO+a/aew1/PrQ=
Subject key identifier:   A0:8A:18:A4:6B:B8:F3:DF:CE:E9:6F:56:12:B4:B8:09:4B:14:12:C7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       B82D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7993C1DA141A11EFAAEDD83F017001B1.roa
Signing time:             Fri 17 May 2024 06:55:41 +0000
ROA not before:           Fri 17 May 2024 06:55:38 +0000
ROA not after:            Thu 04 Jul 2024 06:55:38 +0000
asID:                     44559
IP address blocks:        154.213.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 10 Jun 2024 00:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47149 (0xb82d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 17 06:55:38 2024 GMT
            Not After : Jul  4 06:55:38 2024 GMT
        Subject: CN=6646ff6d-bfc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:91:8c:be:cd:67:7e:fe:1b:f8:bf:02:6e:a6:
                    87:a8:c7:48:cc:7a:19:12:6d:d5:b7:31:cd:5f:62:
                    1b:63:11:85:7e:58:45:ae:f4:b8:24:4c:98:97:2d:
                    db:ac:9d:eb:05:aa:f9:4a:3f:b4:fb:91:03:35:b4:
                    76:1f:ae:40:8d:45:4e:b3:d4:48:a1:7b:af:b2:4e:
                    1d:b2:0b:57:03:4a:be:e7:69:23:e0:a8:21:d0:d9:
                    b7:a7:d8:7c:08:55:da:e7:c9:ee:7c:df:26:8a:98:
                    1c:49:b6:52:5a:02:bd:68:e8:12:9d:15:87:a3:cc:
                    30:92:0f:40:53:82:8f:2a:ac:d7:38:9b:47:13:3c:
                    8f:85:e2:c3:8e:ef:9e:00:c0:fb:af:82:32:bb:b0:
                    5a:a8:b5:a5:a7:0c:b7:7f:b5:b4:ac:c7:b5:98:c4:
                    73:6c:ac:c1:8e:dc:34:fa:22:3d:b1:f8:3a:45:c8:
                    47:5e:f4:10:a3:3a:39:1a:19:06:a0:62:4a:c1:c2:
                    4f:ff:f1:3c:d3:e5:39:00:0d:7b:0d:bb:de:d0:97:
                    1d:09:f7:6c:3a:5e:8e:e8:ac:f1:af:8d:ea:a5:14:
                    a1:a5:e4:e4:fb:f4:73:7c:30:4b:20:13:a4:d9:a6:
                    56:cd:6c:e6:21:b9:d5:8a:79:3b:5f:d1:aa:ce:52:
                    3c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8A:18:A4:6B:B8:F3:DF:CE:E9:6F:56:12:B4:B8:09:4B:14:12:C7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7993C1DA141A11EFAAEDD83F017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.213.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         31:0f:ab:3d:84:83:18:de:89:33:37:b8:5b:95:64:c4:3d:8c:
         91:85:b5:47:a1:f3:11:4e:50:fc:f3:7c:ad:ed:16:f8:3a:35:
         84:89:0e:72:50:b2:32:de:25:77:86:01:57:6f:e2:a3:b0:9d:
         48:72:0c:ce:c3:5b:e6:6e:62:00:84:13:5e:6f:d0:8c:32:fd:
         4d:c5:29:3f:56:62:f9:6e:2b:02:ca:17:b7:81:57:4b:d4:67:
         2a:89:a0:52:87:16:90:ed:e0:94:9f:78:57:79:8e:95:d6:2a:
         7c:2a:b5:d3:d3:cb:d8:8b:50:d4:d8:0f:7c:69:d3:bc:9c:08:
         f4:2c:8a:f8:1b:cc:ef:f8:66:50:98:45:06:2b:3c:61:51:1c:
         31:10:c4:fd:59:9d:c9:92:9d:d2:3e:74:99:15:b4:83:c9:e7:
         b4:fd:80:5d:71:94:6c:5f:8a:11:8b:25:f4:e4:f3:a4:f1:00:
         56:05:87:10:82:da:4f:08:5f:fd:56:ec:de:86:50:36:49:cd:
         3d:b6:a8:7c:ba:5f:5d:38:c6:de:7b:aa:ab:48:00:18:72:9f:
         34:a4:91:70:15:09:64:97:5f:fc:80:ce:f1:a8:71:0c:a1:59:
         57:4d:a9:ea:fd:e7:f7:04:6b:49:ce:44:a1:a0:8a:a2:d5:df:
         81:16:e6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:24:38 2024 by rpki-client on console-ams.rpki-client.org