Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AEC992C10DC11EEBF4890294AD9E6FC.roa
File:                     7AEC992C10DC11EEBF4890294AD9E6FC.roa (raw, json)
Hash identifier:          4E+BdMHg2K3Gqxv2nSNRB4B4SQcX2Tzjx5/jNfXUijU=
Subject key identifier:   1F:44:69:E9:80:8C:B4:AC:CD:D5:5D:10:A8:AA:C8:BB:59:14:48:47
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2D64
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AEC992C10DC11EEBF4890294AD9E6FC.roa
Signing time:             Thu 22 Jun 2023 09:09:24 +0000
ROA not before:           Thu 22 Jun 2023 09:09:20 +0000
ROA not after:            Fri 05 Jul 2024 09:09:20 +0000
asID:                     210334
IP address blocks:        154.89.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11620 (0x2d64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 22 09:09:20 2023 GMT
            Not After : Jul  5 09:09:20 2024 GMT
        Subject: CN=64940fc4-c7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5c:9f:a0:06:82:69:f8:90:66:02:30:dc:3a:
                    09:98:00:de:b5:bb:44:e1:04:8c:9e:2d:45:b2:08:
                    f8:91:87:92:05:93:23:ef:80:d2:88:7a:61:94:f5:
                    2f:db:33:5d:fc:e3:b0:ac:27:49:f6:0d:6f:4b:3b:
                    29:bc:1b:3d:ad:19:cf:8a:49:f9:53:dd:68:a4:92:
                    8b:d5:58:e7:11:a4:de:3c:d6:6f:db:f1:68:aa:a3:
                    35:c3:75:b0:fc:23:18:fb:70:85:b2:d9:d3:8c:2d:
                    19:3d:e7:b6:7c:12:47:34:6f:63:a1:62:ad:8f:bf:
                    0e:9d:32:80:78:1c:77:39:84:be:f1:7c:a8:18:a4:
                    ba:bf:f0:d1:32:78:b8:69:5d:8a:b6:e5:18:65:76:
                    50:60:3f:58:71:a8:df:82:02:19:6c:d7:a8:98:42:
                    ae:0e:a8:2c:7c:64:bc:e0:2c:94:af:14:39:61:bc:
                    b0:7f:b9:45:26:e9:be:16:ac:99:22:36:1e:d8:0c:
                    aa:e9:a3:a6:75:9a:e7:5e:eb:70:5d:81:da:93:f7:
                    db:df:31:77:d7:87:d3:60:f1:73:e0:aa:1a:f3:47:
                    a5:76:53:79:45:07:a2:90:44:b6:62:f3:4b:7e:63:
                    72:c7:75:ff:d7:0b:39:7a:8c:b4:4f:41:5c:5c:20:
                    2e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:44:69:E9:80:8C:B4:AC:CD:D5:5D:10:A8:AA:C8:BB:59:14:48:47
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AEC992C10DC11EEBF4890294AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:bc:d2:8f:9f:2e:59:26:24:f1:60:d2:85:d7:e6:9f:e3:e7:
         a2:8e:c2:cb:2a:04:27:6b:ae:d3:67:eb:4a:d0:e5:a5:95:3a:
         22:65:fe:75:77:f4:ad:f3:6d:21:65:af:7f:10:06:8f:86:ea:
         ae:ac:d9:78:ba:41:d3:37:da:bc:24:73:7d:3b:bc:8a:59:02:
         52:7b:cf:af:08:42:f6:18:c9:21:db:6a:5d:12:73:70:b8:a1:
         64:0f:0f:f8:ac:49:d8:a9:52:cd:8e:76:f4:3f:69:37:34:6b:
         6d:43:e7:97:0e:e6:a2:ba:ef:87:50:ac:6b:b4:16:f9:3f:3c:
         f5:cc:e6:8d:cc:df:b6:66:e3:10:8f:f3:f1:04:56:fb:1c:61:
         5d:d8:f5:ec:d4:d7:64:20:ee:bd:76:f3:4d:95:5c:fc:4f:07:
         ab:41:32:e4:7a:f8:58:04:b6:78:e8:e6:68:c3:61:1b:4e:8b:
         dd:ad:01:b2:95:7f:c6:98:36:07:ba:55:ce:ee:97:16:7f:a4:
         0b:90:7c:af:37:7b:d3:21:05:eb:1d:64:93:62:30:16:8c:ec:
         1f:65:a5:07:1f:9d:ad:29:f4:bb:4d:80:f2:9d:5c:00:50:17:
         0d:4f:6d:c3:0f:1d:06:14:8d:36:6b:1d:52:e8:58:70:8e:cf:
         bb:8d:b2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:28 2024 by rpki-client on console-fra.rpki-client.org