Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D244092E74F11EEA2BBC189775412E6.roa
File:                     7D244092E74F11EEA2BBC189775412E6.roa (raw, json)
Hash identifier:          vME8oTtO32BXQnvWbA9fWxPUbetsKwsaRa0mbdtQPig=
Subject key identifier:   A5:AE:12:D4:25:67:50:20:57:DA:4D:2A:8A:63:66:6E:DB:E8:0C:19
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A461
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D244092E74F11EEA2BBC189775412E6.roa
Signing time:             Thu 21 Mar 2024 06:51:48 +0000
ROA not before:           Thu 21 Mar 2024 06:51:45 +0000
ROA not after:            Tue 23 Apr 2024 06:51:45 +0000
asID:                     44559
IP address blocks:        154.220.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Apr 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42081 (0xa461)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 21 06:51:45 2024 GMT
            Not After : Apr 23 06:51:45 2024 GMT
        Subject: CN=65fbd904-63dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:63:68:e5:5b:0d:ec:14:24:c2:89:7f:f3:63:
                    3f:72:d2:3a:77:14:41:e5:3e:d8:f3:27:29:03:98:
                    33:04:ea:8c:a5:91:48:10:07:eb:55:4f:de:06:df:
                    31:5b:06:5c:e0:cb:c9:70:0b:87:db:1b:2c:c6:09:
                    fb:6f:ea:31:c6:88:ba:5b:c2:18:61:fd:b3:ab:8b:
                    73:a7:18:66:c0:68:39:24:c4:11:83:95:80:8e:3e:
                    65:17:eb:74:a9:f8:8f:3a:62:85:06:82:eb:9a:1c:
                    51:3a:f1:7c:6d:3a:b3:4f:4c:8b:8a:a5:d6:1c:8b:
                    37:ad:7c:a0:98:c0:bb:34:10:1d:62:29:c0:63:b3:
                    06:16:fa:38:0d:98:09:0f:2f:3c:b5:1d:6f:2e:4d:
                    ed:82:d0:97:fc:eb:1b:03:36:31:9c:e4:cc:3c:b8:
                    28:42:ff:e0:dc:2e:ee:74:b3:1c:d5:3d:85:19:c0:
                    4a:4a:eb:87:52:c3:d6:57:a3:c3:c0:c4:67:bf:f3:
                    99:9e:1a:66:69:8e:06:9e:91:a2:16:93:e5:cf:b3:
                    0c:fe:5e:89:43:27:c6:1c:5d:76:19:6d:dc:d7:17:
                    46:e1:ff:26:f4:fb:6e:5d:c0:90:e3:18:5d:05:26:
                    65:f3:a7:e4:d5:32:1f:da:04:a7:20:c9:c7:98:78:
                    d1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AE:12:D4:25:67:50:20:57:DA:4D:2A:8A:63:66:6E:DB:E8:0C:19
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D244092E74F11EEA2BBC189775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.220.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:c2:b4:06:bb:03:26:50:59:5b:3d:02:e0:c1:11:99:c2:e5:
         59:5f:cb:49:54:bc:84:00:14:38:4f:66:06:39:9d:82:2d:a7:
         50:70:99:8b:b2:9f:7c:d2:d2:ba:50:13:34:bd:87:61:99:7b:
         e0:87:7c:94:fd:34:42:e0:69:8e:06:f2:53:34:f6:8b:93:78:
         32:79:5c:58:ba:28:80:a2:dc:86:2d:f3:54:01:11:c3:db:8c:
         b5:7c:48:20:8b:3d:88:a3:7f:4c:66:52:7b:d0:31:d5:3d:66:
         d3:d4:c3:2b:91:5a:0e:d2:f4:94:c6:f4:59:d6:f7:43:d5:2d:
         a4:48:62:e6:1c:52:b6:bc:5a:48:8d:5b:dd:73:47:d9:f4:5e:
         89:a2:9f:01:6c:87:d8:3f:7b:46:4d:6d:98:37:93:d2:d2:ea:
         23:96:07:e0:30:8f:22:e6:54:e1:64:65:fb:52:9e:fa:09:23:
         39:79:04:7a:54:98:45:88:29:21:3f:c0:e8:68:92:b9:0d:3d:
         94:eb:57:c2:e6:80:e7:9d:11:a1:2b:da:c8:fe:64:5d:19:9f:
         06:61:95:48:d6:43:58:fc:74:1c:ec:42:6c:e5:8a:6f:ab:9b:
         48:89:68:cf:e9:b4:92:2c:30:f1:b2:8e:03:20:a3:93:95:ed:
         24:ba:33:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:23 2024 by rpki-client on console-ams.rpki-client.org