Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D9034F8DF6D11EE91F90E4D775412E6.roa
File:                     7D9034F8DF6D11EE91F90E4D775412E6.roa (raw, json)
Hash identifier:          TJ/LinGrwFCy5ncZuu9o7D6d4H15JvMS6+0fbUQwRUA=
Subject key identifier:   5C:2A:A8:CD:C9:1F:DB:97:D3:35:90:0C:0D:C9:90:6A:8D:D4:FE:4B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A062
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D9034F8DF6D11EE91F90E4D775412E6.roa
Signing time:             Mon 11 Mar 2024 06:06:25 +0000
ROA not before:           Mon 11 Mar 2024 06:06:21 +0000
ROA not after:            Sat 19 Oct 2024 06:06:21 +0000
asID:                     135423
IP address blocks:        154.205.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41058 (0xa062)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 11 06:06:21 2024 GMT
            Not After : Oct 19 06:06:21 2024 GMT
        Subject: CN=65ee9f61-6026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:4e:3b:aa:bd:0d:09:bd:bd:50:c3:80:69:
                    12:5e:fe:47:cc:b2:25:ef:3c:07:4f:c0:d3:98:22:
                    e9:93:e0:ea:93:db:9d:04:e8:fb:e6:5c:61:5a:48:
                    b8:a3:c8:69:1f:92:1a:be:a6:0a:5e:11:f6:c2:e0:
                    6d:60:cd:10:e2:13:2d:1e:5c:d2:e7:90:a2:63:17:
                    61:9e:9f:fe:bf:58:69:37:31:77:6c:0f:ec:6d:2c:
                    e8:0b:74:82:85:1d:a6:b2:7f:88:e6:a5:6e:b8:c1:
                    ad:10:10:6a:a0:15:c9:1b:f8:84:18:a8:96:0b:bb:
                    a7:a3:ad:95:91:5f:06:ba:a7:8b:33:3f:af:47:46:
                    0b:58:73:e6:75:07:cc:a6:6f:13:a0:0f:16:e2:5d:
                    02:bb:a8:38:5f:ca:fc:28:83:5b:67:67:ba:a3:39:
                    53:47:ac:da:1b:e4:14:86:0e:fc:0c:fc:70:61:fe:
                    93:b3:ee:80:da:b6:aa:1d:4c:76:24:eb:4c:cd:48:
                    01:52:e7:9c:4f:95:09:cd:61:d6:7f:29:00:4c:f0:
                    d6:5f:87:2c:31:fa:8c:21:c3:79:6e:97:3c:cb:9d:
                    7b:61:ee:99:01:ce:a0:ba:ca:ab:f6:5a:f1:37:73:
                    df:b8:23:e2:92:c0:44:1a:ef:ef:7c:ee:69:e9:46:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2A:A8:CD:C9:1F:DB:97:D3:35:90:0C:0D:C9:90:6A:8D:D4:FE:4B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D9034F8DF6D11EE91F90E4D775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:08:92:50:83:29:34:20:58:26:ee:d9:6f:1f:8c:d9:c4:f0:
         a8:de:b4:0e:b3:88:1e:a6:13:cb:32:b2:4f:17:3c:3a:9e:b2:
         a2:2c:c8:61:c1:8c:1e:48:b1:a3:e8:c9:c0:8e:b8:34:dd:09:
         0c:bc:16:a1:77:db:1e:c7:ae:88:6f:db:a7:b3:f2:b3:2b:df:
         da:a9:b3:88:52:bb:f1:be:ec:8d:fd:09:d8:89:98:8d:83:0f:
         e2:bf:1e:0d:45:7e:11:b0:3a:53:f3:5d:33:0c:30:f5:7c:f8:
         58:0b:7e:2c:2a:9a:ce:7b:ff:05:81:0e:32:8e:ae:99:7c:3a:
         8c:6f:91:56:6e:b7:65:d0:6b:72:cf:84:88:44:e8:36:5e:07:
         8a:1b:60:ba:5e:80:dd:f5:03:dc:4f:f8:10:cf:63:0f:42:b8:
         3b:a4:97:19:df:b9:28:e0:2c:59:f4:b9:4e:22:84:53:1a:8e:
         94:64:42:7e:4c:bc:3d:a3:4a:e7:70:ce:57:5c:c3:8a:f6:03:
         11:f8:d1:42:68:66:6b:0e:d8:69:9a:05:c5:fd:f3:c4:20:a5:
         19:6d:e0:ee:4b:67:fb:19:10:10:bd:23:59:89:06:a1:02:46:
         1e:47:e7:91:65:c1:c8:75:34:67:79:48:0f:e6:fb:3e:09:ad:
         98:28:4f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:29 2024 by rpki-client on console-fra.rpki-client.org