Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E693D2EE76611EE8DB8C0BC775412E6.roa
File:                     7E693D2EE76611EE8DB8C0BC775412E6.roa (raw, json)
Hash identifier:          tEdRlB31NUZHcpZ2klciaQd1fk0fNz3xcoYV5kLYmxg=
Subject key identifier:   B3:D7:66:9D:DB:4A:72:78:91:3A:4D:54:8C:E9:74:CB:99:37:19:01
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A519
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E693D2EE76611EE8DB8C0BC775412E6.roa
Signing time:             Thu 21 Mar 2024 09:36:29 +0000
ROA not before:           Thu 21 Mar 2024 09:36:25 +0000
ROA not after:            Tue 23 Apr 2024 09:36:25 +0000
asID:                     44559
IP address blocks:        154.208.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Apr 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42265 (0xa519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 21 09:36:25 2024 GMT
            Not After : Apr 23 09:36:25 2024 GMT
        Subject: CN=65fbff9d-c079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:77:75:25:f9:7e:7a:66:09:c2:0b:e4:32:
                    d4:4c:a7:82:3c:37:3b:e1:68:5f:71:a8:b6:65:21:
                    02:e3:77:12:87:4f:a5:b9:55:74:99:f7:47:54:92:
                    1b:82:ca:48:2a:90:4c:42:48:bb:8b:7a:1e:ba:dd:
                    a5:68:fe:79:4d:fd:8d:56:4b:d6:33:61:99:18:21:
                    11:c5:ab:ab:3b:5b:70:90:66:fb:87:cd:a8:49:62:
                    d6:f3:1c:1a:1b:11:9a:15:9e:0d:51:f8:c3:69:90:
                    f8:c9:8c:78:8e:4f:91:3a:bc:84:78:89:c3:6d:99:
                    37:a4:98:3d:68:7f:97:ee:80:bb:66:db:5b:20:5e:
                    0a:0a:bd:ee:09:52:39:89:97:ae:76:89:ac:7e:9b:
                    45:b0:80:42:14:90:30:06:2d:80:4e:b8:17:2c:27:
                    17:49:01:30:07:e9:7c:d2:fb:43:0a:6c:87:a2:ab:
                    54:72:b9:3d:7a:e3:66:9d:b2:45:a3:f3:a1:68:15:
                    00:e7:b7:e8:83:ca:ed:49:48:bb:09:8a:67:87:84:
                    8e:3b:24:9c:a3:7b:b3:11:15:92:25:f6:1a:ba:99:
                    31:02:52:35:43:e0:23:09:f6:75:26:54:71:24:d6:
                    03:11:99:71:44:95:c9:3f:6f:4c:05:2c:4b:b2:50:
                    68:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D7:66:9D:DB:4A:72:78:91:3A:4D:54:8C:E9:74:CB:99:37:19:01
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E693D2EE76611EE8DB8C0BC775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.208.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:85:65:ef:3d:30:ec:04:3f:a3:cc:ff:65:77:25:d8:06:15:
         03:15:4c:b5:59:24:ea:8d:9b:ed:c6:04:23:30:88:59:38:79:
         37:66:c3:06:09:5f:52:9f:c9:3c:9c:cd:72:16:9e:61:47:89:
         86:83:29:83:78:24:40:e7:2a:1a:ac:fc:48:61:1c:13:6f:f7:
         57:93:21:57:49:1a:63:93:b7:fc:56:e6:e2:79:81:8c:26:59:
         4b:36:35:48:cd:05:6f:33:26:26:1d:6c:ed:50:80:5d:58:9d:
         28:30:31:37:d2:25:c1:31:80:5c:d6:90:87:72:ca:5f:cc:f7:
         19:18:9b:92:7e:f6:fa:ee:72:f0:36:0e:3e:23:2d:8a:56:35:
         48:3b:fc:8b:6d:2f:a7:92:b7:de:ec:c9:15:db:c9:2c:52:2f:
         a6:2a:95:30:57:2a:fe:0e:69:ec:99:11:98:d2:cd:90:55:39:
         45:22:54:43:1d:10:0c:8b:10:07:94:01:49:4b:04:dc:5e:ad:
         4e:61:ea:f8:35:77:63:a9:42:c5:da:87:ac:db:4b:30:5e:99:
         47:b1:12:db:9c:ab:17:91:c5:2e:77:b9:e5:49:ad:7f:0d:1e:
         26:a8:82:c6:d2:3a:3a:45:75:9d:e1:b4:69:cd:18:c0:09:b0:
         86:44:db:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:23 2024 by rpki-client on console-fra.rpki-client.org