Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84499F0E10DE11EEB421932F4AD9E6FC.roa
File:                     84499F0E10DE11EEB421932F4AD9E6FC.roa (raw, json)
Hash identifier:          gfg+Tb0VKDzkrWtLcnFBsMOiqk8aRgQ1/2Kz5wbwdmU=
Subject key identifier:   2F:1A:12:B2:57:35:98:8C:1C:3E:0D:C6:2C:FE:98:12:54:48:ED:E9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2D84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84499F0E10DE11EEB421932F4AD9E6FC.roa
Signing time:             Thu 22 Jun 2023 09:23:58 +0000
ROA not before:           Thu 22 Jun 2023 09:23:54 +0000
ROA not after:            Fri 05 Jul 2024 09:23:54 +0000
asID:                     146993
IP address blocks:        154.203.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11652 (0x2d84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 22 09:23:54 2023 GMT
            Not After : Jul  5 09:23:54 2024 GMT
        Subject: CN=6494132e-c172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:78:2b:d6:a5:29:44:ce:9f:5c:9f:a1:3a:
                    c5:82:99:12:2e:75:94:11:f3:79:f2:96:9f:d8:73:
                    06:b9:cf:17:ed:88:8c:a0:e7:7c:14:48:40:56:1a:
                    3b:b2:5c:64:55:64:35:55:ef:e7:b2:7d:f3:1c:e9:
                    a8:42:3e:b1:b9:f7:8e:db:d9:f7:7b:11:23:c3:c7:
                    02:b1:37:fb:9f:69:c4:aa:55:7b:1e:fc:89:cd:a7:
                    d5:e1:ef:ed:d1:e1:84:0f:7e:63:c4:51:bc:6c:c5:
                    11:f0:57:85:b2:0d:cd:ea:4d:4b:15:07:c0:da:bf:
                    a7:1a:05:0e:a9:e8:ef:55:20:25:e3:13:94:bb:b2:
                    fb:93:fc:1b:80:a1:64:45:57:54:ea:9f:54:09:67:
                    f8:c7:48:86:37:7b:61:8c:12:20:7a:bc:f8:c9:a9:
                    3e:c1:0a:be:00:4e:3b:13:f6:ad:0f:ab:18:bd:09:
                    ca:59:42:12:ed:09:a2:20:d1:71:2f:8e:6b:ca:87:
                    bf:b7:94:5a:d5:e1:0a:0b:d4:08:57:d1:64:01:66:
                    2f:92:9c:4f:d4:cb:3d:05:64:1d:88:e9:3e:29:0d:
                    db:f4:8f:91:70:94:d9:60:8a:ed:c2:d4:3f:49:03:
                    3f:45:df:90:62:02:d1:4f:3e:b6:9d:b2:d4:31:c7:
                    bc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1A:12:B2:57:35:98:8C:1C:3E:0D:C6:2C:FE:98:12:54:48:ED:E9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84499F0E10DE11EEB421932F4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:85:c3:a0:af:ed:95:b3:f0:fd:6b:83:90:e2:9a:55:9a:7e:
         00:86:87:23:d7:c5:d3:9e:2f:c4:16:56:3c:9a:09:de:d5:86:
         73:72:da:1f:08:00:57:d5:db:8e:28:20:8c:b7:13:35:05:3a:
         68:0c:e4:23:63:c9:f3:67:7d:0d:ae:46:12:eb:11:76:82:75:
         97:ab:2a:17:aa:cc:08:fe:05:e3:82:f1:75:9e:9c:64:3d:2b:
         b0:c6:47:7e:9d:74:04:97:8b:44:49:a8:4c:04:e7:fc:4f:4d:
         b8:05:dc:e5:2b:32:ea:a8:98:c0:d2:1e:24:68:9e:f7:13:47:
         07:05:71:57:1f:26:5b:e9:bd:75:1d:f1:3d:e8:f2:26:b0:22:
         5d:01:c2:e4:a0:b3:ef:1e:3b:5a:e9:11:df:24:8f:47:cf:5f:
         25:35:0f:9f:48:10:c9:d3:1f:b5:2c:94:03:49:19:f2:5c:9e:
         8e:db:06:98:f4:09:36:93:72:09:7e:07:6f:59:52:fc:ed:af:
         fb:24:29:47:fd:38:20:5e:18:5b:6e:7c:60:99:5d:75:98:42:
         af:39:da:49:83:c7:03:b2:bf:6f:38:02:f0:7e:35:bf:16:89:
         1f:e2:6a:32:a4:50:7f:1e:6d:3b:ef:34:14:8e:a7:41:df:24:
         17:5c:75:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:30 2024 by rpki-client on console-fra.rpki-client.org