Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8918F6E6E75D11EE8C7BEF76775412E6.roa
File:                     8918F6E6E75D11EE8C7BEF76775412E6.roa (raw, json)
Hash identifier:          ijnkqtptNOeWHThfEmEUABHPjm6tFHae4E6A//wZIHQ=
Subject key identifier:   EF:13:1B:EB:D5:4E:32:B2:2D:D1:BB:6E:A3:63:02:79:4E:0A:0E:27
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A4E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8918F6E6E75D11EE8C7BEF76775412E6.roa
Signing time:             Thu 21 Mar 2024 08:32:21 +0000
ROA not before:           Thu 21 Mar 2024 08:32:18 +0000
ROA not after:            Tue 23 Apr 2024 08:32:18 +0000
asID:                     44559
IP address blocks:        154.211.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Apr 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42217 (0xa4e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 21 08:32:18 2024 GMT
            Not After : Apr 23 08:32:18 2024 GMT
        Subject: CN=65fbf095-6ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:fd:31:75:5b:56:e3:b0:19:5c:20:6c:2b:
                    2d:3e:d0:48:6d:b0:6c:e0:24:75:c2:77:b3:87:a9:
                    0b:d1:bb:85:87:3b:08:55:bb:72:4d:2b:49:79:7d:
                    7e:b3:30:74:b8:1c:b1:2f:a7:c7:4e:7f:14:52:b7:
                    1e:63:ab:26:9e:64:79:dc:56:93:e7:55:1d:e8:6c:
                    1f:31:5b:99:c9:11:c5:1f:5c:77:91:a1:c0:52:65:
                    1e:88:aa:5e:e5:9a:53:9e:f3:5a:1c:6c:b0:1c:f6:
                    c3:7a:bb:ae:c7:fd:b9:48:8e:f0:ed:3c:73:4a:7a:
                    1b:e0:53:1d:c3:04:af:c5:e2:aa:62:37:b4:cd:56:
                    66:88:8b:f8:1d:16:de:22:43:ec:a4:0b:12:50:a4:
                    69:9a:24:31:ee:e2:5d:22:e0:fe:15:6c:04:41:e6:
                    5a:2a:ab:72:9d:16:44:68:ed:ec:38:e3:ab:64:de:
                    1f:b0:a0:ec:fd:da:4f:99:30:23:64:c8:1d:08:7c:
                    82:53:2c:92:94:98:8c:38:8e:79:13:ae:d5:b8:61:
                    85:5b:f8:15:27:0b:77:4f:3e:c2:89:75:b9:e9:c2:
                    4b:20:a3:e5:a2:6f:f5:a5:21:35:36:a0:d0:8e:6b:
                    8d:31:81:c3:31:1f:c1:38:fd:73:2d:46:a3:8c:bc:
                    89:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:13:1B:EB:D5:4E:32:B2:2D:D1:BB:6E:A3:63:02:79:4E:0A:0E:27
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8918F6E6E75D11EE8C7BEF76775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.211.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:21:bb:d2:27:6f:24:e7:21:ad:3f:37:84:75:0f:00:18:d4:
         62:66:e9:98:95:da:37:88:04:05:05:bb:cb:4d:6a:b3:65:f4:
         44:c4:58:aa:23:34:92:5d:b4:e1:be:43:28:7b:6e:ae:dd:42:
         4e:80:20:0a:72:eb:f8:c9:07:3b:4b:4a:b1:00:00:cc:9b:59:
         3b:9f:ae:6c:72:db:58:4c:81:d3:80:c2:d1:ba:3f:ca:60:60:
         8b:22:eb:25:5e:84:eb:95:ec:14:1a:d7:2d:8a:25:77:69:e2:
         d6:a2:37:53:bd:62:16:b4:8a:b7:b9:d1:21:fa:91:bf:b6:ce:
         dd:a2:57:f7:d8:fe:02:23:51:4c:75:87:6f:cb:58:37:19:3c:
         f1:08:9d:10:08:0d:bd:60:57:d7:68:d2:86:ff:dc:22:24:45:
         f7:b2:f5:64:de:96:59:1a:16:8c:ff:34:50:eb:e8:a2:4a:2b:
         7c:be:60:29:58:c9:e0:aa:ca:74:5d:aa:a6:57:c3:0d:c6:5f:
         c1:f1:91:e1:18:c1:7c:44:70:5d:27:f5:14:c3:67:40:7d:ac:
         d0:da:4b:37:60:1d:c7:bf:d4:e2:6f:9c:96:a3:6f:e3:47:97:
         f1:aa:9a:d8:8a:18:5d:c5:0c:15:5c:53:ae:37:df:3c:bb:29:
         c2:29:90:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKTpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMDgzMjE4WhcNMjQwNDIzMDgzMjE4WjAYMRYw
FAYDVQQDEw02NWZiZjA5NS02ZWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwwj9MXVbVuOwGVwgbCstPtBIbbBs4CR1wnezh6kL0buFhzsIVbtyTStJ
eX1+szB0uByxL6fHTn8UUrceY6smnmR53FaT51Ud6GwfMVuZyRHFH1x3kaHAUmUe
iKpe5ZpTnvNaHGywHPbDeruux/25SI7w7TxzSnob4FMdwwSvxeKqYje0zVZmiIv4
HRbeIkPspAsSUKRpmiQx7uJdIuD+FWwEQeZaKqtynRZEaO3sOOOrZN4fsKDs/dpP
mTAjZMgdCHyCUyySlJiMOI55E67VuGGFW/gVJwt3Tz7CiXW56cJLIKPlom/1pSE1
NqDQjmuNMYHDMR/BOP1zLUajjLyJswIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFO8T
G+vVTjKyLdG7bqNjAnlOCg4nMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84OTE4RjZFNkU3NUQxMUVFOEM3QkVGNzY3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtMkMA0GCSqGSIb3DQEB
CwUAA4IBAQCVIbvSJ28k5yGtPzeEdQ8AGNRiZumYldo3iAQFBbvLTWqzZfRExFiq
IzSSXbThvkMoe26u3UJOgCAKcuv4yQc7S0qxAADMm1k7n65scttYTIHTgMLRuj/K
YGCLIuslXoTrlewUGtctiiV3aeLWojdTvWIWtIq3udEh+pG/ts7dolf32P4CI1FM
dYdvy1g3GTzxCJ0QCA29YFfXaNKG/9wiJEX3svVk3pZZGhaM/zRQ6+iiSit8vmAp
WMngqsp0XaqmV8MNxl/B8ZHhGMF8RHBdJ/UUw2dAfazQ2ks3YB3Hv9Tib5yWo2/j
R5fxqprYihhdxQwVXFOuN988uynCKZAm
-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:23 2024 by rpki-client on console-fra.rpki-client.org