Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/927C5C725F9611EE97444C0E4AD9E6FC.roa
File:                     927C5C725F9611EE97444C0E4AD9E6FC.roa (raw, json)
Hash identifier:          oSpbwqgesLrcpjSog6Aotn0mpStNTqTcVeNgxF64+0M=
Subject key identifier:   60:EB:C4:39:07:B8:FC:9A:6C:6E:0A:F5:C7:9A:E0:5D:CA:CE:22:68
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       441F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/927C5C725F9611EE97444C0E4AD9E6FC.roa
Signing time:             Sat 30 Sep 2023 13:38:00 +0000
ROA not before:           Sat 30 Sep 2023 13:37:55 +0000
ROA not after:            Mon 30 Sep 2024 13:37:55 +0000
asID:                     211392
IP address blocks:        154.84.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17439 (0x441f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 13:37:55 2023 GMT
            Not After : Sep 30 13:37:55 2024 GMT
        Subject: CN=651824b8-7cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0e:68:af:c4:75:64:af:43:33:1a:23:26:92:
                    b2:be:79:93:70:d9:b0:27:28:55:15:dd:b0:fa:59:
                    4f:b7:c3:c8:8a:9d:7e:14:46:be:c5:80:fe:87:4c:
                    3f:ca:82:65:19:6d:ac:6e:7e:f7:e7:65:7f:e7:96:
                    0c:ce:ed:f1:c8:14:a9:5a:16:ff:74:10:f1:e5:e8:
                    26:f5:ea:9b:31:d5:f1:f5:8c:94:cd:09:34:10:d2:
                    ea:82:da:9f:c1:de:7e:7c:a6:89:ae:f3:35:81:8a:
                    3f:03:03:77:5d:b1:1d:09:b4:cd:20:60:72:52:95:
                    d8:fe:8d:19:e6:f2:0c:77:fe:a9:f9:b8:8b:4f:37:
                    36:e0:f8:21:34:09:e8:69:28:14:09:c6:a9:eb:90:
                    78:4e:7c:fb:09:21:28:18:25:80:16:21:ed:37:20:
                    23:c4:3a:70:f6:7f:d6:b7:90:17:ea:49:ba:22:63:
                    99:89:fd:d1:16:0c:ef:75:43:80:3f:cb:15:81:04:
                    f0:bc:55:a2:7b:00:2d:1e:d3:e9:f2:85:50:bd:68:
                    c7:94:f6:8c:7e:a3:5f:66:18:25:f2:42:f0:81:c5:
                    f0:6f:64:e3:96:da:e3:60:cd:54:68:6d:b6:0e:03:
                    53:76:18:56:ad:01:13:65:79:73:67:0f:fa:c9:f6:
                    6c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EB:C4:39:07:B8:FC:9A:6C:6E:0A:F5:C7:9A:E0:5D:CA:CE:22:68
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/927C5C725F9611EE97444C0E4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:1e:a6:83:e8:a6:41:e8:30:70:64:58:79:4e:3e:4b:bb:ea:
         e4:4f:19:7f:68:98:cb:18:53:3b:c8:46:f9:23:ef:ef:92:fe:
         95:e2:33:ec:6b:6e:2c:01:7b:24:21:0f:83:25:82:71:a9:3c:
         15:8c:11:26:6a:48:7b:71:37:79:89:57:56:8a:55:ef:ce:cd:
         9d:a0:00:b0:df:19:53:37:21:ac:67:80:a5:87:40:98:38:a4:
         bf:97:5a:0d:39:8c:f0:5d:a0:26:4a:55:ac:e3:aa:86:8e:8c:
         84:80:d0:6e:a8:30:b2:cf:b5:a3:c8:e9:56:6d:af:80:6a:63:
         3f:6c:1e:7a:c9:16:61:b8:78:4a:45:dc:d4:18:05:c6:b1:6c:
         ed:e1:99:74:30:e8:84:e6:9e:6f:b1:9a:21:12:3f:c5:b4:fd:
         46:3d:bf:9c:1e:17:17:88:a5:75:cc:8b:13:9d:3c:6a:ed:31:
         dd:18:39:07:42:76:22:b9:76:74:ca:6c:c7:e9:da:c6:11:ac:
         e8:be:13:45:68:75:df:5a:83:7d:44:1c:a9:d4:ca:df:eb:63:
         4a:98:dc:cf:e8:97:3d:ad:2a:02:27:9e:8b:9a:d7:3a:f2:ef:
         09:39:42:97:f7:a6:70:bd:7f:6b:a6:f2:a1:57:67:29:b5:7f:
         56:5c:18:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:15 2024 by rpki-client on console-ams.rpki-client.org