Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92F6B9C2017111EFBCB98F23017001B1.roa
File:                     92F6B9C2017111EFBCB98F23017001B1.roa (raw, json)
Hash identifier:          L7sj4GSAzxkF+ZjOTZcMeLVQ850Luo20c6uXihraT2s=
Subject key identifier:   48:CF:B7:A0:14:B2:14:3B:B9:4E:E3:E1:F0:77:EB:05:0B:9C:30:65
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       AF40
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92F6B9C2017111EFBCB98F23017001B1.roa
Signing time:             Tue 23 Apr 2024 13:01:18 +0000
ROA not before:           Tue 23 Apr 2024 13:01:15 +0000
ROA not after:            Sat 11 May 2024 13:01:15 +0000
asID:                     9009
IP address blocks:        154.85.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44864 (0xaf40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 23 13:01:15 2024 GMT
            Not After : May 11 13:01:15 2024 GMT
        Subject: CN=6627b11e-4c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:1f:69:55:4c:70:40:bb:0c:1c:d7:1e:f0:8c:
                    e1:3e:1c:24:99:8e:4e:1f:d4:73:84:fd:dc:95:78:
                    ec:6e:f1:c4:84:3c:49:4b:52:90:e1:75:79:6d:a6:
                    d1:89:b7:0b:34:75:3c:1f:b9:01:6d:66:9a:85:62:
                    dd:46:c6:73:20:c6:a5:e0:52:bd:23:6b:49:84:e6:
                    00:32:d4:df:04:e1:93:83:0d:3f:a7:bb:5f:19:13:
                    63:d1:dc:45:a0:91:88:88:c4:90:6f:d6:69:4a:66:
                    2f:70:6f:7b:7d:fe:3d:b7:6b:78:a7:ea:f5:8b:02:
                    32:3b:84:03:00:36:fb:74:24:f1:1b:f7:3d:10:47:
                    96:f4:2b:65:a2:29:33:0b:8d:99:85:72:b9:21:8f:
                    79:42:5a:c3:11:b4:df:ca:02:92:bd:91:30:07:74:
                    86:8b:cd:30:d6:bc:4e:ae:f5:63:1b:1e:00:93:c5:
                    5a:97:1a:03:3e:37:1e:cd:e5:57:e0:80:21:f0:c5:
                    08:a1:ff:42:4c:42:e6:e9:bd:db:90:06:ae:af:92:
                    55:88:db:91:9a:0a:e0:c5:fa:a0:c3:03:74:4f:25:
                    30:7b:a3:bc:bb:be:14:16:f5:73:d0:e4:cd:a2:04:
                    47:53:7d:b2:ba:d5:17:24:f9:82:6e:2d:60:3a:21:
                    f2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CF:B7:A0:14:B2:14:3B:B9:4E:E3:E1:F0:77:EB:05:0B:9C:30:65
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92F6B9C2017111EFBCB98F23017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.85.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:d3:3a:8d:ca:70:80:c7:48:46:fb:61:e7:de:82:e6:75:1e:
         c8:f4:0f:43:8b:de:4c:c1:32:f8:53:9a:8b:54:5a:f9:fe:ef:
         21:fa:09:c8:a4:55:54:3f:f6:12:ee:8a:9d:21:8d:09:e2:9b:
         8e:0b:9d:ba:14:33:fe:49:2d:42:ab:b0:cd:55:d0:20:fe:84:
         4b:63:99:ef:b4:b3:51:e9:74:7b:e8:1e:1c:a0:9f:ae:e0:28:
         a1:23:95:2d:05:83:c3:36:af:59:99:e5:10:a6:1f:1b:0e:ea:
         79:14:a7:1e:bc:59:e5:d4:7b:f3:ce:f9:be:1e:80:19:c5:5b:
         51:a7:73:31:2c:c5:07:3c:96:1f:01:41:c1:66:2a:dd:09:89:
         9a:5f:0a:3c:00:a9:59:e8:e0:7f:9c:62:0f:37:b4:64:6c:28:
         db:ba:6e:2e:fa:6a:b5:47:7c:3e:51:a1:f6:7c:a8:be:75:06:
         de:4f:19:43:1c:5a:eb:e7:cb:2c:5b:44:03:a7:d1:90:d5:bb:
         ba:28:42:9c:db:44:4c:0b:c6:c1:2c:f7:b9:a3:de:e8:57:79:
         79:c2:db:cf:4c:af:52:92:9a:89:4d:1b:04:ef:39:45:74:28:
         1a:0c:64:c7:80:55:7c:ac:2a:50:64:bb:56:28:85:d3:36:0a:
         85:a7:16:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:38 2024 by rpki-client on console-ams.rpki-client.org