Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9329E78082B811EE9048DF2A4AD9E6FC.roa
File:                     9329E78082B811EE9048DF2A4AD9E6FC.roa (raw, json)
Hash identifier:          Ui7xEwvHQWAV3mBqoqEGLPKRmM8xUJv0ActXlNAUqHE=
Subject key identifier:   05:AB:64:41:80:E5:94:CE:8D:E3:49:05:9E:66:F6:42:56:96:FF:13
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       4FCA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9329E78082B811EE9048DF2A4AD9E6FC.roa
Signing time:             Tue 14 Nov 2023 06:39:35 +0000
ROA not before:           Tue 14 Nov 2023 06:39:32 +0000
ROA not after:            Tue 12 Nov 2024 06:39:32 +0000
asID:                     397630
IP address blocks:        154.201.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20426 (0x4fca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 14 06:39:32 2023 GMT
            Not After : Nov 12 06:39:32 2024 GMT
        Subject: CN=65531627-c7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:cb:54:a6:9e:00:78:b0:d1:9d:6a:ed:00:
                    ab:c0:a5:91:41:a4:45:6c:e4:45:58:b6:bb:f5:90:
                    8b:e0:a6:b4:87:f5:fc:ba:94:f4:2c:6f:27:4f:3f:
                    06:b1:87:d3:7c:38:c1:b2:a3:28:d6:65:39:a8:70:
                    c6:45:3a:b3:11:e8:43:c4:e9:97:66:67:6c:6e:59:
                    c0:ca:99:a6:78:52:b8:aa:cd:cc:c7:1f:e2:37:93:
                    66:81:e6:ad:43:2a:92:ae:8b:df:2b:4a:34:bc:f9:
                    ae:6d:f9:2f:f3:f9:e1:8d:49:d9:12:68:dd:4f:b5:
                    66:6f:79:02:1e:fc:ad:64:e6:46:c7:84:86:26:96:
                    b0:08:f0:01:91:ba:e6:1a:c1:a1:bb:af:78:8c:e6:
                    f7:96:8a:49:ec:b6:60:2e:2f:99:38:55:04:c0:78:
                    7c:85:40:c1:02:1f:ee:18:6c:f8:35:1f:64:3e:b8:
                    12:25:cf:31:08:91:a6:5e:65:c6:45:73:b2:6f:6a:
                    1d:3d:a9:68:d1:32:7b:ab:8d:71:2e:80:cd:5a:d9:
                    04:e9:56:9b:29:65:fa:b0:d9:98:66:af:e0:88:05:
                    69:e7:ff:1e:8b:70:6f:22:e2:b5:6a:78:cd:11:ed:
                    2c:d3:e4:4f:b9:88:61:7c:e8:ae:52:db:71:20:bf:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AB:64:41:80:E5:94:CE:8D:E3:49:05:9E:66:F6:42:56:96:FF:13
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9329E78082B811EE9048DF2A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:20:79:58:5c:c6:81:fd:c7:23:da:39:e6:a7:5d:f6:9b:ac:
         8d:ce:1d:1f:e5:c0:7e:29:62:b7:20:4d:03:3c:22:16:d6:ec:
         04:07:52:b2:53:3f:6f:a6:81:60:2d:f9:ae:94:84:6f:b3:1b:
         76:51:b8:ac:95:03:2c:f4:80:83:21:45:ee:e0:2d:29:5b:e1:
         77:55:50:ed:30:da:1f:f9:35:78:47:fd:7d:45:1e:8e:73:f6:
         18:3b:70:3b:37:9d:13:96:d4:9a:2c:09:eb:e5:61:1a:16:34:
         5b:65:c7:65:89:58:1b:5f:d8:4b:78:65:9a:62:a7:ba:39:e3:
         45:e7:d3:e6:c2:44:2b:16:ad:b5:4c:a7:1d:5b:65:36:c5:48:
         70:6a:d8:37:50:bd:da:84:18:9e:42:87:30:5d:0d:ae:ea:53:
         ad:65:05:ac:7b:5f:1f:df:c6:39:b6:2f:ff:04:4b:04:dc:a8:
         d3:c4:4f:ae:bd:aa:cf:01:4e:82:f8:b9:4d:09:e0:34:5a:5c:
         66:3c:90:8b:9e:ba:14:ea:5a:4f:a1:5e:01:ae:3b:84:98:13:
         57:20:86:36:b0:18:c8:52:b1:37:d9:48:c4:8f:a9:3a:72:66:
         a7:e9:92:71:9e:6f:eb:4b:32:fd:17:b5:76:92:6d:18:12:2c:
         e3:32:2f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:15 2024 by rpki-client on console-ams.rpki-client.org