Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93B15972FBAD11EE9730782D017001B1.roa
File:                     93B15972FBAD11EE9730782D017001B1.roa (raw, json)
Hash identifier:          RzMFfgmSiynXyhWU5AIzSnen0WP62lOPJE/da+4/dEI=
Subject key identifier:   F0:A5:2D:62:D4:EF:DB:A3:9F:AF:17:4D:1F:4F:68:AA:78:12:31:2C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       ADCB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93B15972FBAD11EE9730782D017001B1.roa
Signing time:             Tue 16 Apr 2024 04:55:42 +0000
ROA not before:           Tue 16 Apr 2024 04:55:39 +0000
ROA not after:            Thu 30 May 2024 04:55:39 +0000
asID:                     63139
IP address blocks:        154.94.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44491 (0xadcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 16 04:55:39 2024 GMT
            Not After : May 30 04:55:39 2024 GMT
        Subject: CN=661e04ce-570b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a9:b1:99:be:e1:92:ae:14:fd:1a:7b:35:49:
                    3a:3d:17:b7:44:97:ea:5e:44:ea:82:5b:9f:8f:50:
                    2f:fd:4f:0d:7d:ac:6a:2c:b1:d0:18:0e:c6:0a:1a:
                    18:f3:d8:a3:db:e6:93:61:d7:97:8e:6f:02:b7:92:
                    56:3e:53:b5:16:61:31:c3:ce:5e:0b:b3:de:11:77:
                    4a:cd:ce:ac:38:bc:9c:85:ad:df:b9:2d:85:3d:70:
                    59:59:8a:cd:c8:e9:2e:7a:31:55:a7:d6:c7:18:72:
                    36:80:3d:e6:05:d7:51:84:ac:0f:e1:b8:2e:2d:eb:
                    78:02:c8:4b:a6:e8:dd:a9:c3:15:30:11:9a:e9:ca:
                    11:a5:92:cf:88:24:9c:b9:d3:20:cb:fb:64:dd:ca:
                    8e:7c:d0:d5:b5:14:23:1e:71:08:fc:d6:93:8c:0d:
                    63:dd:b3:d3:30:dd:3b:ae:f0:31:5b:e3:e6:96:fd:
                    57:37:2e:e2:27:e5:8a:25:77:29:70:36:41:ee:4d:
                    13:0a:33:c0:71:23:a2:ec:49:c2:6e:28:6c:9c:83:
                    41:b4:55:39:75:f5:28:ba:fc:11:b6:59:f1:00:83:
                    82:1b:90:36:70:72:23:76:f3:3a:55:c2:a0:70:80:
                    33:00:ac:8e:d2:49:c5:06:b3:cb:b0:86:9a:d2:ac:
                    bc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A5:2D:62:D4:EF:DB:A3:9F:AF:17:4D:1F:4F:68:AA:78:12:31:2C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93B15972FBAD11EE9730782D017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:f0:84:58:ab:6b:de:c4:3f:d7:38:f6:13:49:ea:15:8d:2e:
         c7:63:52:57:42:ea:a1:29:37:60:d6:b7:e1:8c:45:ec:7b:fe:
         b3:f9:d4:97:65:66:b8:dd:4a:cb:7c:5c:b0:0e:1d:ef:ff:08:
         35:da:c2:c1:c6:35:70:5f:59:a9:31:78:c9:c3:c9:b0:6c:f7:
         12:0e:7d:c6:98:09:5b:6b:b6:8c:65:94:a8:f2:c6:0b:52:5f:
         e7:1d:07:f9:8a:b6:1b:0e:6d:c6:d7:96:b0:4c:ab:1d:ac:23:
         af:74:19:ba:4f:dd:2d:a2:75:39:cf:ef:6a:d6:43:81:1d:8f:
         ff:24:e5:e0:8e:b1:ff:0b:ce:40:81:95:bb:01:0f:53:10:a8:
         0e:7a:f5:a7:13:cc:eb:62:21:8f:f4:21:46:60:83:af:d4:82:
         ba:c9:21:45:22:4b:8c:87:4d:2e:bc:2a:8a:0f:09:39:c3:77:
         03:f7:6b:bd:2b:ff:89:95:0b:13:49:3d:69:34:16:bb:2a:ef:
         6c:69:1a:3e:f2:41:1e:88:42:76:78:25:8b:cf:bf:0b:1f:cd:
         58:51:7c:9f:aa:eb:db:10:f6:6d:8a:09:84:47:56:2b:3c:39:
         56:05:e7:e1:f5:cb:de:d5:8f:dd:44:ed:e3:8e:88:fc:10:e1:
         7e:00:b4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:25 2024 by rpki-client on console-ams.rpki-client.org