Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94EF79F47EB711EE93E1CA554AD9E6FC.roa
File:                     94EF79F47EB711EE93E1CA554AD9E6FC.roa (raw, json)
Hash identifier:          7Fk9hbkNVRhkPaEDoM3/cDv8K2l2EWb8Dhl815Zu40I=
Subject key identifier:   79:63:E4:45:2E:56:53:7C:C4:91:25:A4:CE:A6:44:CB:74:29:4B:B0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       4DA9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94EF79F47EB711EE93E1CA554AD9E6FC.roa
Signing time:             Thu 09 Nov 2023 04:22:24 +0000
ROA not before:           Thu 09 Nov 2023 04:22:21 +0000
ROA not after:            Thu 08 Aug 2024 04:22:21 +0000
asID:                     133861
IP address blocks:        154.204.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19881 (0x4da9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  9 04:22:21 2023 GMT
            Not After : Aug  8 04:22:21 2024 GMT
        Subject: CN=654c5e80-8922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:25:93:c0:5a:15:ca:c3:c5:20:de:2f:1f:bf:
                    5c:22:06:ce:f7:b9:0c:7c:00:41:34:6b:e2:a9:84:
                    1b:01:c0:38:cf:8e:35:8a:29:cc:c3:fd:6c:cf:2d:
                    2c:ff:76:5f:b8:91:7f:43:f5:e6:1a:77:8b:16:17:
                    cd:cd:6f:5f:6e:f8:4c:b3:c6:f6:e3:bf:ec:6f:dd:
                    03:af:96:2d:99:8a:34:1e:3e:fe:be:a7:5f:23:30:
                    ba:b6:d0:4a:cb:7f:d7:3d:45:d8:5d:ad:be:a3:c1:
                    09:69:e3:80:53:cb:ae:02:ac:85:08:a1:f5:a8:88:
                    fd:6e:88:d7:a5:8f:37:b2:d8:72:3e:59:2a:85:72:
                    cc:48:4b:ed:e6:bd:75:29:81:82:49:50:66:d8:a9:
                    40:c3:b7:a2:b2:59:48:df:ec:bf:55:dc:fb:4b:9f:
                    0a:6d:e3:33:85:b8:b4:79:4f:aa:34:ef:70:66:ad:
                    d5:6f:29:6f:15:0d:ce:a1:bd:22:7c:2a:50:3f:6d:
                    70:0f:42:2e:cf:fe:4e:08:dc:f2:fe:92:b6:3d:eb:
                    60:e5:d8:7b:5d:74:a1:20:3c:b4:b7:41:d0:b0:8a:
                    0a:68:d3:c6:5e:ef:b5:7a:19:9d:42:d9:a4:b0:a0:
                    48:eb:92:0c:76:e3:6f:47:7f:17:1c:2d:5f:f4:92:
                    41:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:63:E4:45:2E:56:53:7C:C4:91:25:A4:CE:A6:44:CB:74:29:4B:B0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94EF79F47EB711EE93E1CA554AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:a6:c9:a4:89:a2:4c:22:3a:12:32:a9:8d:29:79:e6:2f:f2:
         f8:33:72:30:09:1b:31:59:77:fd:06:f9:f9:18:4d:df:51:66:
         fd:03:0b:6a:7a:5b:9c:c0:08:f7:25:2c:2c:3c:95:b9:5b:fe:
         41:f9:15:3b:2f:00:25:83:62:3b:6a:3a:fc:1d:ad:42:7e:24:
         3a:30:01:a4:53:0a:94:d4:f7:87:af:31:fd:4b:97:d6:69:f2:
         da:93:42:d3:73:11:41:58:4e:5c:b9:35:f2:3b:01:1e:39:72:
         1c:ee:78:19:a2:7d:7d:83:0d:f9:3b:bd:86:cc:3c:92:52:6b:
         1a:04:8e:c9:b7:40:b4:8c:d7:d1:49:7b:15:2b:f4:80:25:16:
         00:45:af:35:ad:45:69:32:76:46:ec:40:ac:08:85:bf:5b:97:
         44:4b:1f:c3:1a:ab:38:54:c1:ab:c4:2d:8a:2c:99:27:c5:5b:
         2f:7f:71:7b:ba:f9:5d:d8:cb:10:cb:74:23:6b:8c:fe:9b:8f:
         e8:b1:2f:b3:ee:ec:d7:a2:de:be:c7:c7:d3:c0:bd:30:b7:90:
         6b:06:6f:3e:1f:ba:81:1a:f4:1c:b3:10:d9:55:6e:ad:2f:4a:
         49:bf:26:4c:72:4d:79:01:81:a3:0b:c0:18:e3:9b:e6:43:cd:
         54:ef:84:bd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICTakwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMDkwNDIyMjFaFw0yNDA4MDgwNDIyMjFaMBgxFjAU
BgNVBAMTDTY1NGM1ZTgwLTg5MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDaJZPAWhXKw8Ug3i8fv1wiBs73uQx8AEE0a+KphBsBwDjPjjWKKczD/WzP
LSz/dl+4kX9D9eYad4sWF83Nb19u+Eyzxvbjv+xv3QOvli2ZijQePv6+p18jMLq2
0ErLf9c9Rdhdrb6jwQlp44BTy64CrIUIofWoiP1uiNeljzey2HI+WSqFcsxIS+3m
vXUpgYJJUGbYqUDDt6KyWUjf7L9V3PtLnwpt4zOFuLR5T6o073BmrdVvKW8VDc6h
vSJ8KlA/bXAPQi7P/k4I3PL+krY962Dl2HtddKEgPLS3QdCwigpo08Ze77V6GZ1C
2aSwoEjrkgx2429HfxccLV/0kkGtAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUeWPk
RS5WU3zEkSWkzqZEy3QpS7AwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4Lzk0RUY3OUY0N0VCNzExRUU5M0UxQ0E1NTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazDgwDQYJKoZIhvcNAQEL
BQADggEBAEmmyaSJokwiOhIyqY0peeYv8vgzcjAJGzFZd/0G+fkYTd9RZv0DC2p6
W5zACPclLCw8lblb/kH5FTsvACWDYjtqOvwdrUJ+JDowAaRTCpTU94evMf1Ll9Zp
8tqTQtNzEUFYTly5NfI7AR45chzueBmifX2DDfk7vYbMPJJSaxoEjsm3QLSM19FJ
exUr9IAlFgBFrzWtRWkydkbsQKwIhb9bl0RLH8MaqzhUwavELYosmSfFWy9/cXu6
+V3YyxDLdCNrjP6bj+ixL7Pu7Nei3r7Hx9PAvTC3kGsGbz4fuoEa9ByzENlVbq0v
Skm/JkxyTXkBgaMLwBjjm+ZDzVTvhL0=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:32 2024 by rpki-client on console-fra.rpki-client.org