Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95C7AD5AE75411EEA1C886B1775412E6.roa
File:                     95C7AD5AE75411EEA1C886B1775412E6.roa (raw, json)
Hash identifier:          aQJO6UlfhoQEuX5Y1RBxKciyI6hldGA174SueBlhgmc=
Subject key identifier:   0A:6E:E9:47:B6:ED:F8:34:C9:D4:86:0E:13:12:8A:2D:4D:5D:E1:B4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A493
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95C7AD5AE75411EEA1C886B1775412E6.roa
Signing time:             Thu 21 Mar 2024 07:28:17 +0000
ROA not before:           Thu 21 Mar 2024 07:28:14 +0000
ROA not after:            Tue 23 Apr 2024 07:28:14 +0000
asID:                     44559
IP address blocks:        154.218.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Apr 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42131 (0xa493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 21 07:28:14 2024 GMT
            Not After : Apr 23 07:28:14 2024 GMT
        Subject: CN=65fbe191-aff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2b:75:51:60:fd:1e:b3:6b:a3:0e:97:5b:b1:
                    75:ed:a2:ca:52:4c:ad:34:6d:55:b5:17:9f:ba:7a:
                    83:d1:3a:ac:96:5d:26:c0:99:41:bf:2a:1f:3a:d5:
                    ac:f4:3c:bb:0f:4f:b9:8c:4c:ee:ae:7e:ce:6b:20:
                    aa:da:78:53:73:9d:4f:e9:a8:38:86:ed:b5:eb:c4:
                    de:69:86:21:dd:1f:4b:c8:17:dd:6c:8d:92:99:59:
                    66:83:66:7d:2f:2a:5f:42:d4:39:c1:8b:d2:b1:cd:
                    3e:e2:1a:74:ed:f6:98:2d:7e:95:64:d1:63:ae:2c:
                    68:a4:89:28:3f:95:ea:d1:d1:fb:0f:1c:6a:8c:21:
                    d5:38:e4:2e:b4:e6:f5:4c:7c:fd:ef:5e:d7:b2:ce:
                    a1:4c:d5:81:4e:c8:6f:58:3d:a1:13:38:85:db:a7:
                    cf:c7:ee:3f:46:f3:a6:2d:14:d8:82:5d:3d:63:eb:
                    da:6f:af:81:b4:d9:c2:6f:b0:9f:56:aa:45:ed:18:
                    ee:4f:9a:dc:85:a4:6c:af:f1:6d:7c:46:f4:7a:06:
                    21:49:62:f0:9d:bf:de:0c:23:b2:50:6f:d1:f2:06:
                    8a:b0:35:9a:e8:60:06:54:3d:94:6d:b1:e9:3e:91:
                    91:07:ee:32:49:51:46:59:e5:4b:42:ee:cf:6d:02:
                    ed:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6E:E9:47:B6:ED:F8:34:C9:D4:86:0E:13:12:8A:2D:4D:5D:E1:B4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95C7AD5AE75411EEA1C886B1775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.218.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:12:3c:f2:f0:0d:2e:65:85:12:e3:85:07:ed:48:96:a7:3c:
         94:a5:7a:67:78:7e:19:e7:9b:9b:c8:9a:7f:11:77:48:73:cf:
         19:97:2e:34:8b:90:d4:ae:77:4a:ba:5e:13:fe:f8:5d:49:c4:
         4e:17:1d:6f:fb:44:d1:4e:6c:e7:9f:b6:ee:e6:67:94:96:72:
         6d:c0:de:2c:7a:15:34:7b:10:17:a1:14:21:42:4d:45:8c:93:
         5e:8a:bc:6d:cb:7f:ea:11:55:16:43:2b:6f:0d:ee:88:40:6d:
         4a:62:4a:b5:73:c4:78:a3:ee:97:7e:9b:40:b2:9d:6d:64:0c:
         bf:92:d9:16:a5:78:74:59:35:f9:a9:c4:0f:32:67:0c:11:4b:
         fe:9c:36:f9:3d:dd:36:f5:53:81:f8:88:4f:4c:b7:a3:e4:1e:
         c7:d6:f5:a3:4f:25:10:01:62:27:95:19:26:52:65:ef:38:a2:
         2d:8e:8e:cd:0d:ff:e7:bc:7e:2f:5d:d1:fe:cd:f4:09:d2:44:
         62:f6:86:16:28:1c:6e:b6:70:1e:9f:28:d1:c0:01:b4:01:b1:
         ba:82:7f:47:bb:3f:39:d2:6b:20:7b:01:8c:12:bd:f1:16:12:
         a4:e1:94:3c:a7:91:5f:a7:a8:28:1b:e0:84:9a:84:15:e2:db:
         ce:09:83:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:24 2024 by rpki-client on console-ams.rpki-client.org