Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/975CC6C29D4A11EEAE37EC34D25BE465.roa
File:                     975CC6C29D4A11EEAE37EC34D25BE465.roa (raw, json)
Hash identifier:          xZVZTdeeMRBaIa5XLdVmUv1lNWnZCaNElKEQ8tyiC3U=
Subject key identifier:   B6:62:D7:6C:13:6A:24:14:F2:9F:E3:B7:F6:53:F5:E2:D4:6F:AD:E8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       61E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/975CC6C29D4A11EEAE37EC34D25BE465.roa
Signing time:             Mon 18 Dec 2023 02:10:19 +0000
ROA not before:           Mon 18 Dec 2023 02:10:15 +0000
ROA not after:            Wed 18 Dec 2024 02:10:15 +0000
asID:                     201411
IP address blocks:        154.202.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25065 (0x61e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 18 02:10:15 2023 GMT
            Not After : Dec 18 02:10:15 2024 GMT
        Subject: CN=657faa0b-604f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:56:41:cd:ff:89:9a:97:d4:4d:07:1d:7f:90:
                    09:9d:e5:98:ed:86:97:c6:19:51:8a:96:87:f3:d5:
                    a6:44:7c:8a:52:90:42:a8:cc:2f:16:49:79:b2:3d:
                    2c:6c:1a:b5:9b:4d:2c:a5:da:d6:a5:0a:ac:3c:ff:
                    fe:9a:b6:8c:10:b6:0b:d4:e8:da:d2:df:f3:07:2d:
                    0e:58:d5:ef:fe:69:8b:53:d9:30:36:dc:63:40:35:
                    a2:46:42:ae:4b:da:e6:c2:bf:bf:e1:33:c5:45:7f:
                    a1:71:49:f4:85:94:31:75:79:b3:b4:af:0d:91:b3:
                    f2:f0:bd:33:73:d2:c6:db:72:bf:60:92:3c:24:61:
                    4f:58:6c:29:11:e7:f6:f5:52:0d:e5:96:b4:a2:ab:
                    aa:e2:f9:a9:0d:c2:c7:f8:a2:9d:b2:50:6f:88:98:
                    39:62:29:36:26:0a:20:c3:25:0e:cc:1f:2b:96:6a:
                    b3:45:55:91:db:a8:4e:1b:b2:a3:e0:62:7a:5d:65:
                    16:4f:58:58:d4:e6:e1:9a:63:b1:a7:49:b4:cf:1a:
                    41:ab:b6:d1:ee:d2:6a:d7:f7:4c:b4:31:b1:ff:08:
                    d1:c3:1e:d4:b0:58:55:e0:df:3e:0c:a5:24:23:75:
                    81:20:7f:0d:9b:c1:6b:a9:42:ff:84:9e:f4:9d:9b:
                    38:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:62:D7:6C:13:6A:24:14:F2:9F:E3:B7:F6:53:F5:E2:D4:6F:AD:E8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/975CC6C29D4A11EEAE37EC34D25BE465.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:4d:13:b9:90:f7:49:ba:30:bb:5e:50:25:b2:5f:d4:9d:db:
         e5:19:a4:81:cd:41:91:1d:95:fb:0d:53:25:7f:0e:f3:a8:25:
         e7:dd:6e:53:a7:fd:1f:27:00:a7:ed:3b:22:a1:7a:21:c6:96:
         15:87:52:16:df:85:24:59:fe:db:c4:83:fd:f8:21:05:d2:99:
         29:4e:c2:23:e3:ae:21:fd:43:ea:00:10:f8:2c:38:e1:d8:5e:
         f0:56:69:66:5d:d2:4b:01:1d:76:f9:b6:f9:43:95:ff:d1:25:
         b1:7a:62:6f:5e:43:78:2d:c3:7c:88:e2:2a:80:7c:b7:11:2c:
         b3:7d:4d:e7:d6:0e:54:53:89:de:e1:1b:08:97:c2:1a:93:6a:
         c1:d2:74:93:08:a2:de:85:72:04:40:49:fc:f4:96:5e:c1:8a:
         58:34:31:fb:02:dd:7d:db:66:97:f8:68:c6:7c:df:e7:de:15:
         3a:3c:b6:c2:4e:cd:76:27:d0:b1:75:3f:d7:43:d4:c9:67:26:
         0e:6f:bd:d9:90:6a:40:51:cc:9e:6d:1c:25:f2:aa:44:34:03:
         ea:f4:ab:47:bb:61:eb:56:b9:35:90:36:c5:4f:f2:28:95:53:
         32:22:0f:c1:96:ec:7d:22:3f:b3:d6:36:f2:17:bb:50:fe:73:
         bb:37:e2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:32 2024 by rpki-client on console-fra.rpki-client.org