Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A4BB360128011EF857A7D34017001B1.roa
File:                     9A4BB360128011EF857A7D34017001B1.roa (raw, json)
Hash identifier:          2/eWFiC2q0UFfcwFgK8mqRp4EJYj6M8vZX9uTEDwFcE=
Subject key identifier:   F5:B4:BA:E1:01:D5:C5:75:1D:CB:EC:96:E1:24:B5:39:71:95:1F:9B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       B779
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A4BB360128011EF857A7D34017001B1.roa
Signing time:             Wed 15 May 2024 06:01:43 +0000
ROA not before:           Wed 15 May 2024 06:01:39 +0000
ROA not after:            Sun 09 Jun 2024 06:01:39 +0000
asID:                     141883
IP address blocks:        154.216.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 09 Jun 2024 06:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46969 (0xb779)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 15 06:01:39 2024 GMT
            Not After : Jun  9 06:01:39 2024 GMT
        Subject: CN=66444fc6-a9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:83:20:79:4e:0a:78:f9:73:f1:33:16:3d:7e:
                    a7:f1:e2:8d:1f:98:95:e2:54:ab:78:06:55:0f:ad:
                    84:d5:d0:7b:c3:8a:de:4e:8a:f6:ac:68:99:88:0d:
                    a9:1e:09:b5:41:60:00:21:64:81:9a:71:d0:64:c1:
                    c9:34:2e:64:79:5d:7a:aa:f2:21:34:19:28:44:f4:
                    0f:cf:1c:c2:6e:96:f8:c8:2f:53:37:5a:72:ce:dd:
                    9d:2e:fc:6e:95:d8:87:ee:cc:6b:a8:90:71:69:97:
                    b6:26:33:af:60:30:9a:cd:11:ed:72:29:20:b0:47:
                    b8:70:b0:4b:57:ca:39:8d:29:97:5d:d6:6a:a5:2b:
                    c8:66:cb:37:01:e2:15:d4:ab:df:22:be:f5:27:66:
                    82:9b:ec:d2:f0:b5:5a:e7:84:c2:bf:4c:e2:70:5a:
                    f7:b1:de:7a:17:50:94:18:cd:d0:52:09:b7:c0:59:
                    04:25:6e:4d:68:bf:e2:07:cf:1a:d0:8e:23:a2:df:
                    d4:c6:29:98:ad:56:2c:3a:db:f5:f6:ed:c7:af:93:
                    42:48:34:82:97:61:ea:b5:c4:a4:16:38:c1:ad:5b:
                    5c:89:c5:f2:e2:3e:81:24:8f:d3:07:8b:bb:61:7f:
                    48:c6:11:f4:4c:6f:75:76:b5:79:5e:7c:d6:be:bc:
                    6b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B4:BA:E1:01:D5:C5:75:1D:CB:EC:96:E1:24:B5:39:71:95:1F:9B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A4BB360128011EF857A7D34017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.216.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7d:57:06:03:5a:65:ce:2a:81:8d:db:c0:9c:cd:9a:16:5b:8e:
         64:28:97:c6:a2:18:7d:cd:ff:bc:a0:f1:11:b2:d8:98:d6:84:
         79:61:74:ac:7f:19:0a:0e:b9:21:80:33:fc:d9:3e:17:26:a3:
         d7:40:93:30:39:4f:ee:f5:7e:43:22:93:9b:37:9c:63:31:0d:
         90:20:13:f8:c7:35:6b:82:b2:62:52:dc:f6:01:bd:2c:bc:29:
         65:18:46:73:cb:af:32:38:c4:c7:5b:86:65:ca:97:78:9f:cb:
         49:9b:e9:e3:72:69:ed:b9:3c:95:30:91:28:c9:b0:7d:b9:cd:
         01:9d:a9:97:81:af:14:fe:89:9a:51:41:e1:12:2c:e1:27:81:
         ba:92:60:23:ab:b0:7c:58:b9:cd:f9:54:1a:a7:69:53:f1:39:
         91:da:0c:c5:f3:77:a3:eb:f3:f7:8c:b9:a3:42:41:86:27:ba:
         84:eb:4c:96:fe:7a:ef:58:eb:6f:09:af:25:f9:38:fc:2f:35:
         47:3e:b6:0f:79:bd:62:e8:26:01:ea:24:65:c7:52:05:67:00:
         23:6b:7e:d7:71:db:33:78:d1:f2:34:fb:da:43:d2:2a:f4:4f:
         4e:3a:b2:77:89:12:3f:4a:45:99:9c:4e:19:3f:db:fe:89:80:
         5e:d7:00:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:13:27 2024 by rpki-client on console-fra.rpki-client.org