Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EE0A5DCFDCA11EDBB62625D4AD9E6FC.roa
File:                     9EE0A5DCFDCA11EDBB62625D4AD9E6FC.roa (raw, json)
Hash identifier:          9B2u9DBwWyRC9aX3f0lMihJygP4oOcDJ9tY0R0nTxuA=
Subject key identifier:   C2:3E:4B:53:8A:A2:44:65:84:9C:16:06:85:BE:EA:A0:C6:F7:5A:C3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       282C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EE0A5DCFDCA11EDBB62625D4AD9E6FC.roa
Signing time:             Mon 29 May 2023 02:43:41 +0000
ROA not before:           Mon 29 May 2023 02:43:37 +0000
ROA not after:            Wed 15 May 2024 02:43:37 +0000
asID:                     63888
IP address blocks:        154.207.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10284 (0x282c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 29 02:43:37 2023 GMT
            Not After : May 15 02:43:37 2024 GMT
        Subject: CN=6474115d-e88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:15:05:7d:31:59:9d:92:60:29:bb:d7:5f:b3:
                    62:a2:eb:da:6c:a7:e8:d2:69:ac:93:2d:9f:2d:5e:
                    1c:69:4a:0a:42:7b:84:f2:7d:24:43:4e:b2:f0:50:
                    6a:7c:b5:74:a9:d8:9c:c5:94:24:80:e3:c5:4e:0d:
                    87:df:8c:04:f1:16:b4:01:8c:a0:0b:4a:70:d4:af:
                    1c:66:87:b2:09:52:71:7b:5d:6a:70:d9:d4:50:36:
                    2b:39:d2:e5:1e:cc:29:d8:32:7c:57:b3:79:08:6a:
                    3a:a1:fc:1c:64:a9:e4:52:09:b9:2f:ae:ff:08:ea:
                    86:18:a1:97:b3:24:76:ca:99:79:8f:c9:26:6f:d9:
                    9f:11:9c:97:a3:cb:e0:db:68:33:f3:f8:de:7e:1e:
                    33:a6:d8:d6:03:af:6f:d2:53:e7:53:04:74:38:91:
                    82:8a:a6:6b:04:21:ef:6b:84:00:cb:02:e8:50:af:
                    3b:95:eb:4f:a5:1f:38:0f:b0:84:ed:23:23:88:0c:
                    68:95:ad:ad:c7:3d:9f:81:fe:32:81:af:1e:db:e5:
                    2f:c5:8f:17:f7:a2:97:70:03:57:00:74:2b:64:df:
                    3f:c7:a1:34:cf:72:de:65:b5:8f:59:61:57:a7:dd:
                    17:bb:b4:84:00:cc:2b:99:48:65:2f:42:9a:22:32:
                    de:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3E:4B:53:8A:A2:44:65:84:9C:16:06:85:BE:EA:A0:C6:F7:5A:C3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EE0A5DCFDCA11EDBB62625D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:cf:02:8d:f2:dc:93:34:de:84:65:01:32:3e:ca:6a:5b:9d:
         dc:45:2a:92:f5:b8:14:03:a2:2f:cf:8a:ba:13:23:19:00:d2:
         16:ff:a7:30:e9:65:d9:42:86:d1:29:70:b9:c0:2b:60:ac:0e:
         64:d5:3f:90:cf:f7:46:b4:e6:f8:8a:21:5e:6c:d9:fc:9c:b9:
         5b:81:89:68:a8:fe:0f:51:fa:46:f4:16:b0:a4:0f:12:25:b4:
         35:f4:e2:40:18:e1:66:ea:3b:5b:c0:63:51:8a:2a:8d:6d:fc:
         ab:b3:d5:7f:b4:74:26:d4:2d:f8:69:c0:67:33:52:7f:3d:d6:
         b1:91:ea:c9:94:df:2b:b9:89:27:55:d0:1f:79:de:ca:73:4c:
         f9:5d:19:bc:a4:5d:16:5b:49:12:5b:1a:d0:ed:b2:0d:00:1b:
         32:ca:7f:f4:25:bd:0b:36:0a:00:de:f2:1d:8d:ac:3d:b2:3d:
         22:d1:b5:ad:95:2e:85:0a:1e:80:5f:b9:94:63:21:fd:21:09:
         65:18:dc:1a:29:d3:9d:a4:00:8a:0f:d3:58:33:83:32:ee:ee:
         27:aa:56:dc:cd:14:4b:a5:2b:1d:8f:30:4e:1c:33:86:58:6d:
         38:13:3d:02:ed:e9:a3:56:fc:1d:1d:1e:69:ae:a7:66:f4:e8:
         5a:49:7c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:29:59 2024 by rpki-client on console-fra.rpki-client.org