Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F55DEB610D911EEBA4B97204AD9E6FC.roa
File:                     9F55DEB610D911EEBA4B97204AD9E6FC.roa (raw, json)
Hash identifier:          jfEpF/OTm8gErGWz5cq6zkE9/QTb5opOm3UWsBFy5zg=
Subject key identifier:   6F:54:57:EC:40:CB:78:EF:F5:70:B7:5D:C4:0F:C8:E0:24:A7:FB:F8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2D36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F55DEB610D911EEBA4B97204AD9E6FC.roa
Signing time:             Thu 22 Jun 2023 08:48:56 +0000
ROA not before:           Thu 22 Jun 2023 08:48:53 +0000
ROA not after:            Mon 27 May 2024 08:48:53 +0000
asID:                     209242
IP address blocks:        154.92.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11574 (0x2d36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 22 08:48:53 2023 GMT
            Not After : May 27 08:48:53 2024 GMT
        Subject: CN=64940af8-c3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:69:2c:9e:4c:73:0e:c6:29:1c:fc:22:e0:
                    61:b6:3a:12:e2:1c:99:53:22:28:6c:e2:49:47:8e:
                    ba:31:3d:77:a4:92:55:5f:fe:45:94:39:02:b7:d2:
                    99:aa:1f:63:97:c2:9e:f2:44:dc:6f:b6:14:0c:ee:
                    25:38:e2:09:3f:53:3b:ed:f0:92:c5:d1:21:51:32:
                    91:01:f4:31:85:cb:90:10:e9:8a:52:9c:b0:7b:a0:
                    44:43:50:83:33:32:b9:db:5f:08:f5:b8:04:87:b4:
                    7d:3b:74:0d:7e:c1:69:ef:9b:6c:cd:2f:c9:14:c3:
                    28:40:6a:03:03:90:82:3f:9a:84:da:6b:15:27:8e:
                    93:17:0b:88:53:29:9b:5e:e8:51:0f:b8:7d:5b:bd:
                    cf:f9:ee:0c:7e:9e:d4:06:05:dd:5b:31:c7:88:09:
                    95:00:58:c1:83:e2:d9:6c:2e:31:cd:42:35:57:3d:
                    81:86:a0:d9:c2:1e:3f:be:72:d2:96:ad:67:48:17:
                    c3:74:c0:6f:a3:3d:e3:9d:c2:26:72:50:a6:1c:57:
                    94:4b:43:09:6d:e8:94:0b:99:21:2a:a7:89:b7:1f:
                    80:cc:a4:4a:b6:5c:3a:12:07:a7:55:27:7a:8b:05:
                    93:90:5f:4e:3d:05:ec:1e:06:ed:c7:ce:01:f0:d4:
                    8a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:54:57:EC:40:CB:78:EF:F5:70:B7:5D:C4:0F:C8:E0:24:A7:FB:F8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F55DEB610D911EEBA4B97204AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:f2:c4:90:99:44:51:c4:f8:2d:99:29:50:95:52:f0:56:eb:
         a3:38:a3:23:e8:bb:4f:c4:fc:c9:4a:15:fd:6c:bc:61:f8:9b:
         13:70:85:10:c1:93:a8:7f:50:5e:73:c6:22:b4:5b:2d:f3:d6:
         ae:00:84:e4:bd:99:dd:7b:78:77:b2:4b:63:85:bd:67:83:a3:
         79:60:1e:50:0d:97:ff:7b:36:79:92:68:19:12:06:90:5c:94:
         4a:29:b8:e9:62:d8:78:f6:4c:4d:30:d3:30:02:98:8c:72:9f:
         e7:ee:c6:ea:ab:72:d2:4d:58:73:57:bf:ef:71:7d:5d:c7:ab:
         62:b6:78:21:13:81:4a:65:51:bd:31:be:0d:c6:b9:6b:6a:0e:
         8a:26:24:23:04:53:44:42:e6:3c:b3:0c:21:f7:f3:27:a0:36:
         d6:d7:77:24:67:c7:fd:a6:c5:70:07:39:ea:fb:fd:3e:b1:1e:
         a1:18:74:80:e4:d1:de:e9:f0:04:39:24:8f:53:ac:1f:1d:3a:
         cf:d5:7b:e0:15:db:c5:21:75:be:58:9f:90:82:e3:1e:bf:c3:
         4a:5f:92:f1:0a:cc:99:f5:57:18:7d:fe:cf:46:a5:06:7d:75:
         a5:f7:4d:67:58:51:23:bf:73:dd:a1:a2:a2:64:85:21:c7:3f:
         af:f8:b8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:33 2024 by rpki-client on console-fra.rpki-client.org