Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A01C5F9C7C5311EEBC908E2D4AD9E6FC.roa
File:                     A01C5F9C7C5311EEBC908E2D4AD9E6FC.roa (raw, json)
Hash identifier:          sA+kjGhWbDVcGqOVcmakcI5NGzfhFEEUvDBjpIaB10Y=
Subject key identifier:   E7:84:A9:F8:CA:13:D8:CE:99:86:A8:A0:4F:3E:2A:97:2D:67:C8:97
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       4BBD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A01C5F9C7C5311EEBC908E2D4AD9E6FC.roa
Signing time:             Mon 06 Nov 2023 03:21:51 +0000
ROA not before:           Mon 06 Nov 2023 03:21:47 +0000
ROA not after:            Tue 05 Nov 2024 03:21:47 +0000
asID:                     133448
IP address blocks:        154.223.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19389 (0x4bbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  6 03:21:47 2023 GMT
            Not After : Nov  5 03:21:47 2024 GMT
        Subject: CN=65485bce-772e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:dc:9b:92:20:4f:f6:dd:7c:28:f0:4d:c0:a2:
                    6f:49:bf:0c:7c:89:64:a6:c7:b7:d5:8d:55:03:85:
                    54:e9:53:09:9f:4a:b3:50:6a:2f:da:f5:e5:68:b8:
                    4f:09:85:ac:2e:d9:21:36:2d:66:a6:0a:aa:b8:e8:
                    b4:09:4a:59:19:6a:13:3c:20:a1:b8:d9:3b:2a:0b:
                    12:f1:15:c6:44:bd:41:71:f1:52:de:9b:e9:bf:d6:
                    dd:c7:81:04:9f:74:c0:0c:49:dd:54:6d:26:12:1c:
                    f5:b7:73:1f:e1:a2:a5:b1:b9:3c:ee:e0:87:96:4d:
                    74:af:2e:53:d0:62:fa:3b:17:bc:99:bc:17:b1:76:
                    7d:d9:7c:72:72:fc:d0:40:e3:03:a2:15:ae:27:2f:
                    f6:ff:bd:5a:71:09:57:0d:ef:8b:83:1f:3f:0a:17:
                    c9:0a:e0:a4:2f:cd:33:70:aa:09:36:2d:6d:d7:d8:
                    78:b0:0b:5a:27:c4:32:00:88:69:11:ed:eb:8c:7e:
                    62:ef:45:39:dd:1b:aa:4c:9a:13:3e:3b:92:d8:74:
                    b1:1c:92:db:2c:04:7a:ce:f4:3a:1f:52:d1:8d:63:
                    ff:bd:52:5e:5e:24:0c:53:c1:93:bd:ee:f5:24:98:
                    78:36:5c:89:63:e3:92:75:3f:d1:40:3a:12:e7:1f:
                    9b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:84:A9:F8:CA:13:D8:CE:99:86:A8:A0:4F:3E:2A:97:2D:67:C8:97
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A01C5F9C7C5311EEBC908E2D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:21:bb:c5:22:a5:22:dc:91:68:aa:48:c2:48:66:ba:c8:2d:
         d7:52:29:65:3c:25:98:0b:d4:10:7f:21:fa:85:b2:a9:f5:06:
         9d:2b:7f:c2:9d:3e:dd:13:7b:8f:65:f3:77:dd:79:c3:f1:e7:
         56:3e:2d:79:a5:6e:17:e7:5a:e7:30:93:3c:0b:9c:09:8a:ea:
         1b:49:9a:37:4f:0d:2c:3a:43:d6:a7:64:b0:4c:81:24:82:cc:
         a3:b1:03:f5:33:26:31:de:5e:33:b6:87:2a:49:1e:4c:2d:16:
         63:31:51:2c:f2:b6:03:14:d8:a5:df:80:07:3a:0a:a5:73:22:
         c3:59:9a:b1:ef:99:b1:d2:bf:26:c8:dd:e8:8b:33:d6:db:db:
         6d:b9:79:f9:57:23:ab:04:5f:96:70:f7:a5:93:ee:22:93:7b:
         1f:e3:41:0d:b6:a1:7e:64:35:e3:ed:cd:52:f6:26:9c:d8:cf:
         4b:2c:c3:b2:05:c5:13:6e:71:d6:1f:d9:9c:9b:e7:c8:a3:b6:
         f4:2d:35:77:4a:a1:ce:05:92:85:d1:e1:1b:c1:f1:1e:2b:0a:
         3e:c1:2e:fe:98:95:6f:1d:09:04:5b:54:27:05:8a:96:97:d4:
         ec:d2:1f:46:f8:cd:b6:74:8b:7e:aa:a2:b8:40:bc:71:34:42:
         90:86:ee:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:29:59 2024 by rpki-client on console-fra.rpki-client.org