Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2F739A810DD11EEA308C92C4AD9E6FC.roa
File:                     A2F739A810DD11EEA308C92C4AD9E6FC.roa (raw, json)
Hash identifier:          3YQ/tWDyhnYypFXAEWvHP9tH1OeNLi9nOBms4bogzzA=
Subject key identifier:   DE:47:BF:DB:CB:49:38:28:2B:BB:25:5F:04:8C:5D:9F:44:0C:0D:4C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2D76
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2F739A810DD11EEA308C92C4AD9E6FC.roa
Signing time:             Thu 22 Jun 2023 09:17:40 +0000
ROA not before:           Thu 22 Jun 2023 09:17:37 +0000
ROA not after:            Fri 05 Jul 2024 09:17:37 +0000
asID:                     146993
IP address blocks:        154.203.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11638 (0x2d76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 22 09:17:37 2023 GMT
            Not After : Jul  5 09:17:37 2024 GMT
        Subject: CN=649411b4-0178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3e:ff:50:17:e6:80:41:75:99:0c:d7:c9:c6:
                    09:ad:9c:28:5a:1a:7c:8f:c4:2e:ef:9d:1b:05:0f:
                    a8:22:50:93:4a:f6:08:a5:aa:c0:4f:03:87:5b:5a:
                    aa:9e:da:2b:16:c9:22:4c:6e:5d:f4:d0:6e:31:7e:
                    d6:ba:4a:d3:28:4a:2e:05:c2:ef:8c:9a:d3:a7:d1:
                    48:64:51:32:9e:79:54:a0:99:50:e8:4f:48:05:43:
                    c5:0e:22:ec:2a:2b:54:ef:44:10:2d:5d:72:f8:15:
                    c2:7b:98:23:dc:f7:df:d5:e6:85:f4:ad:d4:f3:ed:
                    94:cc:22:cc:4f:9b:02:b8:55:94:f7:de:5e:b2:18:
                    3a:01:0c:7b:85:2a:75:dd:e7:87:3e:eb:e7:9c:05:
                    6c:be:e2:81:b3:d4:25:38:db:b7:a3:3e:70:27:0b:
                    35:a1:d6:a5:a0:9b:ac:ef:5e:25:f1:ea:f7:c9:d7:
                    43:c7:d5:b9:b6:12:35:d8:5f:19:cd:c2:f4:84:5d:
                    5b:50:06:53:6d:87:d2:c7:46:95:f5:86:52:9e:2e:
                    7b:3a:40:32:90:9a:45:1f:7e:91:e7:e1:d6:d2:34:
                    56:56:06:d2:d9:73:c2:a3:44:6d:a9:bb:e2:df:c1:
                    7c:81:a4:e5:94:68:49:f7:5f:81:3d:f4:32:6a:13:
                    79:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:47:BF:DB:CB:49:38:28:2B:BB:25:5F:04:8C:5D:9F:44:0C:0D:4C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2F739A810DD11EEA308C92C4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:04:15:5a:f9:cc:57:a0:b7:f7:58:7e:41:ab:d5:2a:0f:0a:
         7c:8b:89:ec:cd:e8:1a:92:f1:c1:bc:29:19:3d:c1:1a:d6:16:
         4a:59:5f:b1:39:3f:2f:99:db:ef:ea:a3:e0:06:0e:b3:02:18:
         96:1a:4f:53:0c:eb:7d:0e:1e:85:9e:ba:53:c3:49:a8:fb:9c:
         68:1c:66:0a:1e:77:7a:4b:f5:15:96:bb:25:1e:64:20:dc:69:
         1e:c3:e3:e9:48:82:71:06:a1:60:5c:d0:7e:6e:b4:8a:23:a5:
         57:0a:12:ed:40:49:bb:7d:31:97:2c:70:9c:79:08:36:c5:74:
         8c:0f:c2:3a:6e:96:bf:f0:42:1e:2a:2c:36:31:00:c6:3e:29:
         d8:62:81:68:f4:d4:62:1d:ac:9a:5f:25:5a:12:35:98:b4:d6:
         40:fd:c6:25:e0:f6:43:8d:70:83:c1:c7:b0:1a:db:49:2b:fc:
         c9:f1:95:a1:38:ca:0f:68:cd:5b:e8:3f:96:21:d3:50:14:fa:
         95:06:9d:a8:66:4d:6e:6d:b7:8a:be:0a:0f:d0:86:d2:c2:07:
         2f:bd:4c:66:36:79:ab:db:e1:44:28:b2:51:eb:67:85:49:b4:
         0a:fe:59:57:d1:cc:df:40:31:e3:7c:1a:42:5c:50:eb:fe:ef:
         c1:92:ec:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:17 2024 by rpki-client on console-ams.rpki-client.org