Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A413A89A062C11EFB9E1413A017001B1.roa
File:                     A413A89A062C11EFB9E1413A017001B1.roa (raw, json)
Hash identifier:          0c0JbAOwqhtF9wUeBR1nbA/DyBWRv+UAJHBYbHXr/IM=
Subject key identifier:   E3:61:5B:4B:E0:D4:B9:60:72:3F:A5:B7:77:3B:BD:B0:F9:91:31:19
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       B276
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A413A89A062C11EFB9E1413A017001B1.roa
Signing time:             Mon 29 Apr 2024 13:30:27 +0000
ROA not before:           Mon 29 Apr 2024 13:30:24 +0000
ROA not after:            Fri 07 Jun 2024 13:30:24 +0000
asID:                     138915
IP address blocks:        154.223.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 May 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45686 (0xb276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 29 13:30:24 2024 GMT
            Not After : Jun  7 13:30:24 2024 GMT
        Subject: CN=662fa0f3-22f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f1:a6:60:9b:e4:fc:1a:89:0d:aa:66:36:f0:
                    0a:cc:a8:64:fb:cb:c5:1c:c9:c5:bb:80:d7:a5:d7:
                    4f:6a:e0:59:8d:00:17:7d:7a:e2:c5:fc:c6:96:df:
                    87:bd:1e:fc:69:97:a4:a3:67:1a:80:06:58:42:0f:
                    3f:4f:f7:f7:31:ad:2f:19:27:51:ff:2a:d1:23:1f:
                    57:5d:68:51:37:1f:14:66:84:24:cf:84:7c:6c:3b:
                    e3:ec:38:13:52:34:a5:a7:92:0f:8a:23:87:1b:33:
                    d6:60:2a:24:28:1c:63:56:26:0c:64:71:fd:58:be:
                    60:1f:5e:18:2f:77:b6:a0:cb:cd:85:d6:fd:1b:b8:
                    38:a6:57:1c:a4:e7:4e:50:0e:8c:a1:79:1d:75:d2:
                    88:78:cf:03:ae:c0:08:93:1e:8f:52:b8:5a:11:a8:
                    28:16:12:46:ae:5c:fd:6e:70:d2:25:aa:a6:64:9b:
                    cc:c3:8b:fc:f3:de:ff:06:53:f8:0e:1c:7d:f9:a6:
                    0e:4f:9b:bd:f7:57:6c:7f:e1:06:46:3c:5b:13:20:
                    a3:2c:f7:cf:99:ea:e8:3f:7a:45:ca:a4:ae:83:81:
                    4c:28:96:eb:ec:9c:6f:b4:bb:80:f2:73:3d:90:78:
                    ed:c9:83:87:06:58:46:94:f2:01:cf:af:40:64:22:
                    17:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:61:5B:4B:E0:D4:B9:60:72:3F:A5:B7:77:3B:BD:B0:F9:91:31:19
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A413A89A062C11EFB9E1413A017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:e9:25:a4:b6:cc:25:b3:17:53:65:ef:1e:93:27:50:cb:f2:
         df:ae:bd:30:25:0a:8a:db:b6:fd:20:c6:8a:67:8f:87:4b:22:
         f4:b3:18:da:49:f2:8b:e2:0b:44:5d:0e:d1:e3:42:f2:6e:8a:
         67:58:c6:68:e2:0f:13:10:a6:ee:e8:c7:90:8f:a5:4f:4c:93:
         9b:3d:83:9e:63:f0:39:7a:7e:34:cf:2e:79:d4:65:33:99:d2:
         56:b8:e8:c8:e4:07:bc:c1:0e:a7:02:0e:85:d1:c8:10:10:86:
         85:cc:e7:03:82:58:2f:62:2b:2c:5e:81:a3:66:19:32:06:57:
         e9:df:83:1b:d5:7a:53:d9:56:55:2a:4a:55:9b:d4:45:6d:ad:
         c9:9d:f6:76:8e:87:c9:d9:8e:7f:d1:52:1b:0d:59:c2:0f:1c:
         06:a3:27:b4:ab:d8:86:59:4a:32:26:a8:3e:72:ca:d1:72:84:
         0f:4d:6c:94:e7:aa:41:96:22:3d:d8:25:34:e9:bd:14:8b:d9:
         8d:3b:c7:5e:0c:06:5c:76:0e:dc:04:a7:2d:1f:f7:2f:96:88:
         cc:3e:90:b4:03:45:25:6f:7b:27:98:81:ba:bb:34:5d:70:af:
         d8:68:65:2b:0a:5a:20:a9:ff:50:27:5e:75:05:e8:de:5d:cf:
         a4:f8:a7:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALJ2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDI5MTMzMDI0WhcNMjQwNjA3MTMzMDI0WjAYMRYw
FAYDVQQDEw02NjJmYTBmMy0yMmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0PGmYJvk/BqJDapmNvAKzKhk+8vFHMnFu4DXpddPauBZjQAXfXrixfzG
lt+HvR78aZeko2cagAZYQg8/T/f3Ma0vGSdR/yrRIx9XXWhRNx8UZoQkz4R8bDvj
7DgTUjSlp5IPiiOHGzPWYCokKBxjViYMZHH9WL5gH14YL3e2oMvNhdb9G7g4plcc
pOdOUA6MoXkdddKIeM8DrsAIkx6PUrhaEagoFhJGrlz9bnDSJaqmZJvMw4v8897/
BlP4Dhx9+aYOT5u991dsf+EGRjxbEyCjLPfPmeroP3pFyqSug4FMKJbr7JxvtLuA
8nM9kHjtyYOHBlhGlPIBz69AZCIX8wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFONh
W0vg1Llgcj+lt3c7vbD5kTEZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNDEzQTg5QTA2MkMxMUVGQjlFMTQxM0EwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8uMA0GCSqGSIb3DQEB
CwUAA4IBAQBb6SWktswlsxdTZe8ekydQy/Lfrr0wJQqK27b9IMaKZ4+HSyL0sxja
SfKL4gtEXQ7R40LybopnWMZo4g8TEKbu6MeQj6VPTJObPYOeY/A5en40zy551GUz
mdJWuOjI5Ae8wQ6nAg6F0cgQEIaFzOcDglgvYissXoGjZhkyBlfp34Mb1XpT2VZV
KkpVm9RFba3JnfZ2jofJ2Y5/0VIbDVnCDxwGoye0q9iGWUoyJqg+csrRcoQPTWyU
56pBliI92CU06b0Ui9mNO8deDAZcdg7cBKctH/cvlojMPpC0A0Ulb3snmIG6uzRd
cK/YaGUrClogqf9QJ151BejeXc+k+KfH
-----END CERTIFICATE-----
Generated at Sat May 18 03:49:04 2024 by rpki-client on console-fra.rpki-client.org