Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A44F4ADCFEA111ED828FC76A4AD9E6FC.roa
File:                     A44F4ADCFEA111ED828FC76A4AD9E6FC.roa (raw, json)
Hash identifier:          EDBrs0uOjN4IAgTzxWrWP3aiBjM4aj9H1tUsg77trvs=
Subject key identifier:   93:18:7A:2E:96:84:3B:41:A2:B8:20:66:3A:4F:92:08:CA:61:A0:A7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2864
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A44F4ADCFEA111ED828FC76A4AD9E6FC.roa
Signing time:             Tue 30 May 2023 04:22:52 +0000
ROA not before:           Tue 30 May 2023 04:22:48 +0000
ROA not after:            Wed 15 May 2024 04:22:48 +0000
asID:                     63888
IP address blocks:        154.207.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10340 (0x2864)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 30 04:22:48 2023 GMT
            Not After : May 15 04:22:48 2024 GMT
        Subject: CN=64757a1c-a0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b4:c4:06:64:ce:a7:37:e7:db:e7:42:33:4b:
                    0b:0d:e2:aa:93:29:1e:81:fa:f6:84:95:70:34:86:
                    5a:db:74:86:96:59:98:d0:e4:05:27:5a:2b:95:0d:
                    07:27:60:e3:2c:66:ca:6d:e7:dc:31:41:5c:69:74:
                    d9:28:c6:44:5a:22:c3:8b:49:1f:33:d8:30:d8:ca:
                    e3:9e:f8:1f:dd:2e:7f:2e:85:cb:b4:d0:69:29:60:
                    98:b2:d5:e1:ce:26:82:6e:54:70:e2:ce:30:6b:da:
                    c1:40:96:ac:1d:75:6c:41:f1:1c:e5:77:99:64:ba:
                    b1:98:7d:13:7b:7a:c9:3b:5d:c0:d0:d2:aa:0e:b5:
                    ee:0a:89:bc:22:3a:99:77:70:b8:ef:7e:8e:f1:68:
                    38:23:fb:8a:93:ec:10:f2:9e:2b:52:05:46:f9:34:
                    2c:b9:73:33:9d:c6:16:cd:6d:26:32:bb:c3:9e:b4:
                    62:83:61:0e:37:d4:a7:0b:dc:3f:25:41:68:36:b6:
                    a9:18:a1:62:89:2e:17:80:82:f5:f0:6d:c0:0b:1e:
                    00:b2:99:d7:ff:66:4c:46:a1:da:2e:00:93:27:f4:
                    da:40:87:3d:a1:52:b1:99:1f:5c:55:d6:6b:c7:61:
                    d5:bd:76:cd:c4:d3:61:23:71:a5:c6:e1:37:5c:db:
                    d5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:18:7A:2E:96:84:3B:41:A2:B8:20:66:3A:4F:92:08:CA:61:A0:A7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A44F4ADCFEA111ED828FC76A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:fc:11:0e:c6:21:81:18:34:7c:28:62:37:72:94:e2:9c:16:
         f1:61:15:81:c5:31:55:42:ce:4a:3e:91:eb:e0:6b:c0:92:4d:
         47:20:93:4b:3b:55:65:c9:90:65:ae:46:ed:00:d4:1f:93:3b:
         4d:db:59:63:03:5b:79:09:77:4d:35:25:f3:4e:24:71:5a:46:
         b0:cd:27:23:c5:ce:b9:18:06:5c:bb:1a:c8:79:7f:cd:86:27:
         d9:36:45:d9:7e:8b:61:e6:aa:3b:a1:b3:5c:40:5a:a1:31:60:
         c3:f3:1a:f8:e0:6e:6c:4c:ee:75:a1:2e:25:58:7e:eb:8a:42:
         f3:f6:c6:db:85:4f:de:4c:7e:9a:c0:2d:88:07:92:7d:c1:e4:
         ea:8c:15:ef:a3:4c:3f:4b:b5:29:80:70:ae:c7:69:0a:8e:95:
         e7:f5:53:5d:69:ca:fa:a5:89:6c:be:45:bc:d5:5e:9f:df:3c:
         2f:68:3a:34:aa:e0:31:1c:60:70:a0:87:e6:9d:5a:c6:fd:88:
         32:39:64:0d:3b:21:b1:16:ca:a1:5b:0e:33:08:f3:fd:fd:af:
         4a:fa:4f:b5:94:68:9c:0f:99:16:10:96:1e:7e:ac:b8:56:4a:
         de:be:db:ae:7a:a6:65:1c:3e:bf:bb:1e:f8:11:d6:06:84:69:
         da:2b:3d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:34 2024 by rpki-client on console-fra.rpki-client.org