Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A47C31A8473711EEB78381544AD9E6FC.roa
File:                     A47C31A8473711EEB78381544AD9E6FC.roa (raw, json)
Hash identifier:          GUhg8Do0gG/BOg/NOkaNkDN49lYeesRgqgKXQxdwlgg=
Subject key identifier:   80:64:10:03:FA:F4:D9:40:41:3A:90:FD:B5:F2:05:4D:82:7A:23:14
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       3AD9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A47C31A8473711EEB78381544AD9E6FC.roa
Signing time:             Wed 30 Aug 2023 13:18:00 +0000
ROA not before:           Wed 30 Aug 2023 13:17:57 +0000
ROA not after:            Thu 08 Aug 2024 13:17:57 +0000
asID:                     133199
IP address blocks:        154.204.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15065 (0x3ad9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 30 13:17:57 2023 GMT
            Not After : Aug  8 13:17:57 2024 GMT
        Subject: CN=64ef4188-8f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:97:df:d6:96:bf:d5:d7:c9:fb:2d:c2:a1:83:
                    4e:02:a1:bc:da:77:54:ca:74:6d:63:7b:8a:a8:62:
                    09:11:41:64:e7:d3:f6:99:d2:d6:df:6a:eb:d3:ea:
                    61:a1:52:89:7e:b1:f5:45:a7:ba:d9:ae:85:2b:cf:
                    bd:16:a6:4a:57:6b:e5:2c:93:5d:64:20:de:0a:e5:
                    e5:ac:56:28:e7:0b:26:db:94:c5:5b:2c:fd:a1:e2:
                    01:5b:36:da:99:21:66:19:99:48:87:7f:ed:eb:dc:
                    28:90:58:76:c2:70:8f:5d:0f:10:be:6a:81:27:07:
                    0a:af:8e:0c:7a:d1:c1:04:12:79:68:c2:e0:8a:d5:
                    0e:79:b3:b9:c8:d3:49:f9:ba:02:03:88:f0:5e:b5:
                    f6:a1:88:09:a1:d8:31:a6:0b:e0:11:f0:4e:8b:77:
                    bf:fa:49:0f:b3:ef:9c:59:a7:07:0f:47:90:de:b6:
                    9d:8b:24:8d:f3:49:01:db:86:de:b9:b0:6b:d3:b8:
                    a4:80:b0:46:4a:ba:fd:c3:a0:bf:ba:3e:fc:39:ac:
                    a6:92:c0:ca:80:dc:84:7e:33:09:70:96:93:2b:cf:
                    13:58:ca:cf:b2:b0:55:50:43:e1:a0:48:5f:1d:a3:
                    0a:d8:ff:c4:45:c9:18:2c:5c:c7:02:8f:18:fe:2e:
                    f7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:64:10:03:FA:F4:D9:40:41:3A:90:FD:B5:F2:05:4D:82:7A:23:14
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A47C31A8473711EEB78381544AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:e3:4c:e9:5e:f2:d5:63:01:e9:f2:e2:63:e0:cc:d0:41:b4:
         80:49:24:b9:4c:21:a0:e9:c0:c3:0f:e8:e8:5b:21:29:41:f9:
         39:11:6e:a4:c1:1e:a0:7f:13:a2:07:f1:92:63:9a:91:4b:3e:
         06:65:db:22:f9:29:af:60:d4:01:80:d8:fa:ee:46:36:91:92:
         26:d9:fb:3f:40:18:f8:31:a4:93:8d:6d:11:c6:67:ce:90:c6:
         46:8b:2e:e5:5f:88:ad:7e:54:7b:21:d8:45:e9:9a:52:32:70:
         ef:42:88:42:72:f1:60:b6:ca:ee:83:90:18:59:49:86:1a:92:
         a0:8e:10:fa:70:e3:60:05:b4:ce:55:82:16:ce:e9:38:27:da:
         68:ed:f2:56:e6:2c:9c:26:f3:9c:a3:d1:1a:f8:22:d1:c9:6f:
         db:0e:26:f7:fc:ec:80:cb:10:19:89:37:0c:bc:9d:6a:73:e2:
         57:40:33:ed:0d:9b:9d:a5:d4:41:f8:34:cd:17:84:0e:f5:3e:
         c7:4a:dc:b8:54:97:ff:6e:9d:cd:12:2d:cb:e3:43:8e:b5:ab:
         63:c3:da:e4:a4:ff:88:84:ef:91:74:82:21:f5:03:7b:5b:a8:
         d0:8f:80:3a:cf:33:7c:60:fc:d3:5e:9c:f2:00:5f:5f:3e:b1:
         a6:d3:b9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:17 2024 by rpki-client on console-ams.rpki-client.org