Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6BF03CE473611EEB3DA88504AD9E6FC.roa
File:                     A6BF03CE473611EEB3DA88504AD9E6FC.roa (raw, json)
Hash identifier:          aiBYexh9fuKBFQeWyfnHaAq6qquBpjrvHVfxUtDWsBI=
Subject key identifier:   00:22:C9:B9:DB:5D:75:65:0F:D5:44:40:B4:53:C8:71:43:01:4E:9E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       3ACD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6BF03CE473611EEB3DA88504AD9E6FC.roa
Signing time:             Wed 30 Aug 2023 13:10:55 +0000
ROA not before:           Wed 30 Aug 2023 13:10:51 +0000
ROA not after:            Thu 08 Aug 2024 13:10:51 +0000
asID:                     133199
IP address blocks:        154.204.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15053 (0x3acd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 30 13:10:51 2023 GMT
            Not After : Aug  8 13:10:51 2024 GMT
        Subject: CN=64ef3fdf-a5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:19:25:1b:1b:df:7a:39:e7:2a:7c:bb:79:8c:
                    88:06:8f:bc:01:f6:cc:b1:df:02:17:82:5e:6d:dd:
                    d6:05:04:61:81:fb:60:5a:e9:a9:16:63:ae:ef:aa:
                    08:97:b7:3d:f3:2f:b6:96:a5:0e:c7:e8:d2:b2:b5:
                    ce:4d:05:ee:10:0a:2b:98:04:b6:50:f8:8e:8c:5b:
                    19:5e:20:d5:7f:9c:99:a9:8a:1e:75:b3:43:1e:ed:
                    6f:54:f2:7c:97:d2:6f:1a:8d:16:92:90:6f:e4:84:
                    1d:bd:01:84:1d:12:29:31:57:e7:8b:6d:9e:85:83:
                    5d:2b:c1:89:e4:ce:5f:bf:65:65:a6:27:50:76:ee:
                    28:76:96:c7:76:34:0b:5e:97:35:a7:53:4f:15:fc:
                    94:62:ad:df:25:80:b5:b3:65:60:64:fd:a8:45:d3:
                    10:8e:f4:c4:4b:a8:dd:48:65:ca:46:f1:b7:16:af:
                    df:ea:07:fb:34:c5:dd:20:f5:60:f0:b2:28:b6:a9:
                    5b:f6:e9:3d:93:0c:1d:83:b7:50:07:64:6c:f4:36:
                    de:f0:2b:db:d0:ac:56:a2:dd:63:ca:a5:a2:2f:8d:
                    4d:4f:6f:11:0d:f8:f6:26:c8:4d:9b:1a:93:d5:17:
                    cb:f4:10:ed:15:08:9f:4a:1a:51:5f:96:02:97:04:
                    a5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:22:C9:B9:DB:5D:75:65:0F:D5:44:40:B4:53:C8:71:43:01:4E:9E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6BF03CE473611EEB3DA88504AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:d6:8d:eb:e9:fa:14:49:75:ae:72:2d:d9:04:47:48:ad:03:
         f0:1d:7e:69:f9:77:5f:c8:b1:0b:dd:1c:a8:2c:23:4b:e9:a4:
         ed:d3:c5:59:11:8b:57:1a:fe:25:6e:98:bf:cc:e5:23:96:1b:
         bb:1b:60:66:a2:dd:ab:3b:32:f3:24:05:49:74:60:d6:14:92:
         a9:c3:91:45:f0:87:e7:02:cd:82:c8:4d:6a:04:59:49:6a:77:
         92:01:b3:bb:90:01:27:06:0e:2f:fb:4f:45:a8:77:f7:2b:6d:
         0f:53:1a:58:69:1a:14:61:95:fd:b5:c8:f9:f5:73:3e:8e:2f:
         ae:97:40:d9:dd:23:64:34:83:c8:32:13:36:d4:43:f6:62:ca:
         7e:c9:f9:5d:f5:cc:00:c0:0d:21:6c:2d:53:40:cc:82:95:50:
         9d:a0:be:22:23:16:b8:32:79:ec:b3:ec:4c:3b:b7:0a:f8:42:
         d5:a9:70:e8:05:61:e6:5f:25:22:24:eb:1f:7e:67:57:41:96:
         0d:79:bc:a3:36:c7:85:dc:14:c3:75:6e:0a:90:7b:34:8d:42:
         28:a8:12:37:d9:20:5d:2e:80:e6:3e:76:c4:f8:f9:f5:bb:65:
         25:3b:35:ed:07:68:16:66:10:9e:ae:9e:61:17:72:ae:4d:04:
         d8:39:e7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:34 2024 by rpki-client on console-fra.rpki-client.org