Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A76F6260539C11EE8D3005554AD9E6FC.roa
File:                     A76F6260539C11EE8D3005554AD9E6FC.roa (raw, json)
Hash identifier:          xDbaOfQnVjt0Uo9mBhDtcxalFfa+qgdOZjhCGUQeOy4=
Subject key identifier:   1B:30:17:0C:9F:F7:1F:A2:9E:B5:FB:08:F5:89:57:D6:F0:09:0B:F4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       3D6F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A76F6260539C11EE8D3005554AD9E6FC.roa
Signing time:             Fri 15 Sep 2023 07:51:18 +0000
ROA not before:           Fri 15 Sep 2023 07:51:15 +0000
ROA not after:            Sat 08 Jun 2024 07:51:15 +0000
asID:                     142403
IP address blocks:        154.92.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15727 (0x3d6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 07:51:15 2023 GMT
            Not After : Jun  8 07:51:15 2024 GMT
        Subject: CN=65040cf6-2513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ce:bf:91:59:39:ef:6d:19:b0:4e:f0:a8:57:
                    a6:f2:28:3d:31:a5:93:67:1b:b0:0d:7c:8c:93:5c:
                    c4:0b:bb:49:cd:3f:fe:b7:a3:87:dc:59:f5:16:7d:
                    b8:3a:2d:15:34:47:a1:36:ed:16:5c:e7:a1:f3:e9:
                    9d:f9:0d:c5:f1:93:20:e4:63:13:83:9d:42:f5:52:
                    de:54:bd:40:a2:93:b6:e7:5e:86:68:5b:b2:ec:73:
                    7a:b9:43:a5:26:50:26:34:be:26:44:da:43:94:a7:
                    ea:23:38:32:97:ff:46:b8:11:27:73:db:6a:88:16:
                    e7:89:c0:e7:d0:72:66:fc:13:21:d2:21:d7:9c:7b:
                    02:5d:b8:28:d3:e0:eb:3e:44:f2:57:86:eb:91:c5:
                    4c:39:c9:c5:1f:14:78:80:c9:36:a8:8d:a0:51:96:
                    d2:5b:24:bc:9d:9b:de:68:15:b4:9f:92:a6:6e:c4:
                    5d:c8:32:25:fa:92:06:74:08:ca:3b:c3:4b:97:80:
                    12:1c:50:34:61:4e:91:8f:ca:1f:ad:ee:3c:36:17:
                    69:48:40:5b:8e:f9:35:e6:0c:0b:78:67:fb:2f:d2:
                    bd:6a:38:ad:1d:17:88:b1:c3:2e:c7:70:85:81:ac:
                    8b:01:73:e4:1e:2a:9c:c7:37:2b:28:ec:5a:44:4b:
                    a7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:30:17:0C:9F:F7:1F:A2:9E:B5:FB:08:F5:89:57:D6:F0:09:0B:F4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A76F6260539C11EE8D3005554AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:3f:bb:d3:d5:78:b5:7c:99:4f:65:2d:bc:ae:fb:30:a4:37:
         54:5c:d3:32:80:86:b4:9c:f7:16:bd:1b:78:eb:32:cf:33:cf:
         0f:00:b2:a7:39:37:81:53:76:85:fd:81:2b:22:93:64:bc:ee:
         ee:43:0e:9b:89:2a:bc:3d:f3:37:d1:9e:31:e9:b8:ee:71:bc:
         ec:dc:0d:10:f1:14:81:99:94:2b:10:7d:19:6c:b3:1e:17:fb:
         34:09:c0:f2:2e:17:7a:4b:9a:75:22:d0:12:2b:ee:9a:4f:af:
         3c:dc:9f:85:ae:c1:9b:94:2d:d8:01:b0:9e:af:39:82:86:c5:
         5a:51:e6:60:e8:c6:06:b2:b4:d0:9c:db:63:34:24:30:f1:d3:
         5f:c7:f2:eb:68:6e:27:fc:ea:44:6b:88:62:b6:5d:0f:6b:71:
         53:9f:8e:26:22:04:9a:6d:08:02:53:cd:fb:14:c4:d4:1f:62:
         9e:76:86:f9:fa:7e:05:7c:24:a6:d7:31:d6:d6:f5:79:e4:8b:
         d9:ab:6f:a5:84:8e:a8:1a:cd:97:1e:f7:50:cb:70:90:cb:a3:
         f2:80:0e:7e:1b:89:b3:39:b4:b4:0e:7d:c5:4f:ec:4f:3e:f0:
         d1:41:f6:9a:a0:09:87:0c:47:4d:ea:64:e8:cd:9d:03:6d:dc:
         76:a2:fd:80
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICPW8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA5MTUwNzUxMTVaFw0yNDA2MDgwNzUxMTVaMBgxFjAU
BgNVBAMTDTY1MDQwY2Y2LTI1MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGzr+RWTnvbRmwTvCoV6byKD0xpZNnG7ANfIyTXMQLu0nNP/63o4fcWfUW
fbg6LRU0R6E27RZc56Hz6Z35DcXxkyDkYxODnUL1Ut5UvUCik7bnXoZoW7Lsc3q5
Q6UmUCY0viZE2kOUp+ojODKX/0a4ESdz22qIFueJwOfQcmb8EyHSIdecewJduCjT
4Os+RPJXhuuRxUw5ycUfFHiAyTaojaBRltJbJLydm95oFbSfkqZuxF3IMiX6kgZ0
CMo7w0uXgBIcUDRhTpGPyh+t7jw2F2lIQFuO+TXmDAt4Z/sv0r1qOK0dF4ixwy7H
cIWBrIsBc+QeKpzHNyso7FpES6d9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUGzAX
DJ/3H6KetfsI9YlX1vAJC/QwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0E3NkY2MjYwNTM5QzExRUU4RDMwMDU1NTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaXBEwDQYJKoZIhvcNAQEL
BQADggEBALY/u9PVeLV8mU9lLbyu+zCkN1Rc0zKAhrSc9xa9G3jrMs8zzw8Asqc5
N4FTdoX9gSsik2S87u5DDpuJKrw98zfRnjHpuO5xvOzcDRDxFIGZlCsQfRlssx4X
+zQJwPIuF3pLmnUi0BIr7ppPrzzcn4WuwZuULdgBsJ6vOYKGxVpR5mDoxgaytNCc
22M0JDDx01/H8utobif86kRriGK2XQ9rcVOfjiYiBJptCAJTzfsUxNQfYp52hvn6
fgV8JKbXMdbW9Xnki9mrb6WEjqgazZce91DLcJDLo/KADn4bibM5tLQOfcVP7E8+
8NFB9pqgCYcMR03qZOjNnQNt3Hai/YA=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:17 2024 by rpki-client on console-ams.rpki-client.org