Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A781E11E82B411EEA2E4961E4AD9E6FC.roa
File:                     A781E11E82B411EEA2E4961E4AD9E6FC.roa (raw, json)
Hash identifier:          w5hpVpBHEVXbkQWBeT18bdEzJulyk3HePUUy9Su+m8I=
Subject key identifier:   1A:5E:81:89:E5:8C:67:9C:9B:52:AA:F2:05:1C:19:7C:45:02:18:D6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       4FA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A781E11E82B411EEA2E4961E4AD9E6FC.roa
Signing time:             Tue 14 Nov 2023 06:11:31 +0000
ROA not before:           Tue 14 Nov 2023 06:11:27 +0000
ROA not after:            Tue 12 Nov 2024 06:11:27 +0000
asID:                     397630
IP address blocks:        154.83.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20384 (0x4fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 14 06:11:27 2023 GMT
            Not After : Nov 12 06:11:27 2024 GMT
        Subject: CN=65530f93-d492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:d4:25:82:7f:f0:24:9d:9c:f4:0a:88:e6:
                    fb:a3:e7:e1:a0:bd:8a:a8:f8:ce:81:09:6a:83:d4:
                    a9:d5:a2:a4:42:46:98:4e:9e:1c:6f:5d:51:b6:0a:
                    f7:78:69:fb:02:88:5c:ba:c4:a8:b6:a1:8f:a1:4c:
                    a3:fe:26:0c:e6:71:1a:51:8d:9f:e0:c0:e2:03:35:
                    2f:b9:d9:2f:90:9a:05:46:5c:bb:86:ec:7b:4e:60:
                    7e:85:72:63:4a:c8:97:8b:da:22:21:3f:32:d2:51:
                    5f:d2:67:59:a8:66:7a:a0:da:c8:7d:b9:e1:43:9a:
                    99:8e:dd:96:4e:55:6d:1e:76:4d:b6:30:f5:80:21:
                    a2:4b:3c:d1:9a:a0:d5:f0:9f:28:63:2a:67:02:04:
                    bd:92:4e:9f:43:4b:e0:f5:8a:43:a3:b5:b5:8f:e9:
                    9c:70:ec:63:e7:eb:d7:42:2a:4e:e6:97:fb:b1:9f:
                    40:e9:34:5d:42:d1:4d:44:9b:b0:cd:1a:99:1e:c5:
                    f9:88:9d:a3:bf:b4:ba:3c:28:c8:ea:1b:ab:3f:ab:
                    2a:b3:31:fd:d5:07:54:be:ce:42:72:be:4e:c6:91:
                    69:28:0b:c3:a2:be:9e:ca:48:71:ed:6c:ea:2e:fb:
                    e2:fc:ba:1b:c8:1f:05:56:e5:16:3d:7f:53:10:4f:
                    15:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5E:81:89:E5:8C:67:9C:9B:52:AA:F2:05:1C:19:7C:45:02:18:D6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A781E11E82B411EEA2E4961E4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:44:02:0e:65:f8:f6:bd:b7:5c:7e:f6:37:74:f9:c3:f3:d1:
         e6:59:88:27:04:36:7b:83:be:c5:c5:30:0e:4c:4c:0b:59:7c:
         b6:0f:08:e5:ef:e4:3e:f5:38:35:2c:12:85:3e:58:31:d6:d4:
         19:c0:ad:df:3d:da:04:39:17:53:46:88:a5:f1:84:4b:25:99:
         e5:d6:a0:75:d4:42:ab:5d:f6:d1:df:0f:5f:47:44:4a:26:7f:
         d3:f8:f3:96:3f:bf:8e:12:7d:76:f3:01:30:e1:17:4b:26:68:
         cc:7e:70:a2:67:4e:e1:ce:c6:01:8d:3e:34:fa:3b:90:f9:4b:
         0c:be:48:13:b7:d0:bd:9d:fd:ff:d2:ee:c2:4b:4d:c4:92:60:
         d4:00:88:85:ee:88:43:91:bc:31:33:4f:bb:1b:80:60:6f:af:
         26:09:02:f1:5a:10:f6:ee:91:4d:a1:ee:2b:2b:65:96:a9:3b:
         e5:dc:6c:59:41:7b:41:a9:ff:79:7b:20:44:8c:9e:26:ba:00:
         07:5a:dc:c9:80:31:26:38:e9:ba:e1:33:ba:4d:ca:04:b8:0e:
         69:0c:4b:b3:77:ed:98:2c:38:67:40:d0:13:a9:57:81:7d:15:
         fe:4a:7b:e5:fc:d2:17:5b:96:15:06:82:60:d8:58:45:a8:fe:
         2e:cb:a4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:17 2024 by rpki-client on console-ams.rpki-client.org