Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A90CB12CFE9711EDB95D364B4AD9E6FC.roa
File:                     A90CB12CFE9711EDB95D364B4AD9E6FC.roa (raw, json)
Hash identifier:          Awgj1rH6RwWl7gazyUSFLOPsY6G7d3qdxrxMslapCCg=
Subject key identifier:   F3:E4:00:16:11:89:23:6F:F9:CD:36:6C:96:38:1F:B0:80:85:DF:E2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2840
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A90CB12CFE9711EDB95D364B4AD9E6FC.roa
Signing time:             Tue 30 May 2023 03:11:25 +0000
ROA not before:           Tue 30 May 2023 03:11:21 +0000
ROA not after:            Wed 15 May 2024 03:11:21 +0000
asID:                     63888
IP address blocks:        154.207.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10304 (0x2840)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 30 03:11:21 2023 GMT
            Not After : May 15 03:11:21 2024 GMT
        Subject: CN=6475695d-b048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:28:4c:de:ad:bc:37:70:0f:2b:fb:d2:1c:67:
                    3e:14:32:5b:d3:47:13:21:71:2d:ad:47:9f:82:56:
                    c7:fb:92:a2:47:37:08:22:9c:c7:77:9d:3e:92:d0:
                    f8:a4:1b:97:9a:0b:82:b5:06:77:c3:b1:08:01:b2:
                    32:e1:63:57:59:74:db:a6:67:a7:b5:09:7e:b3:30:
                    22:94:48:af:00:f0:0d:e4:10:56:f2:e4:81:c5:15:
                    4d:6f:d4:77:f4:a7:93:77:37:69:a4:94:18:91:ae:
                    51:3d:5f:0b:3c:f1:cc:be:ec:d8:b3:ab:c8:c0:c7:
                    66:82:ac:11:e6:39:f6:73:7a:d6:61:3e:b5:15:82:
                    50:43:3f:7c:30:45:54:1a:11:68:82:50:59:f2:69:
                    52:e7:c2:6f:60:ab:6b:68:fb:80:22:7f:3e:ab:6f:
                    40:c0:bb:55:12:26:c8:24:46:f4:ae:59:8d:4b:0e:
                    0a:a0:0f:a9:40:07:da:38:f2:85:88:14:57:ef:06:
                    05:6b:e2:01:8a:a4:73:2b:0c:0e:9b:7f:19:f4:75:
                    09:0f:6e:a8:ef:cf:38:d0:eb:ba:f6:5b:85:1f:a9:
                    4a:3d:07:0f:60:54:ef:04:0f:cc:19:2e:2e:27:72:
                    d7:af:97:32:63:19:a4:c3:fa:ac:c5:f9:2c:d4:b4:
                    88:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E4:00:16:11:89:23:6F:F9:CD:36:6C:96:38:1F:B0:80:85:DF:E2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A90CB12CFE9711EDB95D364B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:79:7f:19:5c:77:6c:5c:c3:fa:92:f7:e0:33:28:60:17:4c:
         fc:f6:08:6d:e0:72:91:e8:cd:e9:45:49:e4:36:5b:55:0f:84:
         45:c0:ec:01:67:28:c3:18:e0:97:df:87:0f:72:bb:0f:de:7f:
         b0:69:ba:f6:f5:2d:5f:7e:7f:a0:bf:1b:6a:3f:15:5a:be:52:
         a2:df:59:e0:74:fe:19:30:5f:a4:e0:7f:f2:b7:33:68:b8:ab:
         f8:49:c0:fe:eb:b4:a4:da:8a:81:fd:9b:e4:00:de:15:74:52:
         80:f3:25:95:7f:4d:fc:2b:f3:68:29:b3:fa:81:41:3e:b3:a3:
         b2:e3:fb:1f:03:29:5a:8b:96:85:a0:8d:d8:c1:2e:c0:9c:3c:
         35:c0:00:1b:2c:8a:17:79:97:fd:a6:58:0d:76:f8:27:f0:82:
         24:f8:a9:94:06:b0:33:e6:ff:fa:f3:3b:92:b6:b2:fc:58:85:
         13:92:32:bf:77:ad:19:52:19:bb:6e:f4:bc:48:af:5d:3c:63:
         d5:aa:95:ca:7a:b6:40:d2:dd:06:33:3e:dc:19:0d:00:9e:6e:
         4a:28:69:7a:1d:9f:1b:5c:40:e4:c6:31:fa:6b:c8:a7:31:25:
         a5:26:05:d7:cc:bf:ad:21:59:53:75:99:80:c5:64:93:8e:2a:
         55:aa:fc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:17 2024 by rpki-client on console-ams.rpki-client.org