Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AACE879C671F11EEB1474A834AD9E6FC.roa
File:                     AACE879C671F11EEB1474A834AD9E6FC.roa (raw, json)
Hash identifier:          r69SjHBLZZCTQ6BXBSUTpaDZMvFXExYHLKAfNyiVYmA=
Subject key identifier:   81:D6:3C:90:F0:DE:28:41:37:39:83:69:75:2F:00:3E:A1:34:52:B3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       4577
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AACE879C671F11EEB1474A834AD9E6FC.roa
Signing time:             Tue 10 Oct 2023 03:47:00 +0000
ROA not before:           Tue 10 Oct 2023 03:46:57 +0000
ROA not after:            Wed 04 Sep 2024 03:46:57 +0000
asID:                     140595
IP address blocks:        154.92.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17783 (0x4577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 10 03:46:57 2023 GMT
            Not After : Sep  4 03:46:57 2024 GMT
        Subject: CN=6524c934-3beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:48:f0:c3:84:26:d5:43:57:7f:61:dc:e7:ed:
                    cb:97:b8:53:75:69:0e:4e:7e:ec:c8:71:c9:4d:9b:
                    5e:33:f5:8e:14:e4:2b:fc:37:ff:7d:dc:a2:f0:b8:
                    bc:03:d8:dc:14:63:06:0a:57:70:42:c7:a1:c1:30:
                    bb:13:fc:89:47:4f:b7:84:6c:b4:78:db:4a:0a:68:
                    69:cc:90:bf:b5:46:c5:82:0f:c0:fe:38:f8:15:f9:
                    75:81:25:23:15:2e:8a:20:c1:ac:c5:77:72:c2:ac:
                    c5:9a:c4:a9:aa:c8:61:54:e3:4b:84:7c:54:19:06:
                    a9:a1:dd:ac:98:82:f6:b8:a1:f8:93:cc:8e:c1:41:
                    1e:9d:67:22:e6:91:cc:7f:d0:9b:ba:82:53:e9:21:
                    31:77:4c:09:0b:1b:b9:cd:5c:12:dc:fd:40:f0:63:
                    56:dc:e7:f5:e0:81:41:d5:0c:db:c4:d5:c9:12:ee:
                    02:a6:2e:48:4d:11:00:cb:ec:be:96:4c:25:96:63:
                    59:44:f0:67:d3:fb:ee:cc:59:39:9a:7e:51:5b:4c:
                    da:27:f6:1b:b6:1b:f6:f4:b8:12:6f:35:1d:50:bd:
                    e4:30:4f:ed:6d:8e:65:a2:d8:c1:fc:95:bd:c0:7d:
                    4d:1a:35:ea:99:b6:e1:f2:c6:bd:1f:a1:4c:35:8c:
                    da:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D6:3C:90:F0:DE:28:41:37:39:83:69:75:2F:00:3E:A1:34:52:B3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AACE879C671F11EEB1474A834AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:d0:b7:75:fb:b1:76:c2:43:c8:f0:7b:1d:5a:ad:74:42:d8:
         3a:04:91:9a:ad:cf:a1:63:90:ab:be:9f:f8:a8:5c:b5:0c:3f:
         2f:96:77:b0:02:53:a2:ba:f0:0b:37:c3:22:be:f4:b5:9e:bd:
         7c:2b:39:c5:91:71:dc:94:4c:5f:9e:34:cc:39:c8:cc:6d:ab:
         72:06:d0:7a:1c:02:fd:d3:d1:d4:0c:df:05:89:9c:71:9b:b2:
         35:ba:20:e7:b3:07:ed:5a:c9:28:34:5c:62:5b:81:43:1b:df:
         4f:3f:42:93:19:8b:25:a2:fc:64:9e:33:be:67:9b:02:dc:5b:
         77:12:78:fb:dc:1d:4c:a7:52:81:e7:54:a1:5c:5d:79:b4:4c:
         fc:b8:8d:df:bc:e6:dd:9b:05:4a:4c:81:f5:54:66:fe:08:bf:
         45:65:3d:69:8e:28:f2:bd:b3:4d:92:14:e1:db:d0:91:02:73:
         ae:75:09:0b:7e:54:bc:0b:8f:dc:0e:26:07:5b:d6:a0:5a:4e:
         1b:8c:15:55:a5:f4:d7:b4:f1:a8:e9:e7:af:35:1e:4f:13:57:
         69:b3:c6:9a:a2:6d:0e:57:b7:97:bc:38:43:7b:9e:fc:eb:e7:
         9e:74:7a:65:00:fa:5a:6f:c9:da:bb:86:c7:30:7a:05:19:a4:
         0d:d4:fd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:17 2024 by rpki-client on console-ams.rpki-client.org