Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB453A76047D11EF8E5FECF4007001B1.roa
File:                     AB453A76047D11EF8E5FECF4007001B1.roa (raw, json)
Hash identifier:          dRmVYSCcd9hrJunycrlqz5sF+0RExjsH90JBFgoBBVQ=
Subject key identifier:   1C:16:39:51:FA:04:E3:FB:6B:C5:E9:EF:37:33:C2:C4:B4:F7:BA:97
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       B1BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB453A76047D11EF8E5FECF4007001B1.roa
Signing time:             Sat 27 Apr 2024 10:05:26 +0000
ROA not before:           Sat 27 Apr 2024 10:05:23 +0000
ROA not after:            Fri 18 Apr 2025 10:05:23 +0000
asID:                     151606
IP address blocks:        154.198.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Nov 2024 00:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45499 (0xb1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 27 10:05:23 2024 GMT
            Not After : Apr 18 10:05:23 2025 GMT
        Subject: CN=662ccde6-d726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:b8:cf:dd:65:9c:94:52:68:6b:f2:24:0f:
                    88:57:6d:52:52:0d:31:54:31:8e:2e:2b:56:6b:b3:
                    29:ca:b4:cf:a6:7f:b1:7f:7e:54:14:d9:03:a4:f9:
                    d3:5c:5f:00:b9:7d:28:2b:24:fb:20:2f:c1:94:18:
                    63:97:e3:0b:ae:24:20:4a:01:e0:a3:7f:ec:ea:c8:
                    68:fa:ae:94:d4:e2:5a:56:5f:d8:e9:94:73:de:f0:
                    39:c6:8a:dd:b1:d8:2b:0d:fe:ac:b8:13:04:40:51:
                    f1:ac:2d:cb:1f:57:2b:e6:17:a0:01:17:12:3f:1e:
                    53:68:a9:a8:46:4e:2a:13:01:76:fb:8d:84:6c:f9:
                    68:b6:17:64:c4:d3:75:ee:97:5d:ba:11:c9:cf:7b:
                    a6:46:4e:39:d0:63:20:e8:22:a1:0f:58:5d:0d:7a:
                    01:41:79:97:c1:50:5e:32:66:2e:39:9e:97:33:74:
                    d8:d5:a6:ce:54:41:3b:14:47:19:fc:6e:03:05:25:
                    2f:0e:20:02:09:a1:7e:5a:ab:fe:6f:e0:10:b9:f7:
                    dc:27:6d:d8:a7:bd:ae:27:dc:8f:76:d8:00:27:4b:
                    8e:d2:fa:bf:8f:08:bc:b7:cf:18:b3:66:a8:da:92:
                    37:0e:e9:5f:fc:9f:18:43:f6:6c:1d:8f:6c:8d:79:
                    c7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:16:39:51:FA:04:E3:FB:6B:C5:E9:EF:37:33:C2:C4:B4:F7:BA:97
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB453A76047D11EF8E5FECF4007001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:45:2e:a8:9f:cf:e4:21:39:c7:19:6e:2d:3a:0e:25:8b:1f:
         fc:4b:e0:28:42:20:3c:84:8d:02:1d:c3:3c:ee:26:60:4d:54:
         09:2d:2f:81:fe:5c:54:78:d7:87:6c:2e:ba:e6:69:60:ce:47:
         e1:a0:e1:8e:83:43:68:06:df:5a:ac:43:f5:d8:76:65:68:ff:
         da:83:b4:18:63:34:90:e6:19:a4:42:f0:77:fb:fc:48:28:ae:
         20:05:11:27:37:cd:af:e8:b4:e9:7f:27:bb:77:4e:35:a4:95:
         f4:3c:de:7b:0a:d9:5a:cb:d3:08:e6:58:0d:f5:95:13:5c:01:
         d8:07:81:2d:ab:9b:b5:a4:53:f0:da:56:76:d0:b2:3b:e9:44:
         8e:eb:b0:5e:81:82:7e:6a:15:5c:fe:dc:98:2d:eb:ee:d8:1d:
         f8:f1:5c:eb:33:62:f6:34:57:a4:e3:67:11:75:72:ee:db:25:
         50:09:ab:97:0e:8c:bd:6e:0b:86:3c:13:6e:e2:21:48:37:f2:
         29:fa:5f:83:d6:89:27:1a:6d:3d:4f:f4:2a:c3:a9:d7:c1:3f:
         d8:f1:db:8d:fa:98:7d:8f:d6:ca:3b:06:f6:16:69:9a:7e:e9:
         9e:6c:ed:ae:26:ac:10:38:6d:a0:5b:68:63:09:64:b6:83:99:
         e4:b3:fa:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALG7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDI3MTAwNTIzWhcNMjUwNDE4MTAwNTIzWjAYMRYw
FAYDVQQDEw02NjJjY2RlNi1kNzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv6K4z91lnJRSaGvyJA+IV21SUg0xVDGOLitWa7MpyrTPpn+xf35UFNkD
pPnTXF8AuX0oKyT7IC/BlBhjl+MLriQgSgHgo3/s6sho+q6U1OJaVl/Y6ZRz3vA5
xordsdgrDf6suBMEQFHxrC3LH1cr5hegARcSPx5TaKmoRk4qEwF2+42EbPlothdk
xNN17pdduhHJz3umRk450GMg6CKhD1hdDXoBQXmXwVBeMmYuOZ6XM3TY1abOVEE7
FEcZ/G4DBSUvDiACCaF+Wqv+b+AQuffcJ23Yp72uJ9yPdtgAJ0uO0vq/jwi8t88Y
s2ao2pI3Dulf/J8YQ/ZsHY9sjXnHBwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBwW
OVH6BOP7a8Xp7zczwsS097qXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQjQ1M0E3NjA0N0QxMUVGOEU1RkVDRjQwMDcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsakMA0GCSqGSIb3DQEB
CwUAA4IBAQBGRS6on8/kITnHGW4tOg4lix/8S+AoQiA8hI0CHcM87iZgTVQJLS+B
/lxUeNeHbC665mlgzkfhoOGOg0NoBt9arEP12HZlaP/ag7QYYzSQ5hmkQvB3+/xI
KK4gBREnN82v6LTpfye7d041pJX0PN57Ctlay9MI5lgN9ZUTXAHYB4Etq5u1pFPw
2lZ20LI76USO67BegYJ+ahVc/tyYLevu2B348VzrM2L2NFek42cRdXLu2yVQCauX
Doy9bguGPBNu4iFIN/Ip+l+D1oknGm09T/Qqw6nXwT/Y8duN+ph9j9bKOwb2Fmma
fumebO2uJqwQOG2gW2hjCWS2g5nks/qM
-----END CERTIFICATE-----