Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B02C6FBE417811EE8ED7E0864AD9E6FC.roa
File:                     B02C6FBE417811EE8ED7E0864AD9E6FC.roa (raw, json)
Hash identifier:          G5CYkoYBfMWM8zQPwRxSDLfg3235RoTRGu0lMxpJsDM=
Subject key identifier:   4B:3D:73:39:AA:90:9E:58:14:58:CB:58:B0:9A:50:AA:43:A3:81:88
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       378F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B02C6FBE417811EE8ED7E0864AD9E6FC.roa
Signing time:             Wed 23 Aug 2023 05:48:30 +0000
ROA not before:           Wed 23 Aug 2023 05:48:27 +0000
ROA not after:            Sat 24 Aug 2024 05:48:27 +0000
asID:                     5065
IP address blocks:        154.86.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14223 (0x378f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 23 05:48:27 2023 GMT
            Not After : Aug 24 05:48:27 2024 GMT
        Subject: CN=64e59dae-f1d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:b5:1c:0a:35:a2:6f:be:dc:e6:bd:2a:7f:
                    65:31:f6:05:8b:bd:21:e8:5b:46:ae:bb:cc:aa:93:
                    19:d8:21:7b:f0:59:d7:2f:f2:63:6c:cf:92:a4:e7:
                    cc:b5:91:57:ce:2d:d7:4b:55:24:ee:83:1f:fd:07:
                    13:c8:73:ec:34:a6:6b:90:e6:1c:34:fc:78:b7:9b:
                    e9:96:2a:0a:9d:53:52:3a:87:6c:0f:de:cd:9d:b0:
                    03:f7:2e:05:9e:aa:76:db:fa:a9:00:7e:74:67:26:
                    a8:1c:bf:b2:3d:e5:c6:70:96:0e:83:36:5f:a1:0b:
                    bf:1c:fa:1d:a1:b3:89:cd:04:cb:46:31:73:00:75:
                    d9:94:ce:f5:4a:43:14:ea:13:b1:fa:74:d7:5b:e5:
                    c7:a9:a9:17:4f:4b:25:d2:0c:65:33:87:ce:65:17:
                    fa:32:ba:ee:5f:34:21:18:b8:88:49:d1:60:d2:6b:
                    15:11:4b:d7:e0:3c:5e:9c:69:02:b8:80:b9:a2:9e:
                    46:74:44:c2:e6:9c:86:3c:de:2f:f0:7e:92:af:30:
                    5a:fc:31:05:56:cd:46:3c:5a:39:04:bf:7e:13:b7:
                    c2:b9:c0:ce:66:4e:3b:bf:3e:23:2f:02:ae:85:a9:
                    ba:d2:ef:3b:45:56:b6:15:27:76:cb:76:00:39:48:
                    cd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3D:73:39:AA:90:9E:58:14:58:CB:58:B0:9A:50:AA:43:A3:81:88
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B02C6FBE417811EE8ED7E0864AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:1f:18:9b:78:62:28:7b:10:e0:c0:95:f2:57:94:94:ff:ee:
         4b:1a:a3:8b:be:ee:9b:9a:40:79:9e:d7:16:75:d5:b4:ab:eb:
         d6:6f:13:74:9c:ed:e1:a5:2f:65:4f:2a:50:65:db:1a:43:1e:
         dd:e4:87:4c:77:b7:dd:26:56:39:15:24:29:03:1b:38:2e:50:
         dc:ec:91:0f:9c:0b:8a:c8:28:7c:4b:c8:29:eb:d9:bc:3c:ee:
         03:05:e3:47:32:7a:b3:b4:28:ef:39:b3:1c:83:0f:8d:7c:47:
         90:82:0d:1a:d5:53:26:7c:10:f7:00:76:68:33:97:5f:14:ad:
         37:bc:df:d0:f1:8b:fc:b6:81:ff:2e:af:ec:15:4c:75:83:cd:
         a0:83:68:6b:56:0d:17:9e:bf:76:34:ef:3e:2a:1b:9d:f8:d3:
         a0:9a:e7:04:c0:ff:a5:c3:a7:52:05:32:4d:c4:ff:0b:d4:82:
         80:ae:c9:c9:9a:1d:59:a2:0e:87:8c:b7:fc:42:f7:7f:0e:53:
         af:1b:79:fe:9e:16:25:f3:12:61:90:0b:92:f7:54:e2:a4:86:
         86:05:c0:38:9b:90:89:bd:d6:bd:8e:e6:c6:22:34:1d:4c:15:
         f3:af:c3:35:3b:4e:85:43:0d:84:08:1c:77:1d:52:cc:c6:6f:
         ae:a6:16:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:35 2024 by rpki-client on console-fra.rpki-client.org