Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B485DD56A43D11EFA9B39B51762E951A.roa
File:                     B485DD56A43D11EFA9B39B51762E951A.roa (raw, json)
Hash identifier:          6z5j148/KSFuDjXCNxRTHLzCdzQnIUM60f4ENniMQlg=
Subject key identifier:   03:5E:76:41:FF:D3:5D:B0:40:4F:86:3E:65:77:F4:C5:22:38:55:EB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       010DAD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B485DD56A43D11EFA9B39B51762E951A.roa
Signing time:             Sat 16 Nov 2024 17:10:40 +0000
ROA not before:           Sat 16 Nov 2024 17:10:36 +0000
ROA not after:            Tue 17 Dec 2024 17:10:36 +0000
asID:                     53803
IP address blocks:        154.195.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69037 (0x10dad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 16 17:10:36 2024 GMT
            Not After : Dec 17 17:10:36 2024 GMT
        Subject: CN=6738d210-214b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:92:26:05:59:07:59:d8:4c:44:26:66:46:06:
                    26:22:1c:fd:e4:d0:fd:2a:5e:5a:b4:6d:ea:75:de:
                    30:d9:db:5e:57:d6:94:30:fd:1c:46:04:17:0c:a3:
                    a9:ae:ad:78:94:a0:44:cf:7a:41:69:f5:24:5c:4a:
                    19:17:cb:a3:bc:97:8f:ac:d9:15:0a:be:80:4e:24:
                    58:73:33:0a:1e:e5:5d:75:c3:a0:a2:d5:01:e3:f7:
                    0f:0e:e0:0a:87:08:51:fd:ed:0d:4c:b3:5f:c3:10:
                    d4:bf:80:4a:4c:0b:b6:14:76:a6:13:a4:11:ba:09:
                    79:16:04:9b:b7:4f:43:8f:fa:43:e4:f2:71:89:04:
                    20:f6:53:54:ba:26:9d:bf:23:43:e0:8f:ee:79:ce:
                    0f:58:86:a0:a7:2f:a0:db:13:3c:43:29:97:49:7c:
                    be:a2:91:29:4a:58:01:58:a1:de:61:8a:d9:d1:7d:
                    50:9a:33:43:c9:a9:8f:f0:75:1e:d1:c7:6a:e1:4c:
                    89:e7:3f:03:a8:60:a1:fa:15:55:cb:2a:16:91:17:
                    5a:6a:71:c9:7e:1f:62:c8:38:bc:75:a8:8c:02:76:
                    71:d6:f1:ee:7b:cf:bd:9d:df:d4:4a:12:da:eb:76:
                    66:d6:bd:44:fb:54:57:fe:95:39:81:03:bd:f5:39:
                    72:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5E:76:41:FF:D3:5D:B0:40:4F:86:3E:65:77:F4:C5:22:38:55:EB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B485DD56A43D11EFA9B39B51762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:11:3d:bb:7b:01:f1:90:7d:ab:a1:dc:3e:be:ce:17:4d:c5:
         25:a6:3f:70:b0:17:8f:75:5c:ad:80:44:4b:a4:90:a6:81:2d:
         47:e1:a5:ef:c1:f8:a8:1b:8d:6d:a6:df:53:b3:1a:86:f7:c5:
         15:ef:14:ce:a2:cb:47:a2:87:fa:5f:4b:47:0f:8f:2f:ab:3c:
         28:2b:6c:15:d0:6b:06:f8:2f:41:10:d5:24:97:d5:22:7d:8f:
         b3:4a:76:f7:5a:33:14:14:bd:b4:ac:00:29:d8:11:fa:57:4d:
         bb:69:3d:a8:8a:4d:fe:86:40:08:c7:63:49:69:de:42:0d:86:
         b1:d9:d7:c8:8e:fc:17:ec:84:3c:55:f2:8b:83:6c:b6:cf:b2:
         d2:b2:2b:5e:02:bc:78:16:fe:dc:52:0e:08:19:76:b8:6a:ed:
         e9:8f:d3:26:6b:77:f1:ca:8e:ff:8f:11:bf:ca:48:d4:15:95:
         67:db:59:f6:64:f7:37:a7:5e:ab:c3:d4:3e:54:96:6a:09:42:
         96:ee:43:a6:4c:58:d5:b1:de:c2:1d:1b:05:0f:5b:d6:41:69:
         77:c2:94:fc:50:65:bf:54:26:b3:40:8e:15:49:58:1e:df:ed:
         eb:f4:40:d6:ea:9b:a7:8f:5f:df:37:e4:90:5e:7e:f1:8b:37:
         ae:48:77:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:43 2024 by rpki-client on console-fra.rpki-client.org