Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B72E3C00416611EEAAC3924F4AD9E6FC.roa
File:                     B72E3C00416611EEAAC3924F4AD9E6FC.roa (raw, json)
Hash identifier:          br25D5jcH1Ph23JwjF47D5iGW5mLgh5p1NcWMEKutoY=
Subject key identifier:   42:46:2F:83:53:7C:C4:94:26:D1:59:4E:5D:F3:BF:33:FF:F1:F1:4E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       3773
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B72E3C00416611EEAAC3924F4AD9E6FC.roa
Signing time:             Wed 23 Aug 2023 03:39:51 +0000
ROA not before:           Wed 23 Aug 2023 03:39:48 +0000
ROA not after:            Wed 21 Aug 2024 03:39:48 +0000
asID:                     38638
IP address blocks:        154.194.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14195 (0x3773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 23 03:39:48 2023 GMT
            Not After : Aug 21 03:39:48 2024 GMT
        Subject: CN=64e57f87-ba25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:66:0c:40:c3:bf:92:67:47:8e:e9:2c:23:6c:
                    cb:76:82:24:77:3a:bb:9a:a8:00:15:b7:9b:53:a2:
                    39:ec:cf:28:66:44:9f:90:b0:c1:a4:20:5e:c6:f5:
                    16:c2:b0:a0:e4:43:4d:5a:a5:0d:7d:59:a7:b6:ad:
                    05:f6:dc:16:34:70:d8:05:4a:88:9f:f6:60:10:f7:
                    71:9a:5b:de:56:a5:0e:26:04:d0:26:fe:b9:49:7e:
                    25:bd:08:86:bb:a0:e4:1f:ed:f9:be:1d:2c:61:43:
                    fd:cc:2f:ba:59:12:b1:9c:1b:46:74:4f:99:0b:0c:
                    03:cc:c7:c3:00:a9:5a:3e:1e:03:18:7c:69:29:56:
                    31:65:80:8f:1c:25:11:54:bd:8f:6b:1e:d9:5a:67:
                    2d:a9:63:ae:ba:1b:0e:f6:fc:42:f6:b7:8c:c0:33:
                    b6:09:32:80:fa:a2:c4:ec:1b:b6:55:c1:de:40:49:
                    b6:a1:7e:b7:30:fd:be:49:aa:d3:3f:30:c2:e7:f3:
                    bb:5d:26:da:10:bf:2f:82:f2:d8:b3:c4:fe:ed:62:
                    65:83:f0:76:fa:c4:88:56:db:5c:40:89:13:68:06:
                    15:4a:fd:bb:59:fe:91:1b:47:c7:c8:42:f3:2d:15:
                    8d:33:68:da:c8:52:a3:89:b2:4e:aa:fa:7d:a0:c4:
                    a6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:46:2F:83:53:7C:C4:94:26:D1:59:4E:5D:F3:BF:33:FF:F1:F1:4E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B72E3C00416611EEAAC3924F4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:5b:f6:29:0b:b5:4f:86:d5:96:b1:bf:86:37:ee:19:8b:4f:
         a4:65:0d:ec:6c:40:fd:88:52:d2:25:d6:90:76:d8:05:b8:c0:
         d9:72:d2:27:e7:7f:5b:b0:6d:32:7d:f9:ca:03:41:7c:88:a4:
         e4:2b:a0:c2:5a:fa:bb:91:b4:b5:a9:89:a4:45:1e:21:31:00:
         d8:27:5d:bd:30:bd:93:a2:32:ba:90:10:e0:ff:0e:24:a5:9c:
         fe:e2:a6:04:70:2d:e8:50:46:48:24:17:24:97:a3:de:88:fa:
         21:b1:83:40:e8:7c:85:3e:29:4e:1a:ce:a9:46:bf:6f:73:33:
         89:3c:e1:8f:a2:e0:84:92:bc:67:24:72:5b:5e:f7:7e:97:59:
         ef:c2:b7:fb:d5:7f:61:93:15:cb:08:b9:af:d4:92:57:89:7b:
         0f:c9:41:9b:c6:d5:9b:90:62:eb:d3:07:8a:73:3b:46:7c:c5:
         50:cb:a1:7e:4a:2b:9a:b7:e5:7e:4f:98:3d:14:fb:35:e8:fd:
         09:2f:4e:f3:d1:e8:b5:17:02:9f:a3:20:87:fc:b3:99:50:3e:
         c1:7a:32:d3:ed:ac:3c:60:32:49:1a:03:cb:07:be:c8:dc:d2:
         66:37:87:91:44:e8:ea:d6:64:e6:02:35:38:4d:be:c9:ea:e2:
         a7:51:8a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:28 2024 by rpki-client on console-ams.rpki-client.org