Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7F435EA10D811EE8BA0CE1D4AD9E6FC.roa
File:                     B7F435EA10D811EE8BA0CE1D4AD9E6FC.roa (raw, json)
Hash identifier:          PCtYn8m0uNI3ZrqEOTBZccUzvKZdPc2cfsuIbV8lZlY=
Subject key identifier:   C4:4F:F9:A9:31:BC:B1:C0:BB:BB:5F:04:B0:A4:D7:57:25:C5:25:EE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2D2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7F435EA10D811EE8BA0CE1D4AD9E6FC.roa
Signing time:             Thu 22 Jun 2023 08:42:28 +0000
ROA not before:           Thu 22 Jun 2023 08:42:24 +0000
ROA not after:            Fri 05 Jul 2024 08:42:24 +0000
asID:                     146993
IP address blocks:        154.203.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11566 (0x2d2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 22 08:42:24 2023 GMT
            Not After : Jul  5 08:42:24 2024 GMT
        Subject: CN=64940974-e4c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ef:6b:16:b2:ee:11:a5:fc:af:47:18:e2:61:
                    be:43:71:5a:ff:95:9b:c9:0c:56:ba:f6:a6:6c:4f:
                    95:50:b3:08:04:b0:b5:79:4a:c6:94:1d:6d:f6:8c:
                    1e:a4:d1:2d:d9:8b:26:1d:a3:a6:25:61:04:25:a9:
                    8a:91:05:cc:94:6e:4b:79:eb:8a:11:e7:b6:cd:01:
                    c9:a0:9a:41:99:d9:de:5f:8b:d8:d9:e4:4b:0d:30:
                    a1:32:ef:7f:d7:96:30:75:1b:1e:1f:b0:14:37:f6:
                    e0:99:37:a4:4c:7e:17:b5:90:8d:71:9a:24:5a:88:
                    4f:3f:e0:b0:4c:87:0b:43:17:0c:60:fa:f7:27:ad:
                    09:05:7c:e0:5c:8d:c1:37:b2:63:29:4e:b2:06:5d:
                    a7:b5:6d:22:40:37:2e:c1:bc:44:4a:0a:67:dd:08:
                    6a:80:78:1c:b3:f0:7b:3d:ef:21:37:db:b9:58:cb:
                    57:43:93:9a:c2:95:d7:d1:9e:d1:24:e9:c1:4b:90:
                    f7:7b:a9:9a:73:94:8b:42:be:96:40:90:f3:4c:74:
                    2c:86:cc:d7:df:ff:f1:86:36:af:5e:cb:b5:6c:30:
                    be:f3:b0:50:da:e7:76:22:68:11:1d:e3:58:a7:58:
                    6d:c6:18:a2:1f:d3:58:48:31:bb:0b:d2:7d:d4:e1:
                    3a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4F:F9:A9:31:BC:B1:C0:BB:BB:5F:04:B0:A4:D7:57:25:C5:25:EE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7F435EA10D811EE8BA0CE1D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:17:e3:4e:33:cd:aa:22:64:80:45:9d:0a:ee:cf:f4:bb:e5:
         5e:52:03:42:99:0e:48:d7:49:dc:b0:07:03:bc:e3:54:e9:8e:
         f3:c8:9d:8c:2f:8c:89:32:fe:fd:51:6d:74:22:a0:e3:59:3d:
         53:73:be:f4:3d:ad:5d:9e:9e:5b:e1:e4:c5:dd:c9:03:bf:55:
         91:ee:89:e4:c1:a9:a3:cf:5d:46:68:61:35:b8:42:33:33:79:
         9f:bd:ef:57:2e:95:85:df:75:da:58:f6:fe:46:18:ac:f8:ae:
         63:fd:d4:69:45:69:94:d1:f8:d8:cd:74:06:73:66:7c:77:7d:
         5c:f5:b4:f8:c2:4d:c7:94:ec:95:8f:b0:e0:2a:6d:48:e3:03:
         44:4a:91:53:05:36:76:09:8c:68:6f:eb:53:6e:92:48:12:1b:
         a1:c0:84:e6:d1:51:90:dc:f2:e4:1a:26:7d:1e:d4:29:76:e3:
         94:b6:c4:24:9c:d3:6b:1b:d2:d4:dd:9e:96:cf:85:bc:3a:76:
         5a:34:f2:9d:ec:12:dc:e2:fe:59:40:0f:8d:47:1a:53:a6:f0:
         0e:d0:92:67:6d:56:bc:e0:d9:1b:5c:3e:29:be:74:23:c2:8d:
         d4:ce:79:47:91:b5:2c:a1:3b:52:d6:f5:90:36:c4:44:99:da:
         a2:62:fd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:19 2024 by rpki-client on console-ams.rpki-client.org