Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8C69E4C82BE11EE82BD3E3E4AD9E6FC.roa
File:                     B8C69E4C82BE11EE82BD3E3E4AD9E6FC.roa (raw, json)
Hash identifier:          BR5L84cSeJyZwnZO9i/99S8rr0uaW9TpasNoU4YtzK8=
Subject key identifier:   15:9F:67:04:1C:EC:F1:57:89:CC:96:D0:30:FA:1A:7A:FD:77:81:9C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       5006
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8C69E4C82BE11EE82BD3E3E4AD9E6FC.roa
Signing time:             Tue 14 Nov 2023 07:23:35 +0000
ROA not before:           Tue 14 Nov 2023 07:23:32 +0000
ROA not after:            Tue 12 Nov 2024 07:23:32 +0000
asID:                     397630
IP address blocks:        154.201.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20486 (0x5006)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 14 07:23:32 2023 GMT
            Not After : Nov 12 07:23:32 2024 GMT
        Subject: CN=65532077-51a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:a0:ff:43:25:ab:1b:b0:47:65:32:29:18:
                    3f:28:ab:1b:8d:8d:f9:de:b2:75:f5:12:7c:66:ed:
                    52:9a:31:87:6d:c8:37:60:be:91:42:2d:98:da:c8:
                    97:1a:f1:78:f0:5c:7c:30:38:68:04:4c:f3:c2:3d:
                    e6:c0:60:a7:7a:b9:da:22:9e:02:d1:81:3a:3a:11:
                    e9:45:c3:43:22:81:ba:40:dc:8a:b8:a6:c6:3a:49:
                    e3:35:67:0d:d5:c4:d2:ef:ba:0a:d6:ea:bd:cc:09:
                    29:11:ff:3e:87:46:44:38:61:f0:16:ad:38:d0:10:
                    6e:d9:08:6e:6a:72:c7:a4:04:3d:c9:f0:94:26:63:
                    fe:13:51:84:7c:d7:91:1f:33:58:ec:cc:e7:78:bd:
                    ea:ee:c8:f9:eb:70:72:37:d7:36:94:88:1a:aa:ce:
                    28:7e:5c:5c:8c:ea:b0:2c:80:7d:8a:41:c5:e1:81:
                    d2:6d:ae:36:ec:e9:82:ef:67:ba:99:d8:f7:3e:8e:
                    1c:da:1c:e7:64:bc:ac:ec:24:43:cb:6c:bb:42:b1:
                    e9:22:50:ea:78:54:9f:94:5f:5e:6b:7d:99:11:86:
                    a3:2e:66:42:11:a5:4a:f1:6c:2b:9d:34:49:39:bc:
                    b2:b4:7b:d4:38:9f:f9:dc:ee:b0:d3:07:76:f2:80:
                    e8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9F:67:04:1C:EC:F1:57:89:CC:96:D0:30:FA:1A:7A:FD:77:81:9C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8C69E4C82BE11EE82BD3E3E4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:dd:6d:a2:91:9c:29:9c:e0:78:79:34:83:a1:a4:09:7f:8e:
         38:48:1c:1c:72:a6:e6:03:b5:71:60:32:f8:a0:f8:dd:08:29:
         b9:bd:2a:d7:4b:7c:81:5c:38:b7:a7:d2:28:b4:7d:f2:fb:a9:
         86:63:3b:03:b3:d3:94:80:40:14:3c:44:38:2e:e0:f0:8e:a0:
         1c:8c:a0:d7:84:47:90:2a:3a:8b:cc:a4:70:f2:14:7e:f8:62:
         fb:81:0b:10:2a:9e:d1:38:14:5b:8b:16:fd:ff:5a:2c:83:a2:
         e8:1e:b5:f3:e7:50:f3:4d:d7:6e:5c:d4:1e:c4:f2:f9:39:24:
         b3:04:26:c4:7f:24:6a:0f:39:f3:c8:a9:15:5a:6f:b6:bb:9d:
         e7:a2:0d:66:fc:17:4f:33:8a:77:3f:1d:54:aa:79:76:e4:68:
         df:2e:e9:1e:54:2b:60:a9:84:a8:37:7b:d6:55:ba:40:c9:0e:
         e8:03:e8:af:c0:b4:52:42:b1:9f:3f:df:fc:2e:4c:e5:ce:99:
         bf:ee:c8:b1:88:23:2e:72:43:bb:01:e8:87:f4:80:0d:e2:16:
         ed:cc:66:16:27:4e:5c:a4:f6:70:aa:52:38:b3:d0:66:36:1b:
         d7:25:ae:1c:bf:c5:ef:60:77:77:d3:3a:a0:d2:9e:2f:f7:ab:
         57:39:3d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:36 2024 by rpki-client on console-fra.rpki-client.org