Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9B5F892FE9811ED9D05AC4E4AD9E6FC.roa
File:                     C9B5F892FE9811ED9D05AC4E4AD9E6FC.roa (raw, json)
Hash identifier:          /yKF4qBQtnFPSNet/kGucwJ7gIrG7WqXhs89WuTNI/Q=
Subject key identifier:   76:44:51:DD:C7:5F:F4:87:DC:50:AE:BA:9A:BD:7E:2D:6B:A0:52:AA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       284C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9B5F892FE9811ED9D05AC4E4AD9E6FC.roa
Signing time:             Tue 30 May 2023 03:19:29 +0000
ROA not before:           Tue 30 May 2023 03:19:25 +0000
ROA not after:            Wed 15 May 2024 03:19:25 +0000
asID:                     63888
IP address blocks:        154.207.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10316 (0x284c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 30 03:19:25 2023 GMT
            Not After : May 15 03:19:25 2024 GMT
        Subject: CN=64756b41-7cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:47:27:ae:3a:5d:a7:5e:20:38:30:d7:e9:dc:
                    84:e0:a0:4a:bd:c9:82:c5:c6:db:0d:42:a1:4b:50:
                    75:09:4b:92:34:ba:5d:07:71:85:ee:d6:97:ae:b1:
                    b1:65:68:92:c8:76:6c:8f:83:ba:63:6e:24:cd:f4:
                    2b:38:2f:d5:8f:98:d3:f8:8e:1c:c4:88:4c:ba:5b:
                    61:82:41:5c:fa:7e:3b:39:f3:3f:19:00:62:d5:34:
                    2b:c6:dc:d7:57:fe:a2:2d:67:1a:a3:e4:04:9d:52:
                    48:4d:e4:80:ed:56:bd:0b:34:86:ab:35:7f:5f:84:
                    16:8b:ed:0c:6f:94:18:28:63:33:06:0e:32:2f:51:
                    e8:3b:84:86:10:e7:f5:f7:61:ec:6a:cd:67:05:e4:
                    14:8f:b5:37:71:32:4f:8a:81:68:14:84:60:0d:d6:
                    0a:83:2d:87:14:61:4a:9d:c9:2c:92:78:55:a2:72:
                    ee:96:59:3a:dd:fa:32:d4:31:4a:5e:1c:2e:7e:8f:
                    14:fc:9a:27:29:5a:9b:e6:38:94:28:6a:82:ca:6d:
                    e4:ed:f7:64:6e:c6:d0:e4:0c:6b:21:5c:2d:c0:3b:
                    2e:b5:06:41:cd:ac:95:b2:d4:74:e9:c2:92:86:d6:
                    de:6e:d4:ae:cf:21:1e:57:9a:5b:e6:b2:28:57:1d:
                    ca:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:44:51:DD:C7:5F:F4:87:DC:50:AE:BA:9A:BD:7E:2D:6B:A0:52:AA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9B5F892FE9811ED9D05AC4E4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:33:6a:42:b9:c6:54:9c:ca:c2:5f:fc:d1:51:25:83:f2:4f:
         a8:4b:8a:c8:7b:35:ee:1b:70:17:08:02:a2:08:58:35:d5:51:
         5e:db:0f:d1:64:69:c1:b6:9c:c2:21:b3:d2:f3:d9:41:5c:30:
         01:5a:bc:7e:8a:24:5f:9e:f5:b0:c1:0d:ee:fa:77:03:62:4a:
         90:e9:9c:ac:a7:23:1e:06:91:8c:80:e5:7e:19:31:aa:05:b6:
         d0:0c:72:40:23:7f:68:71:14:3f:ae:51:94:7c:59:52:f8:89:
         81:bb:5e:c0:45:ea:79:dd:73:d5:2e:ea:32:a9:ff:67:62:ab:
         9c:b9:d3:f7:c5:6a:43:4d:a8:27:51:a0:e0:0f:9b:47:f2:c3:
         07:c6:9d:8b:f1:a6:ee:25:70:03:8b:58:ed:2d:d4:71:87:76:
         dc:93:1e:d9:b0:fc:f7:24:88:6e:25:05:54:3f:37:c9:e4:3e:
         25:05:e8:bf:80:39:24:c6:3a:c2:3c:6f:6d:77:2d:82:4d:ba:
         e6:44:9f:89:eb:6d:3e:d9:39:c2:57:de:e6:7b:16:33:cf:5b:
         12:09:b3:fc:4c:59:28:94:78:47:4e:3d:e0:80:e5:3a:66:14:
         57:40:e8:36:e0:c4:67:dd:74:30:15:d9:6d:9a:d9:c6:85:eb:
         3d:6b:36:26
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICKEwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA1MzAwMzE5MjVaFw0yNDA1MTUwMzE5MjVaMBgxFjAU
BgNVBAMTDTY0NzU2YjQxLTdjZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcRyeuOl2nXiA4MNfp3ITgoEq9yYLFxtsNQqFLUHUJS5I0ul0HcYXu1peu
sbFlaJLIdmyPg7pjbiTN9Cs4L9WPmNP4jhzEiEy6W2GCQVz6fjs58z8ZAGLVNCvG
3NdX/qItZxqj5ASdUkhN5IDtVr0LNIarNX9fhBaL7QxvlBgoYzMGDjIvUeg7hIYQ
5/X3YexqzWcF5BSPtTdxMk+KgWgUhGAN1gqDLYcUYUqdySySeFWicu6WWTrd+jLU
MUpeHC5+jxT8micpWpvmOJQoaoLKbeTt92RuxtDkDGshXC3AOy61BkHNrJWy1HTp
wpKG1t5u1K7PIR5XmlvmsihXHconAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUdkRR
3cdf9IfcUK66mr1+LWugUqowHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0M5QjVGODkyRkU5ODExRUQ5RDA1QUM0RTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaz1IwDQYJKoZIhvcNAQEL
BQADggEBAFozakK5xlScysJf/NFRJYPyT6hLish7Ne4bcBcIAqIIWDXVUV7bD9Fk
acG2nMIhs9Lz2UFcMAFavH6KJF+e9bDBDe76dwNiSpDpnKynIx4GkYyA5X4ZMaoF
ttAMckAjf2hxFD+uUZR8WVL4iYG7XsBF6nndc9Uu6jKp/2diq5y50/fFakNNqCdR
oOAPm0fywwfGnYvxpu4lcAOLWO0t1HGHdtyTHtmw/PckiG4lBVQ/N8nkPiUF6L+A
OSTGOsI8b213LYJNuuZEn4nrbT7ZOcJX3uZ7FjPPWxIJs/xMWSiUeEdOPeCA5Tpm
FFdA6DbgxGfddDAV2W2a2caF6z1rNiY=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:20 2024 by rpki-client on console-ams.rpki-client.org