Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D41B818C5C6A11EEA10D266A4AD9E6FC.roa
File:                     D41B818C5C6A11EEA10D266A4AD9E6FC.roa (raw, json)
Hash identifier:          YsRSn/Pd76NpvfqXFYyl5nHZLZyYP04ly78LQHHwS1c=
Subject key identifier:   1E:62:69:38:C4:CC:12:C3:25:8D:64:46:C4:37:46:EF:C5:6E:8F:F3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       4204
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D41B818C5C6A11EEA10D266A4AD9E6FC.roa
Signing time:             Tue 26 Sep 2023 12:47:19 +0000
ROA not before:           Tue 26 Sep 2023 12:47:16 +0000
ROA not after:            Sat 28 Sep 2024 12:47:16 +0000
asID:                     5065
IP address blocks:        154.207.176.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16900 (0x4204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 26 12:47:16 2023 GMT
            Not After : Sep 28 12:47:16 2024 GMT
        Subject: CN=6512d2d7-f15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d0:c4:5e:e9:b5:2a:f7:fd:3a:b4:f7:5e:7d:
                    4e:bb:9b:e8:ed:56:aa:d6:80:81:72:cc:05:35:04:
                    68:ca:9f:65:ae:a6:3b:7f:d4:94:e1:ca:8e:09:58:
                    5a:8d:6f:d9:6f:cb:64:30:fe:09:59:98:8d:98:33:
                    ea:01:21:be:ef:48:e8:e7:e1:5f:91:6d:c0:de:90:
                    03:91:fe:0d:3a:4f:1a:7f:1e:79:18:08:3e:98:aa:
                    de:7a:9a:a6:56:83:9b:a9:ee:ac:be:4f:26:85:07:
                    e6:35:c3:76:84:bf:bc:08:f1:b3:61:9e:24:d2:ac:
                    fa:a5:81:86:6a:16:ec:2c:08:fa:a6:6e:da:af:e5:
                    c4:80:d0:0b:f9:66:0c:6e:34:38:24:41:a5:11:00:
                    f5:88:ac:60:db:d4:e9:aa:81:c0:63:c9:e8:d7:c9:
                    70:59:12:00:52:b8:64:da:79:b9:c0:08:41:3e:fd:
                    af:72:08:29:5b:54:47:5d:78:c8:7e:b2:b5:e9:04:
                    a8:17:e3:25:2e:84:b9:f5:2b:5b:2f:3b:a5:21:a5:
                    79:41:f0:dd:3c:62:72:20:16:1b:1a:e7:b8:5a:9f:
                    b3:c2:94:d6:d9:47:db:28:41:36:4a:aa:0a:05:22:
                    0c:59:fc:3f:4a:72:0b:41:59:dc:ef:29:54:5a:5a:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:62:69:38:C4:CC:12:C3:25:8D:64:46:C4:37:46:EF:C5:6E:8F:F3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D41B818C5C6A11EEA10D266A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a0:61:be:bb:79:2f:e9:48:f0:3a:b9:6e:9d:d6:86:a5:b0:e9:
         ee:85:2c:6b:5a:07:e0:e2:0c:37:b4:21:be:b5:5b:aa:68:2e:
         a1:0a:f2:8f:ec:53:13:06:cb:c3:ae:92:3c:a7:be:ef:08:1f:
         9e:3e:16:09:da:17:c2:dc:08:b7:1f:72:8d:8c:b9:60:3c:3e:
         2f:4f:17:aa:57:2c:b1:c9:f5:92:c4:9b:9a:69:7a:b3:cc:f1:
         11:0e:c0:37:be:b0:21:61:3c:17:59:c6:01:cb:cd:38:5e:4a:
         c7:74:b0:8d:41:8e:26:66:03:e0:78:d5:63:41:47:c1:49:0f:
         41:21:75:3f:1b:06:ef:c8:f5:9b:5f:d9:ca:f3:05:40:8e:f0:
         bf:91:14:43:b2:15:8f:67:fd:a8:b1:5a:28:e0:1a:48:26:ed:
         69:73:0c:ea:bc:27:86:23:a2:e1:e6:32:ea:58:0b:35:58:d6:
         53:b9:5f:8e:b3:85:7e:fc:1a:ed:1d:96:08:47:20:73:49:13:
         f8:8a:f2:a9:c7:43:90:ea:5c:95:a9:54:39:95:16:d5:f7:df:
         7f:45:de:65:14:35:55:62:b4:79:f0:70:95:be:34:71:de:65:
         31:af:09:a8:25:39:2e:c1:01:ba:3b:07:5a:f9:f7:e9:25:ac:
         d4:19:76:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:21 2024 by rpki-client on console-ams.rpki-client.org