Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7696BF8E78711EE91DD42C1775412E6.roa
File:                     D7696BF8E78711EE91DD42C1775412E6.roa (raw, json)
Hash identifier:          ODnnYg2MYwq7mKu2v0trZ6uW8bAQFP0hEiWaTZstvqY=
Subject key identifier:   A0:40:5F:FD:11:31:A9:45:E1:06:69:67:CF:CF:99:4D:22:2F:85:04
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A5B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7696BF8E78711EE91DD42C1775412E6.roa
Signing time:             Thu 21 Mar 2024 13:35:12 +0000
ROA not before:           Thu 21 Mar 2024 13:35:08 +0000
ROA not after:            Tue 23 Apr 2024 13:35:08 +0000
asID:                     44559
IP address blocks:        154.210.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Apr 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42423 (0xa5b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 21 13:35:08 2024 GMT
            Not After : Apr 23 13:35:08 2024 GMT
        Subject: CN=65fc378f-4d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f9:bc:80:83:50:43:3c:10:89:f1:05:b4:c5:
                    1f:b5:2e:8c:cd:af:3f:04:d5:86:2f:1e:23:8f:72:
                    c4:cd:6c:a5:a3:79:de:c5:80:94:e0:40:10:9d:de:
                    b7:c4:b3:b7:f1:58:3d:23:76:db:4c:b0:9d:92:52:
                    56:31:c2:f6:91:fd:e8:bd:9f:69:80:98:d3:2b:75:
                    f5:40:97:dc:73:b6:f3:82:39:6b:03:12:49:ce:f8:
                    d3:f2:09:a8:e4:67:7c:ce:6e:b1:47:f6:9e:e9:e7:
                    13:dc:32:0c:6e:93:f1:58:65:87:ba:ba:76:19:b3:
                    5d:88:c4:fa:42:7f:2a:20:fe:67:ea:73:40:26:65:
                    d9:02:5b:48:96:91:63:95:87:3a:a9:69:f2:9c:44:
                    99:21:5b:25:bf:90:3a:b8:d9:6d:ab:84:c6:d9:94:
                    2e:5a:e3:b5:9b:67:94:8c:5a:f6:c1:94:01:ba:49:
                    37:e0:a3:f9:b8:aa:b4:73:44:f9:28:01:ff:c2:74:
                    a4:a3:b3:a5:5c:e5:2c:66:a8:3b:5b:58:01:f8:f9:
                    26:8e:14:6a:cc:c2:e6:25:ce:b8:21:ca:d1:d1:87:
                    4f:2c:76:d8:cb:a0:a7:34:44:e0:9e:87:55:3d:f6:
                    a2:35:49:e6:72:4d:c1:fc:99:ce:3a:a1:c1:76:79:
                    51:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:40:5F:FD:11:31:A9:45:E1:06:69:67:CF:CF:99:4D:22:2F:85:04
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7696BF8E78711EE91DD42C1775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:51:09:94:07:dd:20:a1:96:43:d9:ac:21:62:2c:a2:1c:48:
         ed:d3:77:c6:9c:be:2d:b0:ce:cb:ce:14:09:23:8b:4a:2e:d4:
         e2:a1:0d:f5:3a:af:aa:34:37:dd:cf:2a:dc:8a:6a:ae:6d:1e:
         3f:b8:d2:88:9f:fe:08:48:a2:4b:45:d0:60:7d:92:be:ba:49:
         47:5c:0d:44:4b:46:88:24:b5:54:85:6e:b3:d5:00:f0:13:46:
         cb:0b:58:6f:18:9a:62:19:40:38:e0:43:07:d5:88:92:4c:48:
         f0:95:12:6b:f3:3a:85:3f:16:29:af:0c:40:c7:70:d1:14:81:
         25:60:4b:eb:8c:b1:74:97:58:d3:b0:bb:79:e9:6c:cc:1c:5d:
         80:7d:55:1e:39:35:01:aa:0a:70:6d:b1:39:d0:ef:16:58:61:
         dc:05:a8:f3:68:56:ab:c4:6b:97:23:0a:ae:16:a0:e8:95:26:
         f1:c4:3e:05:53:aa:2f:2f:3c:d7:58:73:68:03:c6:27:86:49:
         ef:62:ef:95:e1:3f:e9:2a:77:3b:50:3d:24:3f:8f:39:99:7c:
         d7:39:ba:00:ef:e0:71:37:1c:76:97:d8:1a:8f:fb:a3:76:4e:
         5b:a9:fb:94:d8:87:52:32:99:c6:a5:f7:4e:0a:3c:cc:8c:86:
         9e:68:9c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:25 2024 by rpki-client on console-fra.rpki-client.org