Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA7B7256F91611ED8D8AB1164AD9E6FC.roa
File:                     DA7B7256F91611ED8D8AB1164AD9E6FC.roa (raw, json)
Hash identifier:          VImGn6fVdLC/9cF0ikmhfKJuh805hpCfqos46QEdthE=
Subject key identifier:   C0:0F:AE:A4:88:7B:6B:3B:9B:DA:A1:46:9C:7B:65:60:F8:7A:60:46
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2636
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA7B7256F91611ED8D8AB1164AD9E6FC.roa
Signing time:             Tue 23 May 2023 03:06:47 +0000
ROA not before:           Tue 23 May 2023 03:06:44 +0000
ROA not after:            Wed 15 May 2024 03:06:44 +0000
asID:                     399674
IP address blocks:        154.94.200.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9782 (0x2636)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 23 03:06:44 2023 GMT
            Not After : May 15 03:06:44 2024 GMT
        Subject: CN=646c2dc7-0dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:18:37:22:0c:8e:11:96:fb:b1:04:cf:94:
                    a2:97:9e:d6:ba:86:b1:c6:a1:c7:d9:0c:4e:ce:c6:
                    26:f5:ee:da:49:b1:9b:1e:46:58:f5:44:f8:a6:7e:
                    84:15:7f:38:91:2e:62:79:bb:b9:c1:d4:f9:97:61:
                    d6:fd:68:22:6c:69:94:63:28:3e:c6:6f:ad:b0:8e:
                    32:28:a7:6a:8f:2a:e0:88:b7:c4:92:bc:93:76:27:
                    c6:0c:87:14:2f:5a:d7:ef:80:54:17:ba:e8:96:83:
                    95:de:47:2a:96:80:3f:50:c4:d4:43:aa:df:aa:f7:
                    fb:25:29:8d:6e:ae:8a:09:eb:8f:53:68:ff:a3:8d:
                    8d:fa:8d:8b:ea:8d:ff:35:39:f9:77:b6:17:15:fb:
                    44:7b:67:4e:57:9e:47:30:e6:15:3b:f8:39:0b:2e:
                    12:93:bb:d7:8f:db:25:c5:0b:19:bf:c6:4c:7b:bd:
                    31:af:00:2a:76:d6:24:e2:ab:72:bb:d5:4b:7c:86:
                    d4:cd:a9:f4:77:27:29:a0:5d:62:cb:ae:78:2f:49:
                    9f:d8:cf:05:7c:d0:6e:ff:c9:fa:12:33:d6:cc:1c:
                    52:61:38:48:d6:99:64:13:61:e9:6e:47:ca:6c:22:
                    98:7d:89:a5:e8:a8:5c:eb:ee:0a:89:76:be:bd:89:
                    60:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0F:AE:A4:88:7B:6B:3B:9B:DA:A1:46:9C:7B:65:60:F8:7A:60:46
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA7B7256F91611ED8D8AB1164AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:3a:4d:a3:23:40:f9:4d:00:a5:96:e5:6c:30:19:ba:c4:1d:
         27:50:20:bf:7c:b1:08:38:40:98:c9:f2:4c:c7:32:b6:59:a7:
         f6:ac:ad:29:4a:0d:28:41:83:17:05:99:70:f0:c4:85:cc:ee:
         bc:9f:5e:c8:6e:2a:e0:53:b8:70:70:1a:12:99:0a:67:15:bf:
         2d:ad:23:0f:93:e5:d1:36:ae:7a:c5:aa:fc:72:37:9b:fc:aa:
         62:53:33:ce:54:5d:1e:5b:74:41:f6:c0:c4:95:d8:c8:d7:51:
         df:ab:6e:21:51:c0:e8:6f:39:4b:a9:b2:8d:55:95:9d:39:97:
         72:4e:0c:14:f1:b9:04:cb:19:83:0b:25:ce:9a:94:1a:a1:df:
         f5:c1:f7:03:7c:72:9c:c5:be:2c:e6:59:5f:eb:70:f4:1a:4d:
         c1:26:ee:1f:7a:56:bb:05:83:b0:48:92:79:7d:ff:4a:04:9d:
         a1:8a:ff:d4:b8:26:6b:db:90:a8:bd:f7:8e:1a:37:b2:22:67:
         af:90:c0:2e:5d:e3:a8:a9:44:46:c3:a7:de:a5:2a:db:fd:38:
         ce:2c:53:f7:b3:13:46:fa:cb:06:65:4f:dd:9a:4a:e2:fc:6b:
         5d:77:2b:5f:bc:2b:e7:15:09:87:f8:d6:b4:1a:e2:78:56:1e:
         fe:16:03:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:22 2024 by rpki-client on console-ams.rpki-client.org