Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE6808F809B911EEA5DD427F4AD9E6FC.roa
File:                     DE6808F809B911EEA5DD427F4AD9E6FC.roa (raw, json)
Hash identifier:          14lIj/l5aw75LFqsHL+JYuolX25dTGg2J0iS2BFo/Cw=
Subject key identifier:   45:A0:80:6C:35:0C:7B:E3:61:CF:84:4F:83:08:1A:0A:24:44:1A:95
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2B81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE6808F809B911EEA5DD427F4AD9E6FC.roa
Signing time:             Tue 13 Jun 2023 07:14:00 +0000
ROA not before:           Tue 13 Jun 2023 07:13:56 +0000
ROA not after:            Sat 15 Jun 2024 07:13:56 +0000
asID:                     138678
IP address blocks:        154.202.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11137 (0x2b81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 13 07:13:56 2023 GMT
            Not After : Jun 15 07:13:56 2024 GMT
        Subject: CN=64881738-c964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:17:72:f5:81:c2:93:18:85:05:d6:b5:8e:16:
                    44:42:76:2e:65:fb:38:0b:96:32:e7:82:6e:7b:7a:
                    5f:77:9a:25:2b:7d:14:0f:0c:1e:b1:16:ff:a5:fa:
                    2c:e5:3a:e0:3b:cc:44:3c:43:cd:bd:f4:31:ae:66:
                    a8:15:b2:65:60:a8:d0:f9:80:3d:da:61:55:a0:c0:
                    13:f3:5b:2f:85:d7:10:91:1d:f6:60:ff:f6:7b:53:
                    51:fa:a8:a7:f9:8f:2e:f6:7e:b4:7a:9f:2f:ae:1a:
                    20:88:52:a2:43:5d:26:56:18:9d:a6:d7:0b:ab:f9:
                    57:ea:5b:4f:46:41:a0:4f:25:b5:c1:69:77:e4:c9:
                    d1:5c:e4:c1:58:b3:ef:bd:e0:d7:db:ed:14:52:fb:
                    f6:b1:ab:3c:33:9c:ef:8c:b4:7a:67:bf:52:dc:39:
                    75:bc:04:69:ac:f5:8f:97:c6:f3:7b:67:61:b3:a4:
                    6a:e4:17:5a:f8:31:5d:63:2a:d5:ff:e3:55:62:ca:
                    94:a6:2f:0d:52:05:82:7b:d9:d1:3e:b0:ca:1d:a0:
                    34:18:ea:a4:48:c9:de:c0:e6:3f:45:be:83:fc:18:
                    cb:94:f9:0a:08:ee:f3:98:4c:88:8a:07:33:dc:c0:
                    83:ab:19:6b:9c:17:81:1e:3c:bd:7d:6a:fb:02:88:
                    a2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A0:80:6C:35:0C:7B:E3:61:CF:84:4F:83:08:1A:0A:24:44:1A:95
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE6808F809B911EEA5DD427F4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:35:04:6b:cc:3a:60:29:05:af:98:c7:f0:6b:09:b9:f7:e2:
         9f:f9:64:1f:84:9d:58:6e:8a:31:de:56:b2:ca:21:e7:25:4f:
         d4:36:e3:e2:da:3c:2a:e9:9b:1b:89:85:11:ab:b7:2e:d5:64:
         28:2e:12:1e:7c:14:da:c2:c4:bf:52:cd:54:48:cd:07:cd:33:
         96:3e:75:fa:23:3e:04:fb:94:d9:fb:8f:d5:14:58:0e:c3:97:
         69:10:05:76:32:6a:a2:9a:66:ee:7f:af:89:dc:05:77:80:d8:
         1e:2f:76:4f:f4:bf:63:65:3c:fb:8f:32:a0:01:63:36:fa:fe:
         69:f3:43:ab:b5:91:0e:26:e1:d4:a3:f6:2a:67:41:6c:41:89:
         3b:a5:dc:bd:4b:84:1a:a9:9a:1b:86:6a:13:ae:9c:3e:db:a0:
         a5:a4:af:24:44:bf:39:79:f1:bc:d0:21:0a:b6:cd:3b:87:28:
         d4:88:66:83:27:f4:fd:06:81:89:1c:64:b2:fd:b7:f7:6e:04:
         e8:b9:20:0e:cb:c1:9e:98:b8:20:9e:75:20:5c:46:6d:b6:87:
         cc:1e:98:57:25:81:8d:92:da:d5:08:5b:71:f9:b9:8c:90:3d:
         19:5e:10:c0:7e:da:ce:a0:80:1e:f2:2b:db:e3:1e:fc:56:1a:
         3b:44:a9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:41 2024 by rpki-client on console-fra.rpki-client.org