Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0CFCF92460C11EE985BBC194AD9E6FC.roa
File:                     E0CFCF92460C11EE985BBC194AD9E6FC.roa (raw, json)
Hash identifier:          gYb2vgqA3d/efN/1r4djhSgda7hdLTG/SztZuXQucqQ=
Subject key identifier:   33:F1:15:67:E6:3A:1C:45:23:36:2B:B8:7E:64:3E:9D:60:BD:A3:F2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       3A02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0CFCF92460C11EE985BBC194AD9E6FC.roa
Signing time:             Tue 29 Aug 2023 01:39:22 +0000
ROA not before:           Tue 29 Aug 2023 01:39:19 +0000
ROA not after:            Sat 31 Aug 2024 01:39:19 +0000
asID:                     132513
IP address blocks:        154.210.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14850 (0x3a02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 29 01:39:19 2023 GMT
            Not After : Aug 31 01:39:19 2024 GMT
        Subject: CN=64ed4c4a-b726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:b8:8e:36:ff:f2:b5:eb:7f:e6:22:e0:90:
                    55:d1:b8:d6:f0:14:f3:1c:11:b0:15:2a:48:f7:46:
                    f2:a5:9b:0e:e0:d7:a1:f7:d6:09:d1:40:5e:9e:d0:
                    b6:21:88:c0:b8:10:16:a6:09:c0:2a:ea:9a:8a:3d:
                    53:2e:fc:61:33:12:ab:ed:78:b2:1e:7b:9f:40:25:
                    8d:b3:cc:b5:96:73:31:2d:ab:52:c6:9a:cf:0a:48:
                    e4:c4:11:db:9a:b1:65:15:57:d1:bd:a8:20:01:99:
                    6a:f6:d7:b5:c7:d0:6c:20:ee:cf:67:2e:1c:29:e8:
                    00:87:4b:52:f7:73:68:4e:6c:09:c0:d5:03:5c:a3:
                    7f:b3:4e:7d:a3:e3:10:b7:3e:5a:08:3a:dd:72:94:
                    8e:c7:90:5f:88:9b:1d:bf:ed:5f:11:c4:98:6b:5a:
                    f9:c4:bf:f6:d4:0f:77:2e:2c:42:44:87:ec:76:ed:
                    4a:d0:65:e9:33:6c:f0:c3:1d:97:51:0e:d3:b8:49:
                    22:b2:c3:80:e9:31:fc:8a:4a:0a:d0:e1:f0:a0:aa:
                    4f:3f:3f:a7:f4:cf:9a:87:ce:c0:02:03:38:7b:83:
                    76:36:e1:36:fb:d7:3d:9a:a9:8a:7a:ee:ef:57:5b:
                    57:2d:2e:4c:69:33:fa:e5:4b:1b:aa:d1:0e:a8:39:
                    ee:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F1:15:67:E6:3A:1C:45:23:36:2B:B8:7E:64:3E:9D:60:BD:A3:F2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0CFCF92460C11EE985BBC194AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:c3:44:b3:85:30:79:3d:e5:4d:7d:5c:4a:b2:2c:d4:cc:44:
         d1:0c:a7:24:22:f7:82:a1:77:ed:4a:76:d1:92:56:63:f7:ac:
         34:06:54:34:65:8c:e5:52:d0:41:1a:5c:4c:12:42:ee:e7:38:
         b6:f0:ef:b8:be:79:f2:71:86:25:23:60:2e:7f:96:7f:60:8f:
         a0:61:52:5d:82:ad:5b:d9:a8:df:61:25:26:86:3c:11:77:20:
         30:55:ae:22:99:fe:7b:df:b8:66:c3:81:e4:dd:53:97:b8:9d:
         04:bb:11:02:3b:25:54:47:73:aa:85:20:d4:9d:07:8c:1f:4d:
         21:01:45:6d:b8:38:2e:5c:6b:a1:43:97:d0:29:ac:90:29:fe:
         26:35:9f:60:c8:66:9d:67:ad:8a:5d:23:16:9f:8f:d9:f9:d0:
         d4:0a:5f:37:f8:3c:b1:c8:9d:7f:9a:a3:fc:78:08:12:25:0e:
         58:14:8f:29:53:2e:a0:6e:6d:06:0d:80:93:fa:94:58:18:f4:
         ee:46:1d:0f:a3:23:ad:b3:f7:b5:5c:8f:7c:83:6d:83:55:1f:
         93:55:fd:75:d1:51:d3:96:5e:a9:87:0f:76:c3:ec:38:36:2d:
         ba:f9:8c:20:67:56:bc:f2:44:60:4c:76:a6:04:38:bd:14:2d:
         5f:ee:62:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:41 2024 by rpki-client on console-fra.rpki-client.org