Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1B4E75286AE11EE8CA19B4C4AD9E6FC.roa
File:                     E1B4E75286AE11EE8CA19B4C4AD9E6FC.roa (raw, json)
Hash identifier:          IuSFayKVsiUgbap1JjhcM+G4yOA1TyZ9HzKx67rRlkw=
Subject key identifier:   FE:E3:D8:C8:2A:FC:1A:41:73:C9:A3:2E:76:8A:F6:A4:88:0F:6D:0C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       5111
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1B4E75286AE11EE8CA19B4C4AD9E6FC.roa
Signing time:             Sun 19 Nov 2023 07:40:16 +0000
ROA not before:           Sun 19 Nov 2023 07:40:13 +0000
ROA not after:            Sat 11 May 2024 07:40:13 +0000
asID:                     140403
IP address blocks:        154.81.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20753 (0x5111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 19 07:40:13 2023 GMT
            Not After : May 11 07:40:13 2024 GMT
        Subject: CN=6559bbe0-d02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:05:65:da:4d:7d:ba:d6:4e:4f:62:41:a1:46:
                    b2:11:f0:a0:ac:04:33:82:37:5e:f8:4d:40:c5:b8:
                    83:af:6b:c4:19:bc:1d:36:3b:5f:d9:c7:3c:4f:cf:
                    ac:7e:15:2e:41:37:37:86:27:4d:4f:73:e0:36:06:
                    ac:9f:2c:ee:5f:4d:70:02:a2:36:02:ad:af:5c:15:
                    19:cb:96:59:7a:bc:ee:03:46:58:a0:d7:bb:a7:7a:
                    1f:a1:07:70:81:05:3f:41:69:47:83:fd:74:13:cf:
                    71:02:9e:47:5f:50:17:a6:b7:ea:1b:be:1a:7e:51:
                    b7:06:54:fa:49:af:99:26:f0:0a:c7:51:49:d4:4a:
                    9d:98:23:74:53:f5:f8:6d:3d:6d:21:d1:20:ba:71:
                    e2:34:2c:4e:e6:70:46:88:d3:8e:47:e1:0d:7d:1d:
                    58:3c:d6:9b:6b:3a:09:15:11:b3:c4:0d:0d:d3:d6:
                    f3:1f:4d:86:cd:9a:02:1f:33:8a:31:cd:d8:cd:a4:
                    5e:07:33:60:6a:70:6e:98:10:ab:8d:87:6f:d8:d4:
                    f9:d0:00:cf:b7:04:f0:16:19:c5:42:8c:4d:25:9e:
                    1d:e8:00:14:56:cc:9f:38:e2:1a:6e:25:38:83:a6:
                    23:a2:4a:30:33:26:5f:9d:17:5a:51:b3:80:68:3a:
                    ae:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E3:D8:C8:2A:FC:1A:41:73:C9:A3:2E:76:8A:F6:A4:88:0F:6D:0C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1B4E75286AE11EE8CA19B4C4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:d6:d3:47:f0:0d:36:87:b3:c8:4f:37:42:cc:50:a8:8b:01:
         cd:3c:2b:78:25:78:c5:84:54:f4:c8:24:c8:9b:36:a2:7b:56:
         d7:83:a5:91:ea:28:6d:71:8b:02:14:13:d9:36:75:10:58:f1:
         f3:96:f6:e6:1f:bd:bc:ed:c1:4c:61:e7:9a:c2:ed:83:b0:10:
         44:c6:00:40:c8:ed:fd:44:8e:c0:c1:da:bb:5a:5c:5c:ae:4f:
         c0:3f:01:84:a7:2d:09:16:3c:19:fe:5f:b1:7a:94:c9:68:05:
         21:bc:57:85:7d:3a:bd:f7:c3:12:20:c6:0b:80:5e:64:ae:66:
         f8:15:c5:f0:8f:e1:dd:71:59:46:dc:3a:53:2a:01:6d:19:9e:
         20:d7:aa:95:4a:af:b6:b7:1e:4b:02:2b:cc:9c:34:10:5f:fd:
         8a:20:9a:34:09:5c:8f:4c:f6:a3:f8:f7:82:eb:b7:a5:a3:ec:
         64:b4:61:df:09:1a:a1:c0:bd:bb:b8:4b:98:ee:3d:8d:a9:95:
         f1:ea:33:37:0f:3b:47:c2:c9:b5:ee:16:e1:1c:c0:a3:21:e5:
         9f:95:c8:21:9f:c6:db:fc:da:db:b2:2e:d4:cd:9c:8f:aa:b8:
         58:6b:09:2b:aa:cd:7e:61:ef:e6:e7:f8:e5:39:d0:75:34:ad:
         dd:6e:1b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:22 2024 by rpki-client on console-ams.rpki-client.org