Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2513D6E09B811EEB650107C4AD9E6FC.roa
File:                     E2513D6E09B811EEB650107C4AD9E6FC.roa (raw, json)
Hash identifier:          h3QGceA8U1TcyQCSARnZFDwm+fupBhX7kJ/faAb8ly8=
Subject key identifier:   6F:17:DE:EA:D8:98:7E:63:9D:A6:54:4A:A8:94:E7:80:6A:BF:34:28
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2B71
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2513D6E09B811EEB650107C4AD9E6FC.roa
Signing time:             Tue 13 Jun 2023 07:06:57 +0000
ROA not before:           Tue 13 Jun 2023 07:06:53 +0000
ROA not after:            Sat 15 Jun 2024 07:06:53 +0000
asID:                     134687
IP address blocks:        154.93.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11121 (0x2b71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 13 07:06:53 2023 GMT
            Not After : Jun 15 07:06:53 2024 GMT
        Subject: CN=64881591-2d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:85:00:14:a9:ec:8e:4c:e6:cf:14:29:cb:19:
                    16:16:49:ed:a1:ed:63:0c:57:b3:6a:49:44:3d:6d:
                    aa:03:5f:da:58:fc:03:95:82:e0:50:e8:fc:69:e9:
                    cb:57:7b:c0:b4:56:39:cd:c8:91:5b:90:a9:52:f6:
                    4c:2c:2f:f6:ba:4b:e7:37:2a:3f:a2:d2:ee:ac:21:
                    31:b0:d1:9b:3d:61:bc:86:af:4e:d2:17:46:d8:57:
                    b2:8f:81:61:15:e9:2c:9d:6c:e7:50:65:1e:f9:0b:
                    19:2c:e8:0b:46:45:d1:61:68:5f:9c:02:89:d0:17:
                    4c:97:aa:09:e8:e2:cb:56:3e:65:f3:18:f9:ea:33:
                    c9:ce:d1:3a:ba:e6:21:06:69:b2:97:a5:4b:f3:a3:
                    eb:5b:3b:a5:32:dc:03:73:35:6f:a0:20:11:05:28:
                    1e:de:f9:00:c2:64:fc:86:69:ab:46:61:27:2a:cd:
                    47:a8:59:76:39:6c:f8:8b:ca:c0:2c:e9:e6:7c:42:
                    8f:06:d7:28:60:42:cb:22:22:ee:18:9a:a4:09:da:
                    52:68:ff:52:ec:da:99:0c:f4:15:62:f9:85:7a:05:
                    1b:01:5d:f3:e1:bd:dd:79:c1:28:06:11:de:11:bb:
                    c0:5d:a6:e1:62:83:39:db:62:ed:90:80:d0:30:86:
                    74:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:17:DE:EA:D8:98:7E:63:9D:A6:54:4A:A8:94:E7:80:6A:BF:34:28
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2513D6E09B811EEB650107C4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:30:98:e0:59:40:2c:4b:5b:ef:78:41:c1:53:ff:ad:25:63:
         6d:cd:60:1c:a3:66:cf:72:8d:28:c7:0a:c4:a7:4b:2e:11:3b:
         ee:b7:2f:60:c8:c2:74:fe:70:de:a8:99:fe:1e:b4:36:2e:24:
         9f:66:83:3c:5a:7e:8c:1b:30:f4:4b:2f:64:b3:74:56:f2:05:
         74:df:06:38:41:f6:d1:9b:83:f1:bb:98:b8:4b:84:7b:b5:fd:
         8d:f2:ff:d2:65:45:6d:0f:70:fc:d8:1d:87:99:66:c8:8d:60:
         c0:b1:15:a8:b3:4f:6a:7d:92:3c:a5:34:1a:b1:05:3f:8f:df:
         df:80:ca:62:78:d3:01:6b:48:05:24:3a:0d:38:a8:e3:3f:55:
         07:e4:bf:85:f4:ba:c3:5d:11:3b:37:38:36:66:2e:f8:22:39:
         79:2e:a8:f1:22:8c:26:a7:7d:a5:5a:e0:cc:e7:b0:47:00:30:
         0e:75:4b:c3:e8:6f:c1:c9:86:8b:03:52:03:45:60:81:be:bc:
         15:83:26:3c:96:f3:60:78:22:45:94:b3:71:13:f3:c9:2f:3f:
         99:8a:65:e1:b9:de:5b:aa:fe:8d:8e:30:ef:f8:c1:ee:36:00:
         17:d4:8b:a4:70:60:96:f9:5f:14:d9:15:51:f7:08:d4:b7:22:
         f8:9e:24:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:41 2024 by rpki-client on console-fra.rpki-client.org