Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E80988E2E78411EE92561DAB775412E6.roa
File:                     E80988E2E78411EE92561DAB775412E6.roa (raw, json)
Hash identifier:          RY4+IPMU5LC1/IOjTg1TLgBcIV5MK3qEMQ4dXqGm1Ok=
Subject key identifier:   98:17:98:43:EC:6F:3B:D2:42:75:51:DC:06:B0:47:EF:19:DC:2A:B3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A599
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E80988E2E78411EE92561DAB775412E6.roa
Signing time:             Thu 21 Mar 2024 13:14:11 +0000
ROA not before:           Thu 21 Mar 2024 13:14:08 +0000
ROA not after:            Tue 23 Apr 2024 13:14:08 +0000
asID:                     44559
IP address blocks:        154.210.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Apr 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42393 (0xa599)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 21 13:14:08 2024 GMT
            Not After : Apr 23 13:14:08 2024 GMT
        Subject: CN=65fc32a3-f2b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d1:39:e7:46:dd:23:b0:e1:9b:93:64:64:1a:
                    f6:27:5b:d2:7b:c4:33:28:b2:00:8c:92:fa:60:32:
                    8d:af:f5:bc:0c:f2:54:59:df:9c:5e:fd:d7:1a:44:
                    b2:89:a0:4d:a9:c2:7c:f2:22:37:30:38:18:31:00:
                    83:8a:da:80:1b:b9:69:8d:9b:b8:f9:88:bd:0d:f8:
                    2d:ec:c5:c7:88:c7:ee:a7:b7:22:1b:3b:c2:3f:53:
                    2d:c6:fa:bb:b5:74:d2:02:ac:5d:e3:70:17:83:c9:
                    07:05:7e:c2:2f:29:87:4e:0f:b8:53:67:ca:8e:cc:
                    0a:69:5b:14:61:b9:b5:4d:32:44:51:27:ae:11:c7:
                    80:9e:84:ac:94:07:4d:c5:b6:63:4b:87:6d:02:76:
                    f6:8c:84:fc:5e:b7:73:b9:98:b5:bb:db:30:e5:cd:
                    26:d9:f0:9d:88:7a:9d:be:2e:de:ad:17:ed:f2:63:
                    7b:a8:69:1f:5d:82:35:35:24:76:f7:a0:59:71:f5:
                    79:01:23:85:7b:3b:f7:29:9f:1a:bc:51:c6:1a:a1:
                    62:b6:b8:9a:94:76:f5:c9:58:18:ae:ea:62:3f:19:
                    97:f5:3c:ef:d4:db:ed:84:5f:88:af:c4:c3:8b:c7:
                    c1:b2:5d:6d:b1:43:3a:e0:08:ad:06:98:38:ed:67:
                    3d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:17:98:43:EC:6F:3B:D2:42:75:51:DC:06:B0:47:EF:19:DC:2A:B3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E80988E2E78411EE92561DAB775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:85:57:61:c6:95:5d:10:c0:b7:43:17:8e:9a:34:ab:67:24:
         64:e9:c4:b5:f6:30:24:1d:1b:c0:97:46:81:5f:3a:4b:d3:6d:
         a7:63:0b:6d:8d:d8:84:d6:a0:d4:31:ad:f1:c6:0a:28:cb:72:
         73:8e:87:cd:30:92:7e:1c:9d:c1:17:f7:e5:84:ab:3f:70:8c:
         a5:83:cc:a5:1a:3e:d0:89:1b:39:14:6d:0d:ce:db:a0:ef:66:
         5c:86:1d:a3:25:ac:00:16:50:e2:1c:e9:b1:1f:ac:30:ac:0a:
         2c:e6:ac:d0:3d:87:46:12:d5:58:e4:b1:87:58:cd:a8:44:58:
         0e:cf:5c:4b:28:a4:69:c1:ae:82:89:1b:8f:75:70:6c:de:f8:
         4b:63:c1:6a:38:26:48:6f:e2:cb:d2:70:68:8c:37:62:44:11:
         a8:8d:1d:39:ed:24:d2:80:1d:46:bb:a1:63:5b:d0:58:6e:43:
         3b:73:5b:72:b6:6f:d1:28:b1:24:e4:4c:aa:a2:ee:52:41:2f:
         18:e1:3d:90:ab:d8:1f:72:9f:fc:ea:62:f9:fc:32:eb:ba:5e:
         bd:d7:a9:ab:77:b6:f7:b8:4f:25:22:64:0f:37:94:20:89:08:
         c7:69:e3:22:92:cc:78:7b:2a:f1:21:84:32:86:7b:a0:58:84:
         61:58:2b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:26 2024 by rpki-client on console-ams.rpki-client.org