Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBB908727BA111EE97619C764AD9E6FC.roa
File:                     EBB908727BA111EE97619C764AD9E6FC.roa (raw, json)
Hash identifier:          /NS91PTz38cjHIvRIsb/uUdhLK+4S316MzXoViauHX4=
Subject key identifier:   DB:62:0D:DF:0E:B1:F0:66:76:FB:BC:A8:7C:40:3A:F9:BB:06:CB:07
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       4B38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBB908727BA111EE97619C764AD9E6FC.roa
Signing time:             Sun 05 Nov 2023 06:09:47 +0000
ROA not before:           Sun 05 Nov 2023 06:09:42 +0000
ROA not after:            Tue 05 Nov 2024 06:09:42 +0000
asID:                     133448
IP address blocks:        154.223.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19256 (0x4b38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  5 06:09:42 2023 GMT
            Not After : Nov  5 06:09:42 2024 GMT
        Subject: CN=654731ab-003e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:85:91:31:a0:27:33:f2:d4:69:4c:4a:75:63:
                    76:cb:5f:62:b1:6c:bf:a3:7d:30:97:dd:05:4c:22:
                    f8:38:ec:fc:70:57:cf:88:29:72:67:bd:ad:a9:c7:
                    11:8f:59:4a:43:65:0c:91:cf:24:d0:02:8b:6b:e7:
                    03:4b:03:82:4f:3b:8c:5e:9e:51:95:00:6e:e7:22:
                    03:77:76:8e:67:d0:18:64:0a:bc:95:ae:de:05:d9:
                    6f:63:c5:77:d3:1f:32:c2:d4:d0:41:05:1c:76:fb:
                    57:cb:c6:78:b8:6b:16:63:14:5e:77:7f:c9:b1:05:
                    d6:80:cd:c4:11:35:ae:2a:79:3a:6b:2b:9e:b3:c1:
                    13:d7:5f:a9:d4:1f:99:6a:f5:1f:0f:84:90:20:64:
                    34:ed:95:e2:33:ad:31:1d:9e:e8:e9:8d:d0:08:6f:
                    05:ed:36:8e:a7:3f:88:6d:64:a8:62:35:3d:63:2a:
                    46:60:86:05:e3:07:59:e2:27:4c:93:c0:bf:c8:f4:
                    54:b7:87:09:d6:43:74:8f:57:c0:f2:6b:2b:52:ba:
                    0a:b2:e9:b0:3c:ef:78:1e:37:7c:91:1b:e1:82:bc:
                    62:51:39:a5:bf:34:c5:18:38:7f:67:44:4b:7c:e6:
                    33:e5:8b:00:05:e6:44:02:0a:05:e8:81:92:ef:57:
                    69:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:62:0D:DF:0E:B1:F0:66:76:FB:BC:A8:7C:40:3A:F9:BB:06:CB:07
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBB908727BA111EE97619C764AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:61:02:6f:3a:55:ab:89:2f:81:2a:a9:12:18:32:9a:f3:61:
         8c:08:58:ec:84:70:39:25:91:9a:e3:02:1a:cf:7c:a9:69:6d:
         0a:cd:dd:e5:df:04:23:e1:ad:7f:93:e1:20:07:82:32:79:bb:
         39:e7:c8:15:6a:11:c5:ae:3f:c0:82:d1:6a:72:df:d1:f7:12:
         d5:e2:2b:0d:5c:d8:b2:99:b6:ed:18:53:b3:b4:f8:e8:9b:de:
         1b:9d:53:86:93:05:b9:21:df:74:37:ce:c1:73:a2:90:f7:f3:
         d1:b7:d0:9d:fd:a3:c7:27:d4:9b:9d:06:43:19:ab:56:e2:0b:
         b4:a0:3b:79:9f:0b:ee:07:0f:60:46:18:b5:d7:47:4e:51:dc:
         45:bd:00:8a:5c:b1:65:6e:8c:e4:74:2d:f5:41:ae:c2:15:1a:
         57:61:4f:6d:6f:52:ba:8a:eb:e4:1d:09:d3:60:16:2e:76:b6:
         6d:d7:95:e8:80:f2:3d:81:33:9f:87:cf:0e:d0:1d:d3:f8:ec:
         79:d2:41:29:35:68:cf:ae:87:23:e1:25:32:80:89:98:ff:d0:
         80:27:19:f8:fd:5c:b6:d5:23:3f:41:54:85:80:a5:9c:34:85:
         67:7c:61:9d:30:df:ab:ac:71:4f:18:44:5c:92:6b:f3:21:c8:
         f5:ba:99:aa
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICSzgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMDUwNjA5NDJaFw0yNDExMDUwNjA5NDJaMBgxFjAU
BgNVBAMTDTY1NDczMWFiLTAwM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDchZExoCcz8tRpTEp1Y3bLX2KxbL+jfTCX3QVMIvg47PxwV8+IKXJnva2p
xxGPWUpDZQyRzyTQAotr5wNLA4JPO4xenlGVAG7nIgN3do5n0BhkCryVrt4F2W9j
xXfTHzLC1NBBBRx2+1fLxni4axZjFF53f8mxBdaAzcQRNa4qeTprK56zwRPXX6nU
H5lq9R8PhJAgZDTtleIzrTEdnujpjdAIbwXtNo6nP4htZKhiNT1jKkZghgXjB1ni
J0yTwL/I9FS3hwnWQ3SPV8DyaytSugqy6bA873geN3yRG+GCvGJROaW/NMUYOH9n
REt85jPliwAF5kQCCgXogZLvV2kBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU22IN
3w6x8GZ2+7yofEA6+bsGywcwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0VCQjkwODcyN0JBMTExRUU5NzYxOUM3NjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa3wEwDQYJKoZIhvcNAQEL
BQADggEBAJ9hAm86VauJL4EqqRIYMprzYYwIWOyEcDklkZrjAhrPfKlpbQrN3eXf
BCPhrX+T4SAHgjJ5uznnyBVqEcWuP8CC0Wpy39H3EtXiKw1c2LKZtu0YU7O0+Oib
3hudU4aTBbkh33Q3zsFzopD389G30J39o8cn1JudBkMZq1biC7SgO3mfC+4HD2BG
GLXXR05R3EW9AIpcsWVujOR0LfVBrsIVGldhT21vUrqK6+QdCdNgFi52tm3XleiA
8j2BM5+Hzw7QHdP47HnSQSk1aM+uhyPhJTKAiZj/0IAnGfj9XLbVIz9BVIWApZw0
hWd8YZ0w36uscU8YRFySa/MhyPW6mao=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:23 2024 by rpki-client on console-ams.rpki-client.org