Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBE1DDEAF91711ED9705521A4AD9E6FC.roa
File:                     EBE1DDEAF91711ED9705521A4AD9E6FC.roa (raw, json)
Hash identifier:          mnCP2Z2HXuYkGjcmyzOSWan+ZOkvBwz7sOyXbrseik8=
Subject key identifier:   D7:5F:F7:01:FF:A5:6F:D3:73:D0:97:8F:25:A4:C7:B7:66:3E:DF:ED
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       264A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBE1DDEAF91711ED9705521A4AD9E6FC.roa
Signing time:             Tue 23 May 2023 03:14:26 +0000
ROA not before:           Tue 23 May 2023 03:14:22 +0000
ROA not after:            Tue 20 Aug 2024 03:14:22 +0000
asID:                     399674
IP address blocks:        154.205.216.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9802 (0x264a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 23 03:14:22 2023 GMT
            Not After : Aug 20 03:14:22 2024 GMT
        Subject: CN=646c2f92-af6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:71:3c:e1:66:c8:89:bb:5d:0b:27:c7:8f:ee:
                    fd:65:65:a3:66:5e:b6:e6:31:21:c7:be:a2:6b:d9:
                    c6:ca:4b:44:33:80:80:67:13:2f:87:ed:8a:81:03:
                    a0:8f:69:29:a5:8b:e6:b0:a9:12:19:7f:ab:ff:43:
                    ad:8a:18:7b:71:3b:8f:d1:b4:48:00:45:b8:c2:6a:
                    51:20:1d:e5:1b:0a:8d:12:8a:d2:a3:b7:9f:58:62:
                    43:70:64:aa:ba:9e:63:b5:30:9c:30:a1:67:33:5d:
                    f5:46:6a:f3:43:81:c7:76:9a:eb:e6:6a:64:72:5c:
                    3e:e4:b9:bc:cd:18:58:4e:a2:26:05:80:1e:c4:99:
                    57:7c:9c:71:9f:b0:d1:88:07:4f:ec:33:e2:2e:74:
                    e9:70:26:f4:21:fd:4d:ed:9e:fd:0a:91:b3:11:a6:
                    e7:c0:21:5f:cb:97:88:02:7f:11:a6:03:32:8d:02:
                    56:5c:ed:a1:15:f9:9d:19:e9:93:37:9e:8d:34:3f:
                    18:45:a0:f6:d9:b0:0a:f6:a2:cc:30:e7:a5:89:1e:
                    a2:60:7e:3d:4a:ce:a0:9a:62:91:c5:b5:fa:c2:64:
                    7e:c0:f2:71:d2:e0:07:95:4d:2f:17:cd:71:aa:63:
                    c1:9a:03:fa:1f:a7:0d:63:2e:f1:94:ce:d8:bf:ae:
                    5b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5F:F7:01:FF:A5:6F:D3:73:D0:97:8F:25:A4:C7:B7:66:3E:DF:ED
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBE1DDEAF91711ED9705521A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:07:49:aa:2d:b0:66:1f:26:aa:03:b5:4a:11:96:d2:69:44:
         9c:d1:24:e7:75:22:da:97:5c:81:ec:5b:7a:ba:f6:55:2c:48:
         a6:0d:9f:31:6d:ed:fd:38:b4:81:0e:72:fe:2b:dc:f3:92:5f:
         f8:9a:bd:eb:1c:de:8b:92:65:9c:48:18:1a:8f:4a:ab:bd:5c:
         fd:65:c0:b0:48:e7:f1:b7:3c:f4:ce:96:71:4a:28:1e:f2:2f:
         75:fc:a1:bc:c6:cc:5f:99:e2:76:75:34:00:09:fa:e2:a1:1a:
         71:0a:ea:bf:5c:72:08:7f:57:32:cf:f0:be:69:7a:0c:c7:f1:
         2d:51:d5:67:4f:25:fe:e1:d7:c3:21:49:d1:99:94:ca:96:e1:
         0d:81:cd:1c:03:ff:5b:8b:2f:83:fc:f2:42:59:69:4d:d8:79:
         87:a6:3e:c7:83:20:ee:21:65:2b:05:4d:3d:f7:2b:07:c8:c8:
         76:fe:49:07:6c:35:0c:4f:2f:58:18:5c:e9:d2:ad:c0:94:b0:
         30:b3:03:81:50:49:7f:f3:01:53:07:55:7f:15:a2:a4:e6:d4:
         dd:9e:75:e0:d9:26:54:f5:b9:27:6d:ec:3c:85:e5:53:85:71:
         d4:37:cd:6e:67:a0:48:ef:86:0e:a0:2b:28:b3:e5:64:21:4c:
         95:9f:97:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:42 2024 by rpki-client on console-fra.rpki-client.org