Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC3C58127EB711EEB9640E574AD9E6FC.roa
File:                     EC3C58127EB711EEB9640E574AD9E6FC.roa (raw, json)
Hash identifier:          yFK0zql/0YGjqCZtY3Kgwj7eyvJB3ZGJWiJo058QNZs=
Subject key identifier:   C3:FB:6F:33:6A:8D:26:CC:A4:31:9A:47:7A:15:6C:0F:BA:52:BE:7B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       4DAD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC3C58127EB711EEB9640E574AD9E6FC.roa
Signing time:             Thu 09 Nov 2023 04:24:50 +0000
ROA not before:           Thu 09 Nov 2023 04:24:47 +0000
ROA not after:            Thu 08 Aug 2024 04:24:47 +0000
asID:                     133861
IP address blocks:        154.204.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19885 (0x4dad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  9 04:24:47 2023 GMT
            Not After : Aug  8 04:24:47 2024 GMT
        Subject: CN=654c5f12-66dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1d:0b:19:63:ce:b4:cc:d4:a5:5c:67:3f:0d:
                    bd:fd:d4:7d:5f:21:b3:c9:da:b0:42:8b:0b:85:f7:
                    cf:51:6f:53:1a:cb:7e:de:b6:01:5f:fe:e0:21:78:
                    fe:48:d7:3c:7b:f5:c8:84:f6:56:c9:58:fe:d4:c3:
                    c8:0f:26:91:27:0f:70:12:4b:a7:c7:58:61:39:80:
                    7c:0a:83:d8:58:33:06:db:34:6c:5f:f1:e6:b9:e4:
                    9e:68:1c:bb:d7:dc:f8:dc:1a:a7:9e:5d:1f:83:a9:
                    24:d4:e3:b2:1e:a1:72:33:69:aa:4f:43:8f:be:bf:
                    c1:30:c2:57:1f:b0:5f:86:24:4c:fa:2c:19:f2:ed:
                    b8:75:ca:c5:ad:ea:b6:e1:22:4f:38:a0:60:d7:a9:
                    c3:9f:dd:18:f1:78:17:ce:cd:b4:a4:82:d8:74:f8:
                    fb:d2:ae:7f:f0:04:d2:08:49:76:b0:62:16:cd:9e:
                    e1:57:cb:45:ed:29:b9:0f:1b:78:00:d7:42:49:f4:
                    0b:21:88:6d:5d:40:8f:83:22:15:99:0e:db:35:77:
                    a8:b2:31:bd:21:be:fd:53:4b:28:69:a9:b0:83:05:
                    f3:59:53:6b:6f:f6:f9:47:ec:72:2a:d4:71:a4:30:
                    55:b7:1d:42:29:49:c5:9b:4a:cf:1e:35:26:9d:27:
                    7a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FB:6F:33:6A:8D:26:CC:A4:31:9A:47:7A:15:6C:0F:BA:52:BE:7B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC3C58127EB711EEB9640E574AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:8f:ff:2b:b8:92:9e:14:9d:2d:35:e2:d2:47:bd:b2:34:df:
         43:20:48:b2:85:b3:51:ea:43:82:f8:ed:71:13:58:3d:c9:de:
         81:79:a7:c6:94:89:f5:41:cb:14:59:ae:73:8f:15:00:1f:09:
         dc:7e:07:10:a2:5e:88:5b:49:e4:31:33:51:32:aa:38:60:e7:
         4b:7e:d8:6d:e3:b6:ef:9f:c3:90:54:7a:33:c0:0a:6b:d5:c9:
         6d:6e:83:87:89:41:a9:5a:27:bc:3a:72:d3:4d:81:11:1b:d0:
         75:fb:3b:dc:e9:f1:45:ef:9c:8e:f0:21:a7:67:4b:fa:47:f4:
         58:7e:13:56:12:8c:84:ba:c4:f9:38:e2:1c:37:13:68:01:4e:
         af:b7:48:92:8e:87:c4:71:60:8e:96:0d:92:49:6a:cf:a4:7c:
         89:19:66:d0:fb:7c:06:21:f9:03:03:00:97:46:f0:20:53:32:
         49:08:53:92:84:fe:55:79:39:d1:86:29:01:84:51:7b:b5:d5:
         0b:f5:f3:e1:ae:12:6f:68:e8:2e:01:f6:21:12:7a:e8:58:b2:
         9b:da:d4:c0:f1:d4:44:2a:97:8a:f9:d2:d4:9c:85:66:a4:20:
         2a:93:fa:47:21:c7:99:f4:38:12:1c:c2:91:da:62:e0:90:ca:
         73:07:88:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:23 2024 by rpki-client on console-ams.rpki-client.org