Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDC6BED084F611EEA7DFD2514AD9E6FC.roa
File:                     EDC6BED084F611EEA7DFD2514AD9E6FC.roa (raw, json)
Hash identifier:          xd9XV3Ql6Pr/Odrjuuvbaz0ObdM6AmVscof3GHVUrhA=
Subject key identifier:   0E:78:8A:0C:ED:C4:28:34:77:0A:92:8F:44:B1:EA:13:79:70:D5:3A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       5069
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDC6BED084F611EEA7DFD2514AD9E6FC.roa
Signing time:             Fri 17 Nov 2023 03:10:58 +0000
ROA not before:           Fri 17 Nov 2023 03:10:55 +0000
ROA not after:            Tue 12 Nov 2024 03:10:55 +0000
asID:                     54252
IP address blocks:        154.201.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20585 (0x5069)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 17 03:10:55 2023 GMT
            Not After : Nov 12 03:10:55 2024 GMT
        Subject: CN=6556d9c2-46bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:44:ab:08:d5:0a:bc:0b:86:4f:30:09:d8:40:
                    07:77:9f:95:64:14:f8:ee:45:a0:5b:d5:23:32:3a:
                    25:c5:0d:a0:4f:4e:25:6f:f2:21:8f:12:b2:a3:80:
                    31:8f:5b:4c:f3:96:e4:98:a5:d6:a7:8f:66:4b:e8:
                    8f:5e:82:a6:07:ca:b6:8f:66:af:18:66:f0:ea:a5:
                    87:94:fc:05:37:9e:af:2b:20:d9:6a:5e:ef:f5:69:
                    ad:bb:96:e8:a5:65:7c:09:df:1f:d9:2b:ee:89:35:
                    af:ce:3a:8b:1b:b4:4d:6d:34:df:1c:db:b1:3b:f6:
                    cf:41:eb:9e:87:99:13:a4:0b:aa:36:be:7a:ae:18:
                    ad:b5:03:58:8a:4e:fd:b6:24:80:49:76:19:26:7d:
                    77:b0:b2:f0:46:b2:d0:17:a1:05:b4:48:32:0a:65:
                    cc:11:cd:ab:6d:45:0f:27:d2:77:db:6a:c8:d6:cd:
                    f1:d8:29:79:63:b2:7f:b1:2e:32:11:72:e3:38:69:
                    8b:ba:ca:2d:48:0a:62:5b:d9:f4:b8:12:5d:f8:d5:
                    57:05:2b:e9:96:7f:96:95:f0:1d:7e:ed:f2:76:06:
                    10:56:04:fd:1d:93:60:4a:1f:f1:70:a2:3f:37:03:
                    ee:ab:a8:2b:16:26:1b:ca:bc:37:32:d1:b5:87:75:
                    3f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:78:8A:0C:ED:C4:28:34:77:0A:92:8F:44:B1:EA:13:79:70:D5:3A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDC6BED084F611EEA7DFD2514AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:53:93:69:ab:37:f6:a6:6d:1f:57:38:13:92:85:02:61:b0:
         8a:0c:15:f8:85:68:c2:b1:24:55:06:19:7a:98:34:e8:e4:d8:
         35:6c:f4:3c:5f:8c:73:3c:9d:a1:e5:5e:d2:7f:1f:e6:b6:16:
         4a:a5:12:88:34:71:5e:a1:07:cb:24:fa:d0:55:8c:f4:e7:8e:
         4f:bc:62:e2:03:06:a6:a1:df:b4:45:25:39:ab:0a:e1:44:2d:
         8a:37:cc:1b:83:62:f1:02:28:98:b5:8e:14:ac:22:ad:0c:6d:
         09:69:b9:ae:c1:1d:be:ee:c1:f4:a8:91:13:93:43:04:47:ad:
         14:57:28:74:60:a8:6a:43:c3:0a:6f:68:c6:9e:a9:3c:53:b2:
         b5:af:a8:38:2b:27:ac:51:d5:d4:11:c6:b8:84:bf:4c:02:df:
         5c:6c:de:93:97:65:dc:e8:2a:53:fd:c9:f8:89:14:e3:22:46:
         97:29:d8:0f:33:ea:99:e6:e5:d5:4b:6b:41:1b:66:48:3d:71:
         7d:4e:29:d4:17:e2:a8:79:f3:1e:43:e2:84:c1:a9:ce:62:2d:
         0b:b0:db:a2:36:da:cd:fd:dd:c7:65:f4:06:27:75:b3:9e:79:
         b1:ef:42:64:f7:f5:8a:9d:d0:82:94:8d:4b:be:19:f9:5e:2c:
         e0:1f:22:24
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICUGkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMTcwMzEwNTVaFw0yNDExMTIwMzEwNTVaMBgxFjAU
BgNVBAMTDTY1NTZkOWMyLTQ2YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcRKsI1Qq8C4ZPMAnYQAd3n5VkFPjuRaBb1SMyOiXFDaBPTiVv8iGPErKj
gDGPW0zzluSYpdanj2ZL6I9egqYHyraPZq8YZvDqpYeU/AU3nq8rINlqXu/1aa27
luilZXwJ3x/ZK+6JNa/OOosbtE1tNN8c27E79s9B656HmROkC6o2vnquGK21A1iK
Tv22JIBJdhkmfXewsvBGstAXoQW0SDIKZcwRzattRQ8n0nfbasjWzfHYKXljsn+x
LjIRcuM4aYu6yi1ICmJb2fS4El341VcFK+mWf5aV8B1+7fJ2BhBWBP0dk2BKH/Fw
oj83A+6rqCsWJhvKvDcy0bWHdT8FAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUDniK
DO3EKDR3CpKPRLHqE3lw1TowHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0VEQzZCRUQwODRGNjExRUVBN0RGRDI1MTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACayTQwDQYJKoZIhvcNAQEL
BQADggEBABlTk2mrN/ambR9XOBOShQJhsIoMFfiFaMKxJFUGGXqYNOjk2DVs9Dxf
jHM8naHlXtJ/H+a2FkqlEog0cV6hB8sk+tBVjPTnjk+8YuIDBqah37RFJTmrCuFE
LYo3zBuDYvECKJi1jhSsIq0MbQlpua7BHb7uwfSokROTQwRHrRRXKHRgqGpDwwpv
aMaeqTxTsrWvqDgrJ6xR1dQRxriEv0wC31xs3pOXZdzoKlP9yfiJFOMiRpcp2A8z
6pnm5dVLa0EbZkg9cX1OKdQX4qh58x5D4oTBqc5iLQuw26I22s393cdl9AYndbOe
ebHvQmT39Yqd0IKUjUu+GfleLOAfIiQ=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:42 2024 by rpki-client on console-fra.rpki-client.org