Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F01AC1C278AD11EEAE1C3B8A4AD9E6FC.roa
File:                     F01AC1C278AD11EEAE1C3B8A4AD9E6FC.roa (raw, json)
Hash identifier:          589/aisgU6+T+8sirIMXqc4ENKTrAJ4yZNBcRuxpqyY=
Subject key identifier:   91:C8:D4:F1:AC:96:B4:7C:56:7B:3A:FE:2C:16:3C:4A:75:03:A9:A4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       4B21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F01AC1C278AD11EEAE1C3B8A4AD9E6FC.roa
Signing time:             Wed 01 Nov 2023 11:58:15 +0000
ROA not before:           Wed 01 Nov 2023 11:58:12 +0000
ROA not after:            Mon 07 Oct 2024 11:58:12 +0000
asID:                     209242
IP address blocks:        154.94.8.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19233 (0x4b21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  1 11:58:12 2023 GMT
            Not After : Oct  7 11:58:12 2024 GMT
        Subject: CN=65423d57-b3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3c:12:fc:a3:12:d0:26:13:b9:5c:e8:39:29:
                    72:9b:df:ea:95:8c:56:4a:5f:4a:4c:f6:2e:d8:43:
                    12:df:7d:d7:fa:c5:57:41:7a:de:80:e1:26:f8:b9:
                    d5:6f:0e:07:1c:f9:83:86:ed:49:25:1f:f0:cc:6c:
                    3e:c8:8c:4d:be:40:b8:23:34:4f:8a:6e:08:6e:39:
                    61:0c:8b:ce:f2:c6:8d:99:1c:a4:7b:7a:0b:6c:db:
                    13:13:00:c9:f4:0c:c0:ec:71:68:08:7f:4f:34:0c:
                    75:69:bc:93:b1:f4:c1:71:92:61:28:a7:91:f0:9d:
                    19:56:8a:cb:69:a6:57:9e:61:d3:ad:10:85:06:e7:
                    d5:4f:af:00:a5:35:50:2a:18:ad:82:5b:91:cc:06:
                    12:17:b5:21:41:aa:38:f6:bc:a8:7c:6b:6c:62:a9:
                    b7:af:03:4e:00:4d:91:e0:88:87:ae:55:e1:35:42:
                    6b:f6:6d:85:96:b5:ef:54:d2:07:e5:78:e4:f0:90:
                    62:b1:cf:dd:1f:44:95:f4:85:c1:eb:06:81:78:06:
                    fc:7e:42:c1:9f:9a:cd:0b:6f:b0:c4:1e:72:91:39:
                    8e:fb:53:eb:14:bb:bc:71:18:ad:2a:00:eb:76:db:
                    f3:30:9a:72:67:21:ba:6f:d7:3b:bd:7f:8e:7f:bb:
                    c0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C8:D4:F1:AC:96:B4:7C:56:7B:3A:FE:2C:16:3C:4A:75:03:A9:A4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F01AC1C278AD11EEAE1C3B8A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:1e:93:08:93:21:70:92:ea:71:89:85:61:0b:cc:c1:bd:ea:
         4e:9e:84:2d:58:89:c5:54:d0:4c:dd:bb:da:c2:77:c1:0d:99:
         a9:d4:f9:9b:a1:9e:08:0b:7f:4b:05:e4:b6:da:d9:56:00:cc:
         2c:2d:eb:11:41:e4:3a:2b:08:08:7c:f5:23:bf:65:c5:d4:05:
         81:4b:09:7e:8d:03:b7:10:0d:70:51:ab:54:56:f0:2f:46:35:
         69:24:de:1e:11:a6:2f:04:7a:ed:4c:10:b3:2a:45:ad:5a:62:
         e0:ab:84:58:26:d7:a6:e3:87:54:d7:83:48:95:45:c8:84:e3:
         7a:54:2e:af:2d:47:31:02:e7:a2:97:b5:25:bd:ce:da:d7:40:
         fe:e8:46:62:bf:07:04:68:0a:04:7b:55:5f:2f:30:bf:86:09:
         77:8e:15:56:dc:3c:81:1a:62:4a:83:a8:ed:10:84:f4:e1:e6:
         2a:a4:10:ee:ff:19:8c:b3:ba:cc:f6:d4:ac:62:06:ae:69:ab:
         05:54:0c:d2:3d:86:e1:9b:05:ba:33:63:f2:05:89:65:b1:ac:
         94:76:cf:28:d1:ce:ba:bd:5f:26:75:7c:b6:52:85:2a:96:0d:
         83:e9:c8:d2:ce:21:b4:96:5f:be:05:54:18:1f:37:ce:f7:25:
         72:ee:31:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:23 2024 by rpki-client on console-ams.rpki-client.org