Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F070BB94385311EEB869B51B4AD9E6FC.roa
File:                     F070BB94385311EEB869B51B4AD9E6FC.roa (raw, json)
Hash identifier:          XIpBNKG19BqBJQkc+uvveoU+kLMVgoAFJ4hzgAJcwxE=
Subject key identifier:   5E:C3:0E:1B:B9:CA:2A:86:35:00:48:D3:33:96:54:01:FD:4D:97:EB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       35EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F070BB94385311EEB869B51B4AD9E6FC.roa
Signing time:             Fri 11 Aug 2023 14:32:46 +0000
ROA not before:           Fri 11 Aug 2023 14:32:43 +0000
ROA not after:            Mon 12 Aug 2024 14:32:43 +0000
asID:                     38638
IP address blocks:        154.194.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13802 (0x35ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 11 14:32:43 2023 GMT
            Not After : Aug 12 14:32:43 2024 GMT
        Subject: CN=64d6468e-30ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:ac:07:04:1a:02:47:bf:7f:f4:50:e4:32:
                    44:c8:db:24:ef:64:12:59:c3:a5:91:8c:8c:b9:12:
                    1b:95:0e:f5:e1:f5:28:fd:6c:62:2a:53:bd:0a:fc:
                    30:58:24:8b:68:3c:bf:14:dd:a6:52:ea:f5:2c:04:
                    70:20:bd:73:16:16:14:4d:ec:84:4b:fa:2f:64:dd:
                    ed:4c:52:d9:67:b0:05:3e:a5:e3:f5:74:92:6a:f9:
                    ca:ac:c0:0d:81:43:22:91:63:d7:5d:66:7f:3b:76:
                    78:8a:d1:d3:fe:fc:20:da:48:5e:4b:4d:72:e5:74:
                    90:af:2f:52:02:5f:12:1a:93:47:bc:2e:45:d5:cd:
                    e9:36:38:b9:1a:c7:9c:e0:32:bd:7e:a3:2f:fc:75:
                    f0:9d:76:15:63:71:b8:f1:81:26:31:34:0e:d7:ff:
                    74:5b:79:51:ec:d8:0d:b0:6f:a0:39:45:1c:ec:6d:
                    f9:cd:3f:e3:db:9a:f4:47:3c:dc:79:4e:12:95:64:
                    4c:4e:9c:77:12:b0:64:a8:ff:a6:97:e5:1e:a3:db:
                    52:b1:56:3e:c9:bd:5a:90:aa:49:c1:a3:c3:2b:4a:
                    4a:c0:a2:41:fe:32:2b:10:67:79:16:21:e1:58:fb:
                    92:6f:6a:fc:89:70:3f:b7:95:f7:1f:de:c1:0f:58:
                    ad:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C3:0E:1B:B9:CA:2A:86:35:00:48:D3:33:96:54:01:FD:4D:97:EB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F070BB94385311EEB869B51B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:82:06:e9:e3:a0:f0:36:3b:46:a8:42:d6:2c:0b:d5:61:07:
         ea:c9:e3:dc:56:97:0e:24:3d:90:88:28:89:2f:c3:b9:c2:23:
         55:83:f1:b3:ff:c9:df:be:21:1b:d0:d4:41:7e:c4:4c:37:87:
         79:87:ce:19:95:32:89:d7:90:f2:aa:0c:49:6e:24:a8:25:f3:
         5d:41:ef:43:69:00:36:dc:4d:29:fe:a1:5c:5d:e6:ec:91:c7:
         a7:f0:ee:85:45:ab:77:90:49:ab:43:1b:58:6a:b6:bc:ca:3c:
         bc:34:d3:dd:83:6f:0f:bc:4c:5c:b9:11:9a:44:7a:55:fd:0b:
         a2:f6:61:9d:a8:43:22:76:57:6b:b0:bc:63:42:ad:b3:6b:ff:
         43:53:56:35:58:55:61:b6:a6:6e:64:22:9f:ca:8b:c5:6b:d2:
         03:4c:22:a8:6d:7f:b8:f3:37:9f:76:a1:0b:e3:02:15:50:08:
         14:52:1b:e2:d9:68:2b:06:de:44:b5:71:7e:46:56:be:cd:48:
         99:38:9c:9f:60:01:be:c9:b4:61:49:e9:aa:cf:07:ad:12:c9:
         a4:7b:b9:0c:b9:df:cd:68:b6:d7:08:99:7b:74:04:84:01:19:
         62:4a:e6:4e:c0:ba:31:74:ad:0e:eb:c8:f5:f7:bc:e3:67:32:
         45:5e:54:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:23 2024 by rpki-client on console-ams.rpki-client.org