Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F56070FEE76711EE821F83C7775412E6.roa
File:                     F56070FEE76711EE821F83C7775412E6.roa (raw, json)
Hash identifier:          6PXFTjDo0TY6I6t4lyE1HD+y1+zfBDkRsz6PaH4JiqM=
Subject key identifier:   B2:48:E3:BA:9E:BA:2D:F2:4F:51:10:F1:89:D4:E0:5A:7F:2B:6E:9D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A527
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F56070FEE76711EE821F83C7775412E6.roa
Signing time:             Thu 21 Mar 2024 09:46:58 +0000
ROA not before:           Thu 21 Mar 2024 09:46:54 +0000
ROA not after:            Tue 23 Apr 2024 09:46:54 +0000
asID:                     44559
IP address blocks:        154.208.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Apr 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42279 (0xa527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 21 09:46:54 2024 GMT
            Not After : Apr 23 09:46:54 2024 GMT
        Subject: CN=65fc0212-104c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:35:a2:cb:42:37:dc:dd:53:44:62:aa:b5:c1:
                    30:b3:d7:f9:89:f2:30:63:2a:80:32:a9:5d:e9:d7:
                    ad:27:6d:2a:dc:81:79:d3:a5:a7:de:cd:c2:07:3c:
                    76:74:60:f0:c8:48:c3:23:09:8e:c5:55:af:67:f7:
                    77:49:1e:f5:ad:21:e6:fd:03:15:4c:70:de:1a:42:
                    18:5e:9d:a4:ac:df:a7:03:40:02:cd:7c:8a:41:47:
                    db:3e:21:6c:46:96:7e:89:98:b9:24:8a:bb:4f:0d:
                    7b:ca:3f:7b:2a:35:38:a0:24:87:08:42:8c:29:b7:
                    ed:68:af:a8:cb:d4:4f:99:64:5e:ef:ee:12:34:9e:
                    97:f2:ff:b0:07:df:99:a1:15:b4:96:4d:e6:1f:7d:
                    19:9c:a6:35:66:ff:9a:f8:d4:13:e0:71:fa:3b:7a:
                    10:54:1f:20:c8:f6:af:1a:f8:d5:e9:23:99:b8:07:
                    e0:61:45:b7:44:16:e6:40:59:09:aa:5e:9c:f9:f9:
                    49:fa:8d:a3:9a:f2:f1:96:0e:af:86:3f:ee:1a:80:
                    51:5d:a8:74:be:e3:cc:e3:fd:88:90:f7:29:ca:39:
                    e7:b3:71:91:e0:94:8b:22:84:35:17:f0:cc:21:1e:
                    20:e5:1a:25:c9:fd:d0:b1:a1:c7:9a:9d:e0:80:71:
                    de:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:48:E3:BA:9E:BA:2D:F2:4F:51:10:F1:89:D4:E0:5A:7F:2B:6E:9D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F56070FEE76711EE821F83C7775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.208.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:48:2b:00:8b:f8:0e:37:fa:14:32:13:40:9e:2f:b4:50:3e:
         3a:55:26:d6:56:77:ba:96:90:1e:01:ec:b9:a7:66:ee:46:63:
         a2:f9:26:f2:86:38:13:23:c6:32:94:ef:bd:16:8e:a8:40:36:
         39:0c:92:2e:f1:9f:52:4f:b2:ed:3f:99:d3:e1:9b:ac:f5:30:
         93:9c:eb:1e:b1:e6:32:df:c0:43:12:aa:bc:a7:be:cf:7d:a1:
         c2:36:80:d1:f3:f2:be:ea:be:a0:e7:59:73:c0:1a:e1:20:e9:
         3c:ee:9f:8d:ab:45:e9:ff:c0:bf:36:20:41:98:4b:bc:3f:28:
         b8:cf:7e:5e:24:59:bf:63:e1:16:fc:48:32:9e:a6:2b:8a:7c:
         1d:0e:dc:df:f6:97:d9:4e:3d:3e:fa:9b:4d:d5:70:bb:0c:ab:
         34:4d:b3:10:63:75:1b:d0:43:b8:0e:c5:05:51:d4:9b:be:d4:
         8c:30:89:2c:10:16:4d:a9:5f:3d:6f:4a:a8:c3:31:82:fa:dd:
         fc:d3:3f:5f:6c:05:0b:bf:68:bc:13:f4:11:c8:a4:8a:0a:29:
         9f:e4:62:6b:8b:26:76:83:a8:87:ba:6c:77:fc:4f:9d:59:5e:
         85:71:57:f1:6e:77:86:a3:64:9e:76:5d:5b:11:ed:c8:7e:ad:
         82:1f:be:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:26 2024 by rpki-client on console-fra.rpki-client.org