Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F98D473A131C11EEA66F637D4AD9E6FC.roa
File:                     F98D473A131C11EEA66F637D4AD9E6FC.roa (raw, json)
Hash identifier:          n9osvZgTuBsz3kqFCWIjadTcRlrnPCUyhtl0UgUhSGY=
Subject key identifier:   51:4D:C9:49:B1:17:B2:E1:2C:EA:EC:54:50:C5:0D:9F:2C:02:16:B6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2D8F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F98D473A131C11EEA66F637D4AD9E6FC.roa
Signing time:             Sun 25 Jun 2023 05:56:06 +0000
ROA not before:           Sun 25 Jun 2023 05:56:03 +0000
ROA not after:            Fri 05 Jul 2024 05:56:03 +0000
asID:                     139065
IP address blocks:        154.194.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11663 (0x2d8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 25 05:56:03 2023 GMT
            Not After : Jul  5 05:56:03 2024 GMT
        Subject: CN=6497d6f6-a6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:10:29:c3:e4:b5:96:99:02:a6:65:d8:d0:4f:
                    73:4c:87:40:17:20:6a:91:a1:c8:38:d1:52:b5:3e:
                    85:a5:bf:b4:f5:96:f7:f2:7e:82:0e:9d:3f:c0:b3:
                    53:71:e4:a9:2b:9b:d3:b3:6b:f7:68:27:f6:87:19:
                    ca:e9:3b:d5:3b:99:c1:72:8f:39:db:1c:1d:71:b2:
                    c9:de:38:6d:ff:6c:33:a3:6a:47:8e:b1:c3:3c:91:
                    a8:d4:e7:56:4c:79:27:37:c8:7b:05:1a:04:ef:d2:
                    9d:1e:65:41:38:70:94:bf:06:7c:36:5b:5b:62:7a:
                    4a:5f:f8:60:27:6a:e7:26:50:31:22:e7:9e:40:47:
                    28:d5:df:8f:95:2d:62:8b:c9:c6:5d:98:a4:3f:39:
                    6b:2e:ca:e9:2c:94:33:17:8c:b4:ec:b8:a6:ed:7a:
                    4a:ba:40:30:ac:0e:60:0d:b3:68:ac:d4:3d:a2:e4:
                    78:b0:27:3a:45:f7:89:ce:fe:cb:48:ee:71:24:54:
                    47:22:27:e7:fc:9c:63:7f:32:97:e8:6b:2f:d9:8a:
                    02:be:cd:72:be:a9:67:33:a7:0b:65:b8:7b:12:de:
                    38:55:dc:cf:cc:b6:c3:cf:b1:34:38:2b:98:92:54:
                    56:7f:ba:c8:17:66:af:9a:33:64:5e:77:39:61:fb:
                    5e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4D:C9:49:B1:17:B2:E1:2C:EA:EC:54:50:C5:0D:9F:2C:02:16:B6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F98D473A131C11EEA66F637D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:3a:07:b4:c5:24:d3:a6:7a:3e:de:a5:26:0e:d5:eb:1d:95:
         9a:41:2e:c8:ba:4a:1f:b8:39:d2:87:cb:92:f0:14:85:8c:0c:
         58:ce:0d:17:70:da:88:f5:ae:0e:a0:8d:64:f2:46:bf:2f:79:
         83:13:a6:da:b8:a9:91:56:68:70:b2:bb:de:8e:7f:04:85:7d:
         03:e5:86:c8:03:9d:cf:b6:a4:57:41:2c:5d:c6:bb:71:3e:88:
         4f:74:59:36:11:8f:ea:67:56:48:df:86:b7:f2:2e:d2:a6:3c:
         a3:a4:f4:74:a3:e6:33:d5:9c:19:dc:81:a1:00:41:3e:b3:09:
         1f:5c:fe:1c:cd:fb:01:52:6b:19:25:f7:0a:da:1d:a3:82:af:
         2d:df:0b:79:00:40:d5:6e:60:9f:19:10:04:c0:ad:0d:81:9e:
         02:8d:5e:78:4f:eb:20:30:8b:d2:72:87:ac:f7:70:3b:4b:3c:
         5b:d3:28:d3:c5:3f:d3:2c:8d:e3:15:64:dc:ba:cb:51:15:9b:
         fd:f8:04:76:47:e0:ce:18:cf:7b:f8:aa:3a:50:a3:39:9f:3c:
         ba:12:bc:6c:9f:15:5f:fe:e7:1d:24:ed:07:d6:af:72:14:09:
         e8:a3:23:f7:60:be:f9:f7:d7:fd:40:8d:8e:98:96:bc:17:45:
         b3:6c:15:34
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICLY8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA2MjUwNTU2MDNaFw0yNDA3MDUwNTU2MDNaMBgxFjAU
BgNVBAMTDTY0OTdkNmY2LWE2ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDECnD5LWWmQKmZdjQT3NMh0AXIGqRocg40VK1PoWlv7T1lvfyfoIOnT/A
s1Nx5Kkrm9Oza/doJ/aHGcrpO9U7mcFyjznbHB1xssneOG3/bDOjakeOscM8kajU
51ZMeSc3yHsFGgTv0p0eZUE4cJS/Bnw2W1tiekpf+GAnaucmUDEi555ARyjV34+V
LWKLycZdmKQ/OWsuyukslDMXjLTsuKbtekq6QDCsDmANs2is1D2i5HiwJzpF94nO
/stI7nEkVEciJ+f8nGN/Mpfoay/ZigK+zXK+qWczpwtluHsS3jhV3M/MtsPPsTQ4
K5iSVFZ/usgXZq+aM2Redzlh+14vAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUUU3J
SbEXsuEs6uxUUMUNnywCFrYwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0Y5OEQ0NzNBMTMxQzExRUVBNjZGNjM3RDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACawh8wDQYJKoZIhvcNAQEL
BQADggEBAGA6B7TFJNOmej7epSYO1esdlZpBLsi6Sh+4OdKHy5LwFIWMDFjODRdw
2oj1rg6gjWTyRr8veYMTptq4qZFWaHCyu96OfwSFfQPlhsgDnc+2pFdBLF3Gu3E+
iE90WTYRj+pnVkjfhrfyLtKmPKOk9HSj5jPVnBncgaEAQT6zCR9c/hzN+wFSaxkl
9wraHaOCry3fC3kAQNVuYJ8ZEATArQ2BngKNXnhP6yAwi9Jyh6z3cDtLPFvTKNPF
P9MsjeMVZNy6y1EVm/34BHZH4M4Yz3v4qjpQozmfPLoSvGyfFV/+5x0k7QfWr3IU
CeijI/dgvvn31/1AjY6YlrwXRbNsFTQ=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:43 2024 by rpki-client on console-fra.rpki-client.org