Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/CAD01CCEAD1611F0B7FFDDBDDAE4EC9C.roa
File:                     CAD01CCEAD1611F0B7FFDDBDDAE4EC9C.roa (raw, json)
Hash identifier:          6X242C8gRpLwRDdAl5XW16dhxRi6QqN8otye+wZDhVk=
Subject key identifier:   FC:8B:89:36:92:B1:57:07:42:01:4A:E1:24:9C:90:69:21:96:9E:17
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       07E1
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/CAD01CCEAD1611F0B7FFDDBDDAE4EC9C.roa
Signing time:             Sun 19 Oct 2025 18:09:45 +0000
ROA not before:           Sun 19 Oct 2025 18:09:41 +0000
ROA not after:            Fri 28 Nov 2025 18:09:41 +0000
asID:                     141718
IP address blocks:        102.177.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2017 (0x7e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Oct 19 18:09:41 2025 GMT
            Not After : Nov 28 18:09:41 2025 GMT
        Subject: CN=68f52969-7c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ca:18:58:ec:98:ca:44:06:c0:0c:4c:5a:68:
                    30:f5:1a:6a:ca:5d:13:88:6b:4f:02:6c:11:9f:69:
                    bf:41:88:fe:c9:0a:4f:64:9a:0a:34:9d:c1:f8:16:
                    db:fd:d7:26:4d:dc:b1:87:4e:bb:80:a0:7d:05:a8:
                    58:39:3f:c4:8c:f8:10:05:ce:84:cf:e0:29:96:f8:
                    98:5d:35:00:c9:0f:71:52:ae:3f:59:62:e6:85:69:
                    07:57:4f:00:6d:e0:64:fd:31:19:58:e8:c7:d8:b3:
                    ab:77:53:9c:d6:07:e2:1b:70:0c:2c:01:6b:57:43:
                    68:c9:ed:d1:29:6b:ef:b2:39:17:0e:c9:09:0c:07:
                    cc:51:86:ae:a5:91:fd:2b:a8:c6:63:0d:e3:55:a6:
                    31:a9:2b:12:90:0d:c3:64:4c:ed:e6:04:43:53:7f:
                    90:ef:56:ff:fa:9f:e5:0a:67:41:d1:f8:5d:cb:e6:
                    a5:28:0d:3f:7d:2b:37:6d:66:1b:44:78:ed:f7:92:
                    30:9a:c9:07:26:77:e0:85:f3:a2:e7:79:9b:b4:1d:
                    9f:ab:4a:6c:8f:7f:19:2d:1a:ee:03:2c:11:00:18:
                    ef:11:cc:f3:bc:0e:e3:fb:94:48:c9:e1:94:45:e0:
                    e7:ce:d9:a8:d6:49:8b:8e:05:85:fa:19:b0:23:e9:
                    61:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8B:89:36:92:B1:57:07:42:01:4A:E1:24:9C:90:69:21:96:9E:17
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/CAD01CCEAD1611F0B7FFDDBDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:87:b7:c4:bc:b9:86:2e:95:74:fe:e0:30:83:7f:94:fc:73:
         d3:25:97:9f:0a:61:bd:47:69:42:a6:ca:48:63:a8:0b:bb:35:
         a1:6a:0a:5f:81:32:10:9a:1c:d7:11:3f:a3:97:d2:5b:4b:30:
         a3:34:97:f3:fc:0b:9c:79:6e:70:1e:64:bd:10:21:9c:a5:44:
         7d:c3:36:08:f2:33:96:ca:0a:81:b9:70:5a:5d:59:4b:da:0f:
         ea:38:5d:e2:e6:5b:2b:37:84:2c:5e:01:7d:8d:d6:80:37:1f:
         dd:43:f3:21:6e:8b:58:43:2f:2e:c3:78:3c:c8:b4:97:77:84:
         8c:32:c8:33:b3:0c:e8:d1:dc:01:d9:43:54:ca:d9:0f:de:15:
         31:9c:b4:b4:73:ca:d8:03:a5:97:88:8c:06:44:21:59:c9:58:
         a5:50:74:14:94:64:ff:b9:d9:9c:8f:06:ec:a3:60:2e:ef:1d:
         29:c4:41:ef:e4:b3:4f:b4:5e:1f:ff:ca:70:c9:ca:a9:7c:7a:
         62:d4:1e:8d:bd:be:33:f9:d3:71:8e:77:51:d8:8f:0b:58:24:
         46:45:f0:8e:2c:c6:14:b2:1a:3d:6d:77:bf:b6:bc:6a:5f:8e:
         46:65:cb:28:72:85:47:bf:59:89:79:c1:ef:69:cd:ec:73:b7:
         de:71:55:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:52:59 2025 by rpki-client