Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AFCA613A2FF011F0B54E8CB4DAE4EC9C.roa
File:                     AFCA613A2FF011F0B54E8CB4DAE4EC9C.roa (raw, json)
Hash identifier:          VxZqnllPmTwAJe+1K1EViQhrFOo4/Xy/xE72Mf2Fo0U=
Subject key identifier:   0B:04:E9:E4:9C:37:89:84:69:C5:1B:64:3F:21:86:64:85:B0:17:C1
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1ABF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AFCA613A2FF011F0B54E8CB4DAE4EC9C.roa
Signing time:             Tue 13 May 2025 11:52:04 +0000
ROA not before:           Tue 13 May 2025 11:51:59 +0000
ROA not after:            Thu 13 May 2027 11:51:59 +0000
asID:                     46337
IP address blocks:        154.16.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 May 2025 07:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6847 (0x1abf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: May 13 11:51:59 2025 GMT
            Not After : May 13 11:51:59 2027 GMT
        Subject: CN=68233264-0cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:db:da:fd:72:bb:80:b9:99:7f:ad:44:14:10:
                    65:73:02:b2:4d:02:be:33:54:73:90:7d:83:fe:0b:
                    b1:56:33:68:06:1c:54:6d:ef:3a:ab:9d:89:fa:ba:
                    00:d8:66:00:59:56:09:b3:27:ea:98:4a:37:9c:2e:
                    5d:81:7d:7b:73:02:06:28:2e:5c:fd:ff:75:0f:40:
                    75:5e:ed:3c:ed:66:2c:b3:8e:b0:2b:bc:90:0e:f5:
                    d6:9e:b2:39:55:18:ee:53:a4:41:29:44:eb:95:2b:
                    bd:45:f6:5b:c6:45:77:4d:55:b6:1b:ad:ad:3d:f8:
                    22:99:a8:9e:65:f1:e0:02:dc:2a:a9:85:23:6f:27:
                    87:96:bf:2f:18:cb:12:65:4c:9f:b0:7c:ca:19:38:
                    41:b4:c6:1e:c4:fa:59:c5:ed:66:3a:a0:ef:70:8d:
                    0f:a1:dd:7d:ad:4e:12:dc:15:70:f9:e6:9f:7d:50:
                    31:09:c8:dd:7c:ad:ce:0a:7d:65:f0:28:02:18:f2:
                    4c:fb:bf:5c:33:90:1a:04:e7:7c:ec:91:06:34:18:
                    25:bb:80:a5:53:80:19:7e:94:2a:06:81:04:3a:00:
                    cf:0f:72:ea:09:20:b2:fd:38:c9:3c:1e:ac:3a:b8:
                    9f:e8:37:80:b5:67:30:43:0c:fe:a9:3b:6c:5e:d2:
                    31:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:04:E9:E4:9C:37:89:84:69:C5:1B:64:3F:21:86:64:85:B0:17:C1
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AFCA613A2FF011F0B54E8CB4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:c0:cd:38:94:e3:bb:f6:7a:33:80:df:74:9d:82:cc:a4:41:
         ac:a2:22:97:0f:7d:ca:d1:3e:fa:84:27:34:90:d1:23:4e:4f:
         2c:9b:9c:25:97:f6:7e:f3:7f:09:9c:9d:f1:00:7c:70:c3:97:
         3e:88:f5:16:15:f6:e9:b1:1d:81:8a:96:75:d0:b0:18:63:ee:
         bd:8e:80:19:3c:41:eb:e3:e9:47:cf:5e:c1:ed:e8:d6:2c:89:
         f8:d0:24:2e:5d:69:10:51:ca:d2:0b:70:49:4a:fe:35:83:7d:
         c0:5b:9c:91:21:9e:db:30:73:ea:76:1a:14:a3:7e:3e:8d:2e:
         95:d0:1b:41:d0:21:ec:b8:b6:e9:95:7f:e9:00:dc:7e:c1:f1:
         ed:26:a5:4f:1a:87:18:53:f8:d3:9c:0f:8b:3a:a5:f2:3d:cd:
         a9:52:f5:f2:90:f9:03:3c:81:8a:3e:10:17:69:22:73:b8:31:
         97:c0:3b:f0:8d:12:29:02:9e:bc:da:b9:89:86:08:e8:d0:66:
         c0:6e:60:18:d7:9c:48:1a:21:73:0f:5e:25:7e:9f:2a:d3:5e:
         e7:dd:7f:9c:65:15:86:1e:c2:15:7d:9d:d7:e2:12:90:d8:b5:
         f7:46:76:40:fc:65:68:a0:11:ff:cf:43:59:03:2b:df:eb:a5:
         52:33:68:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:31:19 2025 by rpki-client