Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/164C81E8514A11F0B7A9A081DAE4EC9C.roa
File:                     164C81E8514A11F0B7A9A081DAE4EC9C.roa (raw, json)
Hash identifier:          2UiRADUB1r9gWd5gwySppXImTS9rDYKsbQ5EwDOJAok=
Subject key identifier:   50:A9:BB:38:F8:09:64:4F:55:6C:CC:45:59:69:3F:E9:17:2D:B7:CA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0188D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/164C81E8514A11F0B7A9A081DAE4EC9C.roa
Signing time:             Tue 24 Jun 2025 22:25:09 +0000
ROA not before:           Tue 24 Jun 2025 22:25:04 +0000
ROA not after:            Wed 03 Sep 2025 22:25:04 +0000
asID:                     63139
IP address blocks:        154.93.74.0/24 maxlen: 24
                          154.93.75.0/24 maxlen: 24
                          154.93.76.0/24 maxlen: 24
                          154.93.77.0/24 maxlen: 24
                          154.93.78.0/24 maxlen: 24
                          154.93.79.0/24 maxlen: 24
                          154.93.80.0/24 maxlen: 24
                          154.93.81.0/24 maxlen: 24
                          154.93.82.0/24 maxlen: 24
                          154.93.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 11:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100566 (0x188d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 24 22:25:04 2025 GMT
            Not After : Sep  3 22:25:04 2025 GMT
        Subject: CN=685b25c5-063b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:02:54:5d:29:ba:3b:2a:ef:8f:d9:91:39:31:
                    d0:fe:6e:b4:b6:77:be:44:6f:6c:8b:8f:1e:b8:0f:
                    13:e3:df:36:14:2a:8f:c1:12:d9:f7:30:a7:6e:b0:
                    b3:6d:98:f4:4c:95:8a:5e:ca:bf:25:80:ed:ee:a3:
                    22:38:5d:2d:14:89:c6:db:01:46:47:e0:71:0e:43:
                    89:32:6d:f7:f9:f3:d3:21:1c:5f:1c:40:18:c0:9c:
                    66:b8:53:45:48:9d:16:73:69:f8:fb:ed:6b:d4:dc:
                    2a:51:72:59:f4:10:1c:0a:15:61:b3:12:ec:b3:25:
                    87:b9:95:f9:32:c5:d0:0e:d7:f5:9f:eb:5e:31:4a:
                    f7:4a:01:8a:bc:e0:27:5c:a1:5f:35:1e:a0:3e:59:
                    63:1f:d3:ac:18:8b:88:48:69:d4:3e:42:49:eb:f0:
                    24:14:80:94:33:a0:15:b4:ac:60:34:ff:a9:c2:1c:
                    4d:c9:ce:92:c3:8e:06:49:a6:3e:19:2c:d2:09:52:
                    b5:98:57:00:f3:26:49:ce:08:e0:5a:9b:ac:c1:1b:
                    85:1d:20:4b:ce:e2:8a:e2:9e:4b:5c:47:1e:61:17:
                    03:62:bb:c2:e0:85:bd:5a:7c:b3:e9:3e:8b:8a:82:
                    da:e9:ed:b2:0f:ef:f1:71:56:49:37:04:d4:91:c7:
                    7d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A9:BB:38:F8:09:64:4F:55:6C:CC:45:59:69:3F:E9:17:2D:B7:CA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/164C81E8514A11F0B7A9A081DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.74.0-154.93.83.255

    Signature Algorithm: sha256WithRSAEncryption
         c9:e6:8f:d7:4f:58:0c:e9:89:2d:b2:63:dd:a5:ff:40:12:ba:
         ce:91:ae:8b:75:f1:43:95:88:85:86:1a:98:16:ac:04:cd:48:
         e5:f1:94:da:a2:f8:1a:f3:bb:48:bb:c0:a3:e8:eb:57:b1:1c:
         49:69:ce:7e:73:87:9c:87:58:e4:94:e7:5c:ea:a1:0e:e4:47:
         db:d2:1b:f0:22:03:3c:b1:18:4a:ba:ce:37:ba:54:3b:af:9f:
         99:cd:c6:83:34:ee:31:75:d7:08:27:d7:d6:70:7a:81:b5:e7:
         b2:0e:1f:fd:07:72:9c:44:f5:af:4e:a6:4b:54:17:88:d3:32:
         05:44:3a:b3:73:8c:b4:8a:d0:97:59:2e:84:6e:e2:63:70:3c:
         0a:9b:cf:c7:0a:42:5e:4c:31:02:32:12:bf:d8:37:a9:30:1d:
         08:21:a5:7e:db:14:98:8a:48:b5:3a:dd:52:2b:e4:f0:73:24:
         9d:dd:8b:be:f3:c1:91:6d:20:1b:2b:d5:da:8b:7e:a9:2b:3a:
         47:c3:3e:4e:68:b8:de:02:57:51:50:6e:dc:34:b2:20:5f:3c:
         6f:6d:e2:ae:0a:86:c9:db:fd:be:62:6d:d1:1c:36:e2:5c:be:
         d1:12:94:62:93:dc:b1:78:3c:d1:82:11:9e:95:a3:31:b0:e8:
         f4:80:0c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:17:42 2025 by rpki-client