Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/257A280C4B6711F0BBB04BB1DAE4EC9C.roa
File:                     257A280C4B6711F0BBB04BB1DAE4EC9C.roa (raw, json)
Hash identifier:          ThPcMdKg+7Q+VFhhJUChPIIzh+Dd1C3Yu3mXNdsCgA8=
Subject key identifier:   9E:CD:4B:C0:49:CB:17:55:FD:55:30:BA:2E:81:03:2C:76:1F:1D:EA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       018703
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/257A280C4B6711F0BBB04BB1DAE4EC9C.roa
Signing time:             Tue 17 Jun 2025 10:38:04 +0000
ROA not before:           Tue 17 Jun 2025 10:37:57 +0000
ROA not after:            Fri 12 Sep 2025 10:37:57 +0000
asID:                     54600
IP address blocks:        154.199.208.0/20 maxlen: 24
                          154.199.224.0/19 maxlen: 24
                          154.202.117.0/24 maxlen: 24
                          154.202.120.0/21 maxlen: 24
                          154.217.234.0/23 maxlen: 24
                          154.217.236.0/22 maxlen: 24
                          154.217.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Jul 2025 11:44:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100099 (0x18703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 17 10:37:57 2025 GMT
            Not After : Sep 12 10:37:57 2025 GMT
        Subject: CN=6851458b-7860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:d6:cd:bd:24:46:d6:4e:61:83:aa:30:dd:
                    aa:b1:74:bb:46:50:e7:5f:83:8a:d8:b9:f2:74:29:
                    42:a3:88:40:3c:75:0e:39:75:b4:35:5d:6c:bb:c3:
                    da:69:37:68:2a:3c:b1:8e:40:73:cf:5d:e4:dd:9c:
                    b7:c9:d6:fc:ca:be:2a:08:0d:23:16:b7:2e:a3:a7:
                    e8:2d:9e:1c:cd:93:28:4f:9f:b5:d9:c3:3c:c3:5d:
                    9e:a0:44:e2:a6:0b:0d:1d:89:9b:81:c8:88:4c:bf:
                    d0:ee:ea:2a:99:7f:09:e7:b7:07:f0:52:c9:eb:e2:
                    c3:92:83:dc:f8:ef:31:e7:b3:8a:08:f7:b1:35:c2:
                    b8:d4:d5:51:f0:4f:91:b0:38:38:c7:ae:f2:c2:df:
                    3b:17:55:a4:5b:a8:8c:17:db:a7:47:ed:37:b5:68:
                    48:9f:ab:31:45:76:56:2c:68:27:e3:65:fd:49:71:
                    37:ed:8a:bd:a4:4d:84:69:7f:8c:66:db:a1:ef:07:
                    6c:65:f2:f1:0e:fd:58:ca:b6:ee:f6:d4:0c:9b:e7:
                    24:38:69:c3:54:18:dd:7b:7c:54:12:89:d6:9b:a2:
                    98:3c:60:47:9f:e4:73:67:c6:ca:6a:aa:32:52:ee:
                    5e:74:88:8c:d2:12:a2:80:ff:f2:2b:c7:1a:9e:19:
                    c5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CD:4B:C0:49:CB:17:55:FD:55:30:BA:2E:81:03:2C:76:1F:1D:EA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/257A280C4B6711F0BBB04BB1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.199.208.0-154.199.255.255
                  154.202.117.0/24
                  154.202.120.0/21
                  154.217.234.0-154.217.255.255

    Signature Algorithm: sha256WithRSAEncryption
         c2:24:0f:92:6f:76:96:ae:ca:d9:62:4e:de:01:05:97:ca:81:
         e5:40:f4:ee:4a:8a:70:b6:38:d2:53:35:12:17:36:cb:8a:c6:
         50:6a:62:93:45:ba:e4:18:64:1a:c3:43:e2:5d:a7:39:20:22:
         42:61:2a:3d:0b:e1:41:9a:90:1d:6d:84:53:e2:fe:ac:cb:c1:
         39:dd:ff:08:0a:78:67:fb:82:bd:59:59:a9:cd:5d:ae:54:dd:
         2f:39:3b:6f:b2:e6:a7:b7:29:8b:12:7a:bf:83:6d:fa:82:fc:
         5d:f5:1e:6f:c2:fe:76:d8:2f:85:2e:50:d1:9c:d2:a4:44:b0:
         20:41:66:25:e6:0b:2c:20:e5:70:9a:57:51:3b:fe:c8:ff:ee:
         be:2f:86:b1:e6:29:5e:8e:1a:e9:7e:10:09:0d:e7:97:73:d9:
         c6:d2:94:57:12:99:3d:8a:05:1b:3a:65:c3:d2:0c:22:da:43:
         4e:40:6e:bb:5a:80:c0:64:39:7f:f8:7b:49:2e:5a:11:35:a3:
         e3:82:fb:2d:cc:31:f9:28:f2:35:fd:c8:fe:a6:ed:91:6e:22:
         0e:a7:0b:b0:67:2a:37:05:c6:a6:f4:32:94:96:77:99:27:b0:
         3b:a6:26:f9:45:d7:37:45:1b:9d:34:fb:33:66:59:d8:96:5a:
         35:16:f9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:01:35 2025 by rpki-client