Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77DC1D4C50E611F0BFB59983DAE4EC9C.roa
File:                     77DC1D4C50E611F0BFB59983DAE4EC9C.roa (raw, json)
Hash identifier:          vZwMFtKstvnbKs/gLyuAkERcCKR27WwGlH4XlOy/Hus=
Subject key identifier:   33:2D:BC:CA:D5:BD:C2:91:4C:48:97:4A:26:92:3B:ED:75:78:D9:9A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01884E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77DC1D4C50E611F0BFB59983DAE4EC9C.roa
Signing time:             Tue 24 Jun 2025 10:32:04 +0000
ROA not before:           Tue 24 Jun 2025 10:31:59 +0000
ROA not after:            Fri 08 Aug 2025 10:31:59 +0000
asID:                     44559
IP address blocks:        154.219.65.0/24 maxlen: 24
                          154.219.66.0/24 maxlen: 24
                          154.219.67.0/24 maxlen: 24
                          154.219.68.0/24 maxlen: 24
                          154.219.69.0/24 maxlen: 24
                          154.219.70.0/24 maxlen: 24
                          154.219.75.0/24 maxlen: 24
                          154.219.91.0/24 maxlen: 24
                          154.219.92.0/24 maxlen: 24
                          154.219.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 06:27:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100430 (0x1884e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 24 10:31:59 2025 GMT
            Not After : Aug  8 10:31:59 2025 GMT
        Subject: CN=685a7ea3-0628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:30:4f:de:e8:b9:8f:a8:1d:4a:39:23:2f:
                    c2:37:10:a8:e0:1e:1c:05:d9:56:b3:40:68:2d:80:
                    b9:9c:f4:2f:60:9b:a5:a3:70:d7:f9:05:b1:07:9f:
                    cf:ec:90:95:6e:38:26:62:c0:6b:1f:02:e6:2d:47:
                    35:e5:80:bc:12:5a:7a:2f:bb:94:24:97:02:1f:9c:
                    d4:ed:2e:db:55:a7:78:a0:f0:a5:7b:67:8e:c9:69:
                    c0:ff:ad:51:f9:22:54:c3:1e:48:ee:07:5d:3a:d7:
                    2f:7e:d4:dd:3c:75:69:67:cd:90:f0:ca:73:f7:02:
                    db:17:74:d9:df:c7:8f:68:79:f9:49:53:3d:f5:f2:
                    fc:af:c9:7b:76:4c:cb:83:c6:ee:bd:12:59:b6:45:
                    ad:24:4f:3d:f6:9e:07:9f:ac:2f:2a:65:06:6b:34:
                    75:f6:ea:a2:22:c4:31:02:67:f5:00:0c:90:de:62:
                    da:9c:19:f9:de:d4:84:12:6b:aa:18:f4:0d:5d:aa:
                    ae:74:01:41:12:5d:1d:4c:aa:52:23:7d:ae:98:25:
                    f7:d6:c7:ae:7e:39:78:db:46:cc:f8:f1:7d:6e:e5:
                    12:80:0b:e9:6e:c9:ea:5d:b2:55:ec:8d:ec:59:bf:
                    81:50:f5:5d:ca:d6:01:7c:56:d9:34:95:01:1a:83:
                    7c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2D:BC:CA:D5:BD:C2:91:4C:48:97:4A:26:92:3B:ED:75:78:D9:9A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77DC1D4C50E611F0BFB59983DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.65.0-154.219.70.255
                  154.219.75.0/24
                  154.219.91.0-154.219.93.255

    Signature Algorithm: sha256WithRSAEncryption
         26:4b:11:6e:92:3e:fb:9b:e9:f3:04:67:4d:60:c0:df:2a:6c:
         70:9c:7b:fe:30:58:58:10:83:0b:8e:a8:c8:48:0c:50:62:57:
         5f:bb:30:a1:19:2a:dd:67:c0:0e:48:a8:92:da:16:80:69:43:
         c7:2c:d7:aa:8b:6f:b9:91:5b:fc:37:45:3a:33:69:dd:da:00:
         15:70:50:0f:23:61:39:9e:44:ad:90:df:40:5c:e1:ae:d4:57:
         23:d1:1f:60:2e:c1:f0:2d:8d:19:4b:1b:42:21:aa:f7:cd:d6:
         59:ef:f1:68:8d:8e:08:ac:ae:93:eb:22:63:9f:49:d7:b0:07:
         65:8f:da:c4:11:2f:78:30:ef:17:a8:29:46:48:ca:38:1a:a9:
         9a:7b:df:a5:f0:a3:ef:e5:af:42:ce:a3:39:58:50:a9:c2:e4:
         e5:36:ea:64:e1:7a:6f:17:fc:86:5b:30:41:57:8b:50:22:1d:
         b3:a8:86:a2:9e:18:0f:f5:b7:df:88:b9:f3:41:67:54:e0:da:
         7b:d5:56:c2:36:20:2f:19:5f:64:8a:94:6c:51:5a:f8:8f:5d:
         93:4b:c1:12:46:5a:af:8b:ec:15:8d:0f:a1:76:7c:a4:6a:32:
         f7:fc:90:fc:21:3a:b0:2d:c3:32:35:0e:46:b3:a3:aa:ce:83:
         fb:98:32:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:06:51 2025 by rpki-client