Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/4FD7C9F427E711F0BCA00BF5DAE4EC9C.roa
File:                     4FD7C9F427E711F0BCA00BF5DAE4EC9C.roa (raw, json)
Hash identifier:          7HwDCppU/f5fuwrPAf2xp7Ayrbe7TxptLlo+dblJyew=
Subject key identifier:   C3:DA:52:82:63:D5:32:6C:8F:0F:68:37:3B:8B:2F:D6:E6:5B:F1:82
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       0673
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/4FD7C9F427E711F0BCA00BF5DAE4EC9C.roa
Signing time:             Sat 03 May 2025 06:24:48 +0000
ROA not before:           Sat 03 May 2025 06:24:43 +0000
ROA not after:            Thu 03 May 2035 06:24:43 +0000
asID:                     211407
IP address blocks:        41.216.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 May 2025 02:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651 (0x673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: May  3 06:24:43 2025 GMT
            Not After : May  3 06:24:43 2035 GMT
        Subject: CN=6815b6b0-abe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:55:b8:30:63:fe:04:7d:3e:34:19:f2:c0:ab:
                    9b:8a:de:77:3e:0b:ab:82:7b:22:e7:38:ae:bb:58:
                    b4:dd:a5:61:3b:df:1c:54:0e:dc:df:b2:e2:a5:20:
                    66:09:88:52:aa:84:a7:37:db:84:f3:31:61:be:b2:
                    11:37:38:de:f0:83:2e:05:d7:4d:eb:08:ef:ae:26:
                    96:6b:e9:10:23:6b:8c:14:14:1d:32:62:9f:41:bb:
                    5f:a9:5e:cd:75:9e:22:a5:15:f3:58:16:3e:3b:f7:
                    b9:ca:1b:8d:6e:34:35:5e:b5:9e:75:36:d2:3c:a4:
                    41:60:84:1f:b4:26:ee:2b:eb:1d:c7:76:69:c0:3c:
                    04:3b:d6:02:85:b9:b9:16:ae:c3:a4:4e:c9:36:47:
                    57:c3:ec:17:4e:6c:96:dc:59:23:01:8a:34:86:0e:
                    d1:46:e6:91:9d:a1:fe:1b:63:ab:d6:fc:c9:a3:35:
                    88:ba:5a:83:88:25:e4:f5:e2:7c:a1:b3:0d:27:80:
                    18:ae:83:cb:e1:e1:eb:54:80:10:23:c3:05:11:64:
                    a8:41:02:9f:a0:4f:48:6a:46:e9:aa:04:34:b9:27:
                    ae:c0:59:ee:30:c3:18:7d:59:cb:46:97:7e:89:04:
                    ac:63:c9:cd:60:2f:d5:75:d0:21:87:60:fc:3a:51:
                    1d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DA:52:82:63:D5:32:6C:8F:0F:68:37:3B:8B:2F:D6:E6:5B:F1:82
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/4FD7C9F427E711F0BCA00BF5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:c7:3a:8f:fa:d7:24:14:59:fe:da:27:aa:3b:be:60:50:80:
         61:b3:a0:5a:ec:fb:bf:0d:bc:70:3e:9d:f9:9f:50:d9:30:6f:
         45:d8:58:e6:bf:d3:b2:63:13:28:15:eb:f2:c8:7f:ef:9f:25:
         36:34:9f:fa:0a:29:b0:3c:73:8e:39:bb:9d:c6:09:6d:ca:07:
         da:99:f7:1a:49:a4:5d:e0:eb:19:a2:cf:fb:58:78:78:9c:cc:
         87:6c:0d:15:72:fd:d8:28:9a:73:1f:67:32:cf:45:9b:46:4e:
         16:d8:33:d9:6d:4f:16:53:a4:62:30:64:f1:73:60:88:15:49:
         47:7e:00:54:e5:c6:df:b9:ff:dd:10:72:e6:02:ec:be:ca:c5:
         c8:d4:d1:d3:bc:42:0a:30:c6:ee:88:30:86:97:d3:93:28:d0:
         b9:a0:25:ea:31:c1:a1:02:04:b7:65:5c:6d:7a:b4:72:e8:31:
         53:86:7f:d0:9f:49:23:07:7f:af:46:31:14:23:cb:4e:1b:5d:
         19:f7:11:0a:96:4f:1c:98:88:ba:b6:77:95:78:3d:de:18:ca:
         e2:e9:de:39:4c:77:55:3d:b0:cd:18:7e:b4:0a:59:1a:da:12:
         88:5a:9d:77:78:76:5a:49:12:42:52:aa:b3:9a:81:b5:b4:6a:
         57:9e:2f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:37:46 2025 by rpki-client