Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46BFAD646FCC11F087000587DAE4EC9C.roa
File:                     46BFAD646FCC11F087000587DAE4EC9C.roa (raw, json)
Hash identifier:          ofXcftx7wdtUiwC4iv0JupLaBZsQKDgzgBFoZUK7MiI=
Subject key identifier:   9F:45:FE:0B:5E:6E:95:71:87:5A:CD:D6:AA:6B:69:0B:F6:7D:6A:85
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01905E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46BFAD646FCC11F087000587DAE4EC9C.roa
Signing time:             Sat 02 Aug 2025 18:12:40 +0000
ROA not before:           Sat 02 Aug 2025 18:12:35 +0000
ROA not after:            Wed 10 Sep 2025 18:12:35 +0000
asID:                     137899
IP address blocks:        154.94.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 06 Aug 2025 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102494 (0x1905e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  2 18:12:35 2025 GMT
            Not After : Sep 10 18:12:35 2025 GMT
        Subject: CN=688e5518-0810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:46:f7:ac:bd:96:19:28:1f:a8:34:61:43:d3:
                    75:13:a3:d8:be:01:61:71:9d:13:8b:c3:71:27:ec:
                    22:61:9a:57:d0:f7:b0:78:5a:39:e1:4e:b7:b3:67:
                    a2:f7:96:20:64:aa:7a:8c:2e:ae:6f:e1:e0:29:4f:
                    0c:8b:51:18:dd:1b:2c:98:76:e9:88:ab:bc:f8:0f:
                    f1:b9:c3:63:63:dd:8b:cd:39:71:dc:d4:d6:63:42:
                    38:36:94:99:27:89:a4:71:86:3c:ac:e3:e1:ab:7f:
                    b0:b6:97:e9:fa:33:3c:54:58:31:44:02:ba:04:0f:
                    b5:94:91:59:ce:db:b3:05:f8:fd:a4:d5:47:cd:cd:
                    1d:90:a9:d7:0f:f1:f8:bb:3c:00:38:7a:cb:65:05:
                    32:64:4b:56:6e:d7:cf:d6:50:e0:5a:7f:e8:f0:5f:
                    b7:0c:2b:11:f5:d8:28:2b:9b:a1:a6:b4:9a:51:1f:
                    d1:a1:96:c2:fc:fe:3d:de:12:d4:3b:2c:04:56:57:
                    ca:70:88:23:47:c0:fa:3a:ca:52:55:c8:b3:34:5d:
                    24:c2:41:ec:10:b4:7f:68:c8:29:f9:82:f4:a2:76:
                    43:14:eb:0f:2a:da:71:73:a1:8f:70:07:ec:3b:7e:
                    db:1e:8c:a0:07:9b:1f:2d:ee:ec:ef:71:b9:96:a3:
                    14:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:45:FE:0B:5E:6E:95:71:87:5A:CD:D6:AA:6B:69:0B:F6:7D:6A:85
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46BFAD646FCC11F087000587DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:04:d9:55:16:c7:6f:4b:e0:11:80:9f:99:ad:4d:89:80:47:
         1c:47:8e:7d:10:bf:27:fa:d9:aa:f2:05:4c:bb:23:80:d4:c6:
         df:5f:dc:2a:84:c8:23:01:a8:ac:e6:9e:b2:22:ac:43:50:aa:
         43:b4:cb:15:2b:48:14:57:21:80:4c:6a:c8:6b:e7:5d:c9:98:
         27:3b:93:56:30:90:a8:b9:36:be:d5:44:fb:3e:6c:2c:58:5b:
         d5:1e:7d:72:13:f6:5d:ae:db:54:50:6f:cd:83:e2:87:94:26:
         c8:6c:32:4e:76:8d:0c:09:3b:0a:66:3e:60:8b:db:7b:e8:1d:
         2d:14:37:e6:4a:ee:6b:c0:bd:85:97:7d:ff:78:a8:b6:c4:54:
         10:1c:17:91:0f:40:b5:56:7c:73:88:d4:db:9c:4c:b1:dc:12:
         13:52:ab:18:3c:e5:14:dc:29:28:61:62:fd:36:18:d9:07:2b:
         33:be:44:65:1b:bf:75:1b:ef:62:2e:8c:97:97:ce:5a:7f:a9:
         4c:d6:7f:7e:ad:c9:93:ae:25:fc:fb:95:40:35:04:52:e5:d8:
         56:3d:0e:a3:dc:92:c9:7a:3c:ec:ce:5a:2a:33:62:b6:82:cf:
         74:aa:7a:75:0c:cf:45:68:2a:91:c8:e1:2f:45:a6:94:3e:aa:
         62:e5:93:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:17:01 2025 by rpki-client