Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62DDA1566FCF11F0B2BC2A9CDAE4EC9C.roa
File:                     62DDA1566FCF11F0B2BC2A9CDAE4EC9C.roa (raw, json)
Hash identifier:          wqS8pt8Y5UsEx4QE2lmrlAy8n5NN2PLcF/uitFigwiY=
Subject key identifier:   F2:D5:69:C7:F6:2B:EB:89:5A:A7:7C:EA:E9:B5:9C:52:EA:DF:E2:63
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       019062
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62DDA1566FCF11F0B2BC2A9CDAE4EC9C.roa
Signing time:             Sat 02 Aug 2025 18:34:56 +0000
ROA not before:           Sat 02 Aug 2025 18:34:51 +0000
ROA not after:            Wed 10 Sep 2025 18:34:51 +0000
asID:                     395886
IP address blocks:        154.94.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 06 Aug 2025 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102498 (0x19062)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  2 18:34:51 2025 GMT
            Not After : Sep 10 18:34:51 2025 GMT
        Subject: CN=688e5a50-fe22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f8:09:04:ce:ee:f7:1a:dd:17:b7:5e:38:ab:
                    43:83:09:2c:a0:e7:21:59:0b:66:99:22:dc:60:80:
                    44:dd:d8:d2:b1:42:a8:0d:b1:81:74:f2:4c:af:36:
                    e5:94:3a:ce:97:63:09:9c:c6:5e:87:8d:e0:a1:32:
                    3a:de:66:cd:c1:f6:fb:6d:dc:50:cf:2a:d5:df:d8:
                    be:57:08:95:02:b2:7a:dc:74:7a:74:29:41:21:57:
                    a0:67:ad:3d:b2:c6:8e:72:33:5b:fe:ed:2c:6b:f2:
                    17:23:a3:08:83:1b:7a:ff:eb:c9:3e:97:dc:a2:95:
                    3c:25:f5:c9:33:f6:7f:ac:19:8e:a9:e9:c3:4d:ff:
                    a4:00:94:74:2e:8e:87:82:95:3b:d2:3b:8e:dc:c3:
                    f3:2e:80:70:96:4c:87:34:2b:71:41:89:b7:5c:e8:
                    f7:f3:99:27:bf:06:86:f8:21:68:3c:fc:fb:66:0f:
                    be:4c:c0:8a:ec:b2:8d:72:56:8e:21:2f:eb:7f:20:
                    f0:dc:84:0c:b5:dc:4c:91:c8:f4:e9:f9:a0:6e:5f:
                    9f:8c:ec:d4:70:88:ec:ef:fa:a0:8a:61:33:84:7c:
                    0d:26:e8:c7:d0:19:18:82:09:ab:b3:8e:c2:d9:c2:
                    07:bb:f3:9e:27:00:56:3a:f9:8a:96:a5:90:9f:9f:
                    30:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D5:69:C7:F6:2B:EB:89:5A:A7:7C:EA:E9:B5:9C:52:EA:DF:E2:63
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62DDA1566FCF11F0B2BC2A9CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:0e:77:6f:e3:7d:ca:82:47:d6:e4:27:40:ec:75:96:33:a8:
         05:e3:17:36:7e:60:cc:fb:65:e0:92:a7:d2:d4:9b:56:f9:3e:
         2f:6f:88:84:13:7f:18:f3:97:1e:31:75:65:36:70:4a:3f:12:
         f0:0c:69:d3:37:0d:cb:c6:9f:d8:62:24:61:e1:b2:14:29:59:
         34:bf:16:00:bb:62:a6:40:98:62:25:ec:fc:f8:5b:32:4b:33:
         64:e1:16:3d:5b:3e:4f:0f:58:5a:91:a4:f2:64:b2:85:33:7a:
         a0:d8:66:62:e7:a4:03:4e:dd:f6:25:1f:28:b4:81:25:21:91:
         fc:c3:a4:8a:2f:c4:99:2e:03:09:ba:8e:09:b5:1e:5d:d1:25:
         0e:32:28:75:a3:7a:ec:ab:d9:3a:dd:cd:0e:03:03:8f:7e:fc:
         d7:71:b8:78:95:f0:1a:04:a6:ff:9b:12:e3:6b:35:44:d7:22:
         f1:26:86:59:70:90:fa:e3:68:8e:cc:62:6b:59:07:5a:7a:ae:
         f7:1b:ae:20:a8:f4:c3:b7:cd:1e:74:51:53:45:dd:2f:22:ea:
         c4:ea:69:4d:a6:31:48:b2:30:78:57:8a:22:a2:05:aa:4f:e1:
         dd:1e:cb:6f:70:e3:0f:f9:3e:9a:f6:63:f1:b8:b9:23:30:af:
         78:34:0b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:18:33 2025 by rpki-client