Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7733E8466C911F0991188E3DAE4EC9C.roa
File:                     A7733E8466C911F0991188E3DAE4EC9C.roa (raw, json)
Hash identifier:          bJrTENlJa06q+gJAbn/uiU2RuDa5JxcwG4dIpM6YFfM=
Subject key identifier:   F3:67:D7:5E:30:5D:D8:37:00:6F:E0:34:46:48:3B:3C:82:50:CC:CA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       018EB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7733E8466C911F0991188E3DAE4EC9C.roa
Signing time:             Tue 22 Jul 2025 07:01:14 +0000
ROA not before:           Tue 22 Jul 2025 07:01:09 +0000
ROA not after:            Wed 27 Aug 2025 07:01:09 +0000
asID:                     6079
IP address blocks:        154.202.138.0/23 maxlen: 24
                          154.202.140.0/22 maxlen: 24
                          154.207.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 08 Aug 2025 00:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102072 (0x18eb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 22 07:01:09 2025 GMT
            Not After : Aug 27 07:01:09 2025 GMT
        Subject: CN=687f3739-fc1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:53:a8:67:63:f5:02:b5:43:1c:3c:b9:62:d9:
                    bf:f0:e4:67:96:45:fb:9c:c0:68:7f:8e:f5:07:26:
                    14:49:3f:3a:0e:9a:81:31:5b:23:a9:de:f4:c2:bd:
                    55:d8:fb:32:7f:d0:6b:87:d2:28:54:79:7d:8f:4f:
                    c4:4a:0e:6b:b9:ee:3b:89:09:4f:b9:3a:c9:8d:43:
                    ca:f8:d1:85:e3:b8:10:09:db:58:bb:b7:a3:1f:9e:
                    b0:38:77:4b:8d:d4:d2:80:4f:55:56:96:08:82:8c:
                    00:25:60:27:7c:4e:a6:22:73:e9:69:74:f7:4e:0c:
                    c3:7b:d1:3d:f4:84:9d:cf:46:e2:17:85:92:87:9c:
                    79:e9:8c:00:96:61:ff:78:43:1e:48:2a:dd:8f:d7:
                    75:9b:c5:d4:af:9f:5f:60:29:d6:ea:95:7d:58:ed:
                    97:f6:05:0f:4a:56:e7:cd:00:f8:e7:79:d0:58:46:
                    c9:ec:ee:3e:e0:58:f4:06:99:71:ec:fa:9b:b1:16:
                    cb:9e:bd:30:27:5f:ac:11:01:8e:ad:c0:f0:49:21:
                    09:28:a8:2c:86:80:0c:22:d6:e4:be:d8:8e:35:67:
                    ae:8a:f8:47:db:6d:8c:21:c3:5a:36:76:0a:32:20:
                    08:b8:cd:a8:24:8c:45:62:de:a3:46:23:b9:34:3a:
                    34:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:67:D7:5E:30:5D:D8:37:00:6F:E0:34:46:48:3B:3C:82:50:CC:CA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7733E8466C911F0991188E3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.138.0-154.202.143.255
                  154.207.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         43:20:9d:5b:56:84:2a:19:9c:ab:c7:06:9d:f4:cf:bd:69:f7:
         5f:0f:f9:11:88:63:fa:94:df:14:87:1d:3a:3c:46:a8:42:35:
         a8:15:ee:ad:e8:19:67:52:db:99:5e:1f:dc:0f:2c:cb:ae:6f:
         ee:e8:3a:92:12:2b:26:fa:f7:c7:50:16:f9:63:e5:81:a3:b4:
         0c:a8:8d:cd:e6:81:39:2e:30:2d:dc:95:4d:63:6f:c8:44:a0:
         26:ab:7e:b7:8a:a5:4b:d8:a6:cd:1c:2e:36:f1:9b:85:54:82:
         7a:f0:6d:86:26:cb:14:f4:8a:7d:76:2b:ac:46:7b:76:4b:ca:
         a9:56:29:c4:8e:c4:e6:81:d7:38:d9:96:45:9e:68:18:ef:a1:
         dd:c1:eb:24:af:7b:5f:86:71:5a:09:49:d1:fe:54:03:25:4c:
         4a:04:ab:37:b3:13:6d:8c:eb:38:2a:1d:15:ee:df:bc:8c:6b:
         e5:2f:dd:ef:7e:83:4c:86:2f:19:43:c6:37:73:3b:4f:86:30:
         b4:3b:43:05:a0:5f:b7:f4:29:77:e1:8a:27:3c:e2:81:82:f1:
         c3:00:6b:b1:0b:83:07:aa:0b:86:d6:7f:e7:70:54:c9:71:cd:
         f8:ca:8f:12:d5:08:0d:76:7d:6f:f2:ac:87:9e:9a:98:59:ae:
         3d:f9:61:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:23:43 2025 by rpki-client