Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/16D39CCA34F611F09F59ACC1DAE4EC9C.roa
File:                     16D39CCA34F611F09F59ACC1DAE4EC9C.roa (raw, json)
Hash identifier:          RxF4o6Ulg0ztZxmKsLmY9mSzJVG0CHOUQubaXMUFO4s=
Subject key identifier:   8C:7E:CC:1A:7F:70:03:C8:11:15:C5:CD:8D:F2:2E:92:5D:66:F9:81
Certificate issuer:       /CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Certificate serial:       08C2
Authority key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/16D39CCA34F611F09F59ACC1DAE4EC9C.roa
Signing time:             Mon 19 May 2025 21:13:20 +0000
ROA not before:           Mon 19 May 2025 21:13:15 +0000
ROA not after:            Sat 19 May 2035 21:13:15 +0000
asID:                     37049
IP address blocks:        2c0e:7e00::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2242 (0x8c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BF27AF, serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
        Validity
            Not Before: May 19 21:13:15 2025 GMT
            Not After : May 19 21:13:15 2035 GMT
        Subject: CN=682b9ef0-23a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:2f:26:43:4c:82:30:c7:b7:09:45:8c:82:
                    ba:4c:80:ca:87:23:e5:79:bb:19:a7:22:3f:31:f8:
                    1b:77:c8:f4:5c:cc:df:f2:b3:70:5b:66:3a:2a:53:
                    eb:8a:74:cc:0a:3e:e2:0e:6d:b9:51:36:2d:d5:44:
                    09:77:4b:6c:bd:92:07:5a:88:ab:38:98:94:03:76:
                    fc:6f:d1:3d:d7:43:a3:f2:bc:d9:12:0f:6b:02:c8:
                    78:78:f7:55:9a:19:05:eb:68:a0:d7:6f:29:f6:62:
                    1c:e7:3f:24:b2:2f:6f:c7:25:af:c1:6e:f5:dc:48:
                    fa:35:3b:0d:79:b6:f0:b0:c2:77:1b:77:ed:fa:ec:
                    97:50:f1:02:21:bd:36:62:aa:00:3f:9f:5b:51:5f:
                    55:c9:53:36:5e:02:60:e6:66:13:5a:6b:46:2f:d8:
                    87:76:7f:57:d5:eb:32:db:a6:87:39:28:e7:77:33:
                    94:a6:66:04:74:b7:2e:10:76:63:a9:fa:eb:5c:df:
                    0d:b1:5c:ab:13:81:42:de:18:e5:5a:2c:6a:a6:79:
                    e5:c1:b2:07:a2:42:aa:5f:d3:1e:3c:45:8d:6b:87:
                    31:d9:e7:e8:99:3d:8c:e0:1b:0a:f3:82:68:8e:e6:
                    84:0e:d5:ca:d7:d5:8e:7b:ea:3a:68:23:99:f0:c8:
                    2d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7E:CC:1A:7F:70:03:C8:11:15:C5:CD:8D:F2:2E:92:5D:66:F9:81
            X509v3 Authority Key Identifier:
                keyid:60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/16D39CCA34F611F09F59ACC1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0e:7e00::/28

    Signature Algorithm: sha256WithRSAEncryption
         4b:da:2b:a0:6d:a7:72:7c:17:04:69:c9:3f:66:c9:62:59:5e:
         bc:31:26:9a:ed:e1:ac:0f:ca:7c:51:7a:eb:3f:cb:7e:10:89:
         18:94:19:2b:fb:b0:44:ba:24:85:76:6b:54:d5:a9:be:2b:1a:
         bc:ec:54:77:c1:ed:c2:04:a9:f0:31:55:7b:cb:e2:b1:f4:2f:
         ff:a1:94:c5:c4:22:e5:90:31:0d:e3:93:b5:52:55:74:62:95:
         30:20:84:c7:b1:4c:35:d4:c1:95:2c:c7:30:27:f7:c2:14:05:
         c5:28:2f:cc:16:dc:58:6a:86:3f:71:0f:04:ef:c6:20:8a:17:
         6e:bf:de:34:2e:f5:0f:16:19:31:75:d4:85:7f:04:5d:a6:fe:
         2b:27:64:c2:ca:57:b1:a4:6b:10:ec:91:8e:8a:55:65:f4:84:
         a8:b7:70:98:36:e3:3b:44:cf:62:aa:56:72:e4:20:57:48:22:
         7b:c9:02:6a:7e:94:0b:32:3d:f8:43:91:7d:56:9d:39:8e:d7:
         3f:02:45:32:f6:16:a8:dc:8e:ef:fd:2d:93:eb:6e:92:59:07:
         c2:a1:31:bc:5d:2c:e1:6d:d6:17:3a:50:a3:45:f8:96:03:17:
         b1:15:0c:f7:1f:8c:11:2d:c4:b3:48:35:12:c0:59:c1:92:39:
         ab:f8:04:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:30:54 2025 by rpki-client