Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C8501FA03E511F098528772762E951A.roa
File:                     1C8501FA03E511F098528772762E951A.roa (raw, json)
Hash identifier:          m92hVfXTCS6jQh/URGeigRx9YPs5k+RvgjbcxVb84Vk=
Subject key identifier:   E2:6B:4E:EB:0B:7C:AE:57:08:04:18:96:07:8D:6F:00:AF:EA:CD:81
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       017490
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C8501FA03E511F098528772762E951A.roa
Signing time:             Tue 18 Mar 2025 10:38:21 +0000
ROA not before:           Tue 18 Mar 2025 10:38:17 +0000
ROA not after:            Sat 19 Apr 2025 10:38:17 +0000
asID:                     136501
IP address blocks:        154.92.205.0/24 maxlen: 24
                          154.92.206.0/24 maxlen: 24
                          154.92.207.0/24 maxlen: 24
                          154.92.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Apr 2025 12:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95376 (0x17490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF
        Validity
            Not Before: Mar 18 10:38:17 2025 GMT
            Not After : Apr 19 10:38:17 2025 GMT
        Subject: CN=67d94d1d-05eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e1:e0:d8:9e:63:1a:3b:26:25:e3:c2:1d:5b:
                    43:c2:a9:db:fa:73:a1:0d:cc:01:9d:66:72:4d:6a:
                    0d:bc:0a:a3:87:25:54:19:85:75:ad:60:d2:cf:aa:
                    5d:0f:e3:5a:32:f5:d0:e6:14:f0:b1:22:f3:d4:1c:
                    d5:63:fc:74:ff:6d:36:fc:25:71:c8:89:db:35:25:
                    c4:02:30:4f:f0:c8:1a:d7:57:7d:7c:3e:bd:28:e0:
                    1d:04:86:e8:07:e8:16:2f:f8:13:99:48:f6:ea:a0:
                    ba:e4:92:9d:92:55:b7:63:68:6d:f0:f6:1f:4b:a0:
                    04:31:7b:5a:cb:a5:67:7d:0e:67:3c:97:65:3c:99:
                    9e:1b:24:10:3b:bc:37:45:93:40:ce:e7:c8:5e:16:
                    9b:05:b5:ba:6e:ee:73:49:51:ca:d7:c9:c8:13:5e:
                    f2:da:fe:96:ec:c9:3f:65:40:c6:37:34:a2:b4:fe:
                    3d:93:b9:cc:37:51:56:d2:0a:7c:2e:4b:d3:cc:29:
                    68:97:d8:53:7d:31:d8:85:b4:df:9a:39:59:9f:3e:
                    f3:29:29:d8:d5:c9:58:6b:9c:a1:4c:a3:6a:d7:45:
                    29:dd:85:84:c3:cf:b5:64:9f:15:c0:a3:57:0e:02:
                    91:aa:26:be:d6:10:39:be:ad:c7:66:44:8d:ba:3f:
                    b1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6B:4E:EB:0B:7C:AE:57:08:04:18:96:07:8D:6F:00:AF:EA:CD:81
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C8501FA03E511F098528772762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.205.0-154.92.208.255

    Signature Algorithm: sha256WithRSAEncryption
         ab:c6:7e:2a:b8:69:6d:d9:61:8f:75:66:32:c1:e4:ae:ae:13:
         e1:8d:47:2a:ac:4d:41:03:db:37:74:ca:94:68:2f:7c:de:b7:
         cf:2c:3d:ba:2a:3e:d1:19:11:56:1b:a2:36:94:f8:b5:93:92:
         fc:06:ee:43:5a:fe:a7:a7:4b:6c:a8:30:60:f8:26:24:94:de:
         d6:04:a2:ba:71:d5:7a:76:31:68:02:d1:3d:13:84:b0:34:5b:
         a9:1b:26:55:34:69:15:8b:cc:fc:db:80:c4:88:80:2d:20:a4:
         18:5f:99:57:7b:30:83:84:70:0d:4e:de:a6:f0:5b:56:c9:b4:
         ae:4e:ab:28:9e:3d:49:7a:74:9d:74:25:12:d8:1a:5c:1b:f9:
         50:33:0c:45:97:10:0c:ba:78:99:10:72:7d:d6:26:b0:9b:20:
         3d:62:80:7c:30:fa:eb:0b:db:ed:9d:79:ee:95:ef:50:0a:fb:
         08:62:9a:5d:5e:c6:de:d9:8b:2b:3c:91:e9:7b:cc:ce:52:c3:
         40:83:74:8c:f0:f2:0b:40:6f:a1:da:87:69:db:2c:6d:a9:54:
         57:23:24:65:63:4e:5a:4c:75:61:77:2a:d1:59:71:67:86:fe:
         f1:d3:a2:a4:b6:aa:de:97:20:ab:42:4d:ed:ea:bb:36:c4:1b:
         4b:3d:26:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:14 2025 by rpki-client