Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6166EA60F3E411EFAC407F44762E951A.roa
File:                     6166EA60F3E411EFAC407F44762E951A.roa (raw, json)
Hash identifier:          OOnjOxl2Qj1eG8Eu2+TIiJAksaBYpsvVgXaY6dRUMqg=
Subject key identifier:   F1:EB:3D:16:40:A6:EB:D5:D1:88:96:00:3D:49:B8:BE:C3:67:AC:28
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01606E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6166EA60F3E411EFAC407F44762E951A.roa
Signing time:             Wed 26 Feb 2025 01:52:48 +0000
ROA not before:           Wed 26 Feb 2025 01:52:44 +0000
ROA not after:            Thu 19 Feb 2026 01:52:44 +0000
asID:                     984
IP address blocks:        154.92.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Apr 2025 12:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90222 (0x1606e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF
        Validity
            Not Before: Feb 26 01:52:44 2025 GMT
            Not After : Feb 19 01:52:44 2026 GMT
        Subject: CN=67be73f0-97b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:de:2a:74:7a:41:25:58:e4:05:2a:2c:6c:
                    11:56:3e:e6:5e:df:07:b7:5e:57:83:12:d1:e3:20:
                    fc:fb:09:99:46:cf:f6:11:42:66:01:e1:fc:62:e4:
                    ba:1c:a6:3e:5d:03:f3:27:0a:7a:17:75:80:b6:77:
                    0e:44:93:93:bc:28:91:8d:7a:42:2e:83:ce:5b:c7:
                    2d:38:1d:a9:9a:5a:2c:01:cc:5e:89:dc:8d:68:31:
                    23:16:68:79:c3:1f:a7:d8:8c:e5:da:41:d9:a2:92:
                    11:28:d7:c6:dc:5d:0f:95:32:64:6a:77:b3:45:4b:
                    9b:4e:cb:e7:21:58:49:b5:e4:2b:20:d7:70:ad:19:
                    9d:04:bb:6b:4d:2e:50:06:79:5a:ba:52:a6:6d:79:
                    e0:30:f6:7b:22:b2:6e:db:e0:aa:b0:c8:d7:3f:35:
                    d7:ff:af:54:b6:e6:62:b0:5f:2b:37:92:f9:80:e6:
                    05:09:e9:6e:14:71:f8:cd:40:6a:2f:d0:6c:6e:28:
                    0e:77:ba:85:bf:0c:6e:e8:b1:1a:d0:75:8a:22:2e:
                    b6:4e:05:b0:cf:81:85:1d:c7:16:44:6c:50:23:6f:
                    9a:73:db:07:f2:c0:0a:60:5d:c5:08:1f:05:86:40:
                    e0:57:89:78:6a:0b:80:5a:d5:b8:86:6a:b7:04:af:
                    35:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EB:3D:16:40:A6:EB:D5:D1:88:96:00:3D:49:B8:BE:C3:67:AC:28
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6166EA60F3E411EFAC407F44762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:13:b5:38:33:44:00:a5:dc:ff:1e:aa:a2:38:2e:6c:af:5a:
         11:95:3d:da:00:c4:92:c9:0a:ed:0f:e6:16:79:32:6f:5e:1f:
         ad:5b:ba:05:4b:7c:b9:f1:40:ac:c5:5d:5d:c9:61:a7:7f:01:
         99:53:69:77:f2:bf:9a:f2:93:b6:49:16:18:72:1e:23:57:6b:
         5f:df:1f:72:db:ac:3a:d2:c5:f0:ba:6e:79:07:7b:90:c5:6c:
         69:16:fc:0c:23:77:d4:59:53:32:40:1a:e4:49:37:09:b8:9a:
         b9:bc:df:ce:c8:78:fc:76:33:47:e5:3f:03:03:c2:88:44:74:
         17:9f:74:18:71:dc:b2:92:a1:10:ed:d8:fe:51:75:e2:dd:4f:
         9f:3a:21:7f:89:b5:fe:60:2d:de:c6:f0:c7:91:fd:fb:47:36:
         d5:1d:0f:fa:7d:69:85:6a:9b:bb:c2:19:38:63:e1:6f:c3:f4:
         b0:0a:77:ee:5b:37:4d:59:bd:c4:96:fd:88:13:96:25:cf:52:
         7e:1e:c2:ab:4b:3f:0e:86:a1:2c:95:d8:12:7d:46:d4:cb:af:
         9c:26:ec:a6:36:57:0f:78:76:80:fc:1a:4d:f0:49:55:c2:a5:
         9f:b5:18:a2:71:ef:2e:ef:dc:0a:3d:25:69:a8:89:1e:e6:f6:
         16:b6:66:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:00 2025 by rpki-client