Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/8E0A1A0634F811F0AB18B2D1DAE4EC9C.roa
File:                     8E0A1A0634F811F0AB18B2D1DAE4EC9C.roa (raw, json)
Hash identifier:          XHOR283ax2rx3AB8crsGaviXsoeaRKmNrjOf7hjFHLk=
Subject key identifier:   72:B5:A0:0B:03:3E:ED:BF:94:9C:8A:C4:CE:36:36:22:5E:64:F6:A4
Certificate issuer:       /CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Certificate serial:       08C8
Authority key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/8E0A1A0634F811F0AB18B2D1DAE4EC9C.roa
Signing time:             Mon 19 May 2025 21:30:59 +0000
ROA not before:           Mon 19 May 2025 21:30:54 +0000
ROA not after:            Sat 19 May 2035 21:30:54 +0000
asID:                     37049
IP address blocks:        2c0e:7e03::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 01:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2248 (0x8c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BF27AF, serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
        Validity
            Not Before: May 19 21:30:54 2025 GMT
            Not After : May 19 21:30:54 2035 GMT
        Subject: CN=682ba313-37fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f6:66:21:37:0f:56:fa:03:29:67:52:b6:d3:
                    87:35:fe:63:5a:87:f8:49:c9:45:e6:e5:8d:12:a1:
                    89:7f:c5:fd:e7:ff:4f:78:b2:05:88:9d:cb:07:11:
                    72:63:92:da:81:15:d8:92:01:3f:9b:a8:9d:2a:1c:
                    2a:80:08:47:28:17:63:6d:d5:3e:f0:0a:b4:ab:d1:
                    dc:df:9f:6b:1d:20:ab:3b:db:13:13:e7:b9:e8:d1:
                    a6:e5:e8:1d:16:60:f5:91:8b:58:bb:b3:cd:1e:93:
                    bb:43:eb:83:dd:57:9d:ac:c5:45:ce:d3:04:f5:f6:
                    47:46:cf:26:25:e6:0f:38:9d:d3:12:89:8b:b7:8c:
                    1c:45:87:54:89:26:67:fc:32:be:a7:df:2e:1a:6d:
                    2b:37:37:f1:bc:f9:39:91:d8:e5:25:ea:3f:26:87:
                    df:4a:06:42:51:c5:9d:f9:4c:38:64:e9:1f:f3:92:
                    ce:3f:92:f5:a4:bd:39:da:a7:ac:33:57:d0:57:72:
                    d7:da:3a:94:48:6c:d5:1a:10:d8:99:fe:ad:45:c6:
                    8f:de:34:34:f3:ae:e8:a8:dd:0c:aa:32:0f:cf:45:
                    3d:52:23:b7:70:74:5a:88:f4:76:83:3a:e1:c3:70:
                    d8:d1:e3:87:3f:2f:ba:30:44:b8:28:b0:dc:f7:1f:
                    c2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B5:A0:0B:03:3E:ED:BF:94:9C:8A:C4:CE:36:36:22:5E:64:F6:A4
            X509v3 Authority Key Identifier:
                keyid:60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/8E0A1A0634F811F0AB18B2D1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0e:7e03::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:8f:1c:e4:80:1c:5f:54:6f:1c:e0:dc:72:b2:44:72:af:0c:
         3d:8a:00:b7:98:23:26:e4:d3:d1:de:bf:03:14:c7:65:c4:cb:
         d6:4e:96:90:32:82:99:be:ba:04:08:a6:a8:27:81:83:5f:59:
         ba:3a:cf:4f:66:4c:a1:36:bd:39:8c:25:a9:9d:8f:03:51:68:
         35:ff:7d:4e:d1:45:4b:b7:2b:27:10:51:ca:10:fa:24:3f:7e:
         e9:9d:42:8d:51:55:7a:be:6f:b6:6a:73:06:48:c8:5f:2a:2a:
         cf:da:1e:c0:ef:aa:c0:0c:f1:4e:d7:ce:87:5a:1c:f2:03:93:
         70:0d:7e:e5:16:24:9e:d1:4b:7d:e5:61:95:b5:22:ba:75:0c:
         65:ad:70:f2:9f:6a:ac:55:6f:f1:b9:ee:48:55:8b:cb:16:91:
         7e:96:81:fc:8e:ba:05:85:c1:e6:d5:9a:93:d9:10:34:3a:78:
         89:99:8b:2c:95:22:c8:a5:0b:ec:56:f8:8c:9a:80:c4:d2:d2:
         71:9d:f5:3d:c3:32:7c:41:82:fd:ae:59:ad:6d:00:25:aa:0e:
         b1:40:7d:50:87:30:85:be:c1:52:23:e7:4c:02:d4:ad:bf:06:
         1d:ef:16:0c:6d:d1:cc:9f:cb:6d:5d:b1:bb:58:cd:01:da:5a:
         a6:6a:68:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:10:36 2025 by rpki-client