Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/75AC859A370D11F090CB80C4DAE4EC9C.roa
File:                     75AC859A370D11F090CB80C4DAE4EC9C.roa (raw, json)
Hash identifier:          wNlXSA3XaPDDTlmT7XDByAxGbMbtmqoL8WF0HAXmB/4=
Subject key identifier:   52:DF:C9:CD:62:37:EF:ED:7B:BD:5E:1A:68:32:24:8B:83:C9:2E:A3
Certificate issuer:       /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial:       05D0
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/75AC859A370D11F090CB80C4DAE4EC9C.roa
Signing time:             Thu 22 May 2025 13:05:40 +0000
ROA not before:           Thu 22 May 2025 13:05:34 +0000
ROA not after:            Mon 21 May 2035 13:05:34 +0000
asID:                     5536
IP address blocks:        102.218.130.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1488 (0x5d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B3234AF, serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
        Validity
            Not Before: May 22 13:05:34 2025 GMT
            Not After : May 21 13:05:34 2035 GMT
        Subject: CN=682f2124-6ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:67:41:fa:1f:b3:b5:36:e9:c5:95:fd:89:
                    06:03:c0:2c:bf:63:86:82:f5:cc:a8:ec:44:c9:6f:
                    32:67:dd:b3:1d:5a:d6:2f:4a:b7:65:e9:36:ea:7d:
                    d8:e9:33:4f:04:d9:1c:4c:f4:c0:67:46:2b:3f:fa:
                    bc:d3:25:62:2c:5c:38:55:9a:8f:b9:43:d0:aa:3b:
                    76:0b:e8:e7:17:d4:82:09:ea:69:0f:dd:9c:a4:14:
                    2a:99:ef:73:30:d0:ac:97:c6:98:b0:78:5e:8d:62:
                    ce:03:df:77:d1:15:be:fd:b5:3a:5f:33:d7:95:aa:
                    d1:94:50:93:6c:84:9e:3c:c2:66:02:af:7d:d6:53:
                    be:17:aa:d2:ad:c0:55:95:5c:36:a1:78:07:a4:58:
                    df:e0:2f:32:1b:69:46:12:3c:ea:22:84:05:49:0f:
                    f3:eb:2c:f6:ec:d1:e2:5e:0f:a0:97:9c:f7:80:02:
                    f5:40:29:15:d6:75:d7:ad:4b:ff:ea:36:5d:62:c5:
                    a0:ed:b6:19:9e:33:24:bd:6d:4f:49:3a:fa:71:75:
                    6e:8e:c5:27:37:f1:7b:8f:68:a0:2a:5f:49:d3:3d:
                    3c:85:59:dc:d1:d4:17:cb:3f:78:0d:8b:05:d4:9a:
                    f6:26:47:94:05:c1:24:5b:d9:d0:3a:d6:cd:e2:eb:
                    86:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DF:C9:CD:62:37:EF:ED:7B:BD:5E:1A:68:32:24:8B:83:C9:2E:A3
            X509v3 Authority Key Identifier:
                keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/75AC859A370D11F090CB80C4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:a4:57:c6:26:05:36:ea:a1:d9:06:30:79:81:90:ed:d1:47:
         c4:41:ca:b3:5c:9a:e7:1d:23:92:c2:52:2d:88:95:11:47:90:
         61:fd:cd:b2:a6:c2:17:c8:6c:eb:69:b8:5a:c9:da:74:e0:14:
         bd:1c:bc:d7:b7:13:a6:bf:b7:18:71:29:af:4e:23:cc:12:18:
         c5:07:c0:80:1d:6f:c1:5c:36:5e:f3:68:bd:6e:30:c7:47:f6:
         90:ff:e5:da:ff:7e:b7:8b:d3:91:06:1e:36:73:f7:fd:4c:e7:
         92:76:f5:30:26:3a:1d:a8:ce:18:4d:92:03:49:9e:77:62:ad:
         71:5e:1f:e0:9a:7f:ae:e1:a5:2c:84:20:b4:0c:3a:64:4f:92:
         13:67:7f:b8:c5:be:e7:e3:e4:30:b7:9c:46:36:b5:df:59:62:
         16:85:23:c4:b0:56:f0:f0:99:db:4f:1c:f9:6d:2a:18:8a:84:
         0c:1d:7b:80:22:7c:31:8a:bf:b9:92:67:37:85:c0:3c:6c:ee:
         93:64:da:8a:b3:f3:bc:ea:12:d2:42:59:a4:de:bc:22:54:63:
         74:c2:a3:05:51:53:ff:f2:fc:98:f1:1c:d8:51:e2:22:9b:0c:
         9b:1a:fb:16:98:56:f0:a6:33:7b:42:57:68:a9:4b:96:c7:1f:
         46:14:d8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:58:37 2025 by rpki-client