Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/6AADB8960A0B11F095066799762E951A.roa
File:                     6AADB8960A0B11F095066799762E951A.roa (raw, json)
Hash identifier:          wbtyK6kyx9wQCcbCQeVFdEFtOzj4fbQ1jMNTNtESShg=
Subject key identifier:   26:84:F4:46:7E:B0:3C:64:11:32:B9:7E:D7:EA:83:1F:AE:17:0E:24
Certificate issuer:       /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial:       04D3
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/6AADB8960A0B11F095066799762E951A.roa
Signing time:             Wed 26 Mar 2025 06:27:40 +0000
ROA not before:           Wed 26 Mar 2025 06:27:35 +0000
ROA not after:            Thu 26 Mar 2026 06:27:35 +0000
asID:                     135391
IP address blocks:        45.221.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
                          rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235 (0x4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
        Validity
            Not Before: Mar 26 06:27:35 2025 GMT
            Not After : Mar 26 06:27:35 2026 GMT
        Subject: CN=67e39e5c-991a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:cf:e9:5a:cc:16:bc:5d:1e:e5:79:66:7c:
                    ba:9f:9b:dd:8b:d9:1a:6c:59:f0:b9:9e:f4:45:69:
                    a8:ef:a8:6e:a9:9f:6f:eb:d5:0d:76:5f:ea:53:4f:
                    da:e6:bd:8a:96:8e:f3:f8:40:3b:b5:0d:04:fe:04:
                    29:b8:07:17:ed:f1:f4:90:48:b5:bf:3e:8b:e7:fb:
                    7d:7c:1f:54:1a:f0:5e:7b:be:c6:a9:47:2f:20:bd:
                    be:1a:72:20:54:4b:c6:07:39:1d:58:63:46:45:7a:
                    f9:48:38:97:8a:5d:b6:7f:41:6b:db:76:f5:40:07:
                    24:14:cb:5d:5e:b9:ec:1b:9d:44:82:06:8f:e3:fe:
                    d2:60:b0:a3:3b:19:85:1d:d8:4c:df:b6:5b:b6:a5:
                    5e:78:26:5c:98:aa:b8:14:e7:f7:38:74:74:ce:5b:
                    8b:82:3a:df:cd:66:29:85:b3:62:51:77:b6:78:f0:
                    1e:52:bf:92:1b:0b:f1:97:cb:a3:22:07:fa:a7:d2:
                    8d:99:c1:bd:3a:a1:67:84:b9:04:09:e3:e2:0b:9f:
                    33:f2:f3:55:c8:b4:1c:a9:f6:16:29:07:1c:df:4e:
                    34:c9:d9:29:d5:36:4f:c6:13:47:0b:1b:f0:27:85:
                    92:83:04:b7:81:0d:68:e8:ab:8a:41:cc:34:22:4a:
                    12:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:84:F4:46:7E:B0:3C:64:11:32:B9:7E:D7:EA:83:1F:AE:17:0E:24
            X509v3 Authority Key Identifier:
                keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/6AADB8960A0B11F095066799762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:b4:8c:6f:8c:7a:a7:ec:95:e7:c9:2a:58:42:c4:f2:32:8a:
         a0:a1:70:fd:3c:36:37:5c:5a:9e:74:de:60:49:f0:0f:b6:fe:
         bf:fd:07:af:af:c4:c1:dc:9f:33:5b:21:ca:e1:10:e6:d1:8d:
         1e:2c:00:d1:03:3a:41:28:45:47:b5:1e:56:48:18:25:52:bf:
         d3:bf:e0:ef:2f:83:8e:91:9e:1d:5d:9a:66:50:9c:fc:3d:18:
         45:20:7d:cf:b6:69:d3:d3:42:88:2c:2f:50:f6:ef:cc:e5:5e:
         83:b7:04:28:bf:22:c8:89:4b:31:f6:a4:8d:74:5b:a1:08:f6:
         96:76:47:3d:28:65:d7:2d:6c:ca:a0:95:12:7e:09:b9:9a:51:
         61:da:8c:d8:59:30:f9:90:3d:ef:c2:bc:93:0a:d8:f3:09:26:
         b0:93:78:2f:f7:ce:29:3c:34:4c:53:33:ea:02:35:be:0c:40:
         17:a3:a5:c4:5b:03:5f:62:39:74:59:3d:d9:a6:22:85:23:c9:
         11:2a:32:4b:19:e9:43:42:50:2b:47:bd:6b:7d:a5:8c:c7:a7:
         cf:ba:a8:82:b0:35:b3:67:19:84:13:3a:10:2e:59:05:91:82:
         75:ed:15:74:63:f6:ef:6c:38:2d:9b:28:dd:3a:30:c1:6f:36:
         48:b2:26:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:07 2025 by rpki-client on console.sobornost.net