Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/FA451D540E5311F0AD34E842762E951A.roa
File:                     FA451D540E5311F0AD34E842762E951A.roa (raw, json)
Hash identifier:          v4Hnu/zBr9ZJXzMlo/mymcexhZgGmTK0xB97wv2VfiQ=
Subject key identifier:   C4:4B:36:E1:A7:6A:74:4E:C3:A3:67:B6:45:8A:EA:73:5D:69:C4:A8
Certificate issuer:       /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial:       06BC
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/FA451D540E5311F0AD34E842762E951A.roa
Signing time:             Mon 31 Mar 2025 17:17:09 +0000
ROA not before:           Mon 31 Mar 2025 17:17:04 +0000
ROA not after:            Sat 31 Mar 2035 17:17:04 +0000
asID:                     328748
IP address blocks:        102.216.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1724 (0x6bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FE6CAF, serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
        Validity
            Not Before: Mar 31 17:17:04 2025 GMT
            Not After : Mar 31 17:17:04 2035 GMT
        Subject: CN=67eace15-952d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e4:90:af:31:d4:b7:e9:9e:6f:f3:fe:39:cb:
                    ca:20:6e:8e:aa:58:90:35:29:66:79:95:f5:a3:c9:
                    cf:45:c4:44:e8:26:85:56:84:3f:f5:cd:48:0f:34:
                    42:00:21:a7:c9:9d:03:e2:30:6b:c4:b0:d1:82:5b:
                    63:40:d4:39:fc:a6:65:31:ea:93:c1:ee:b6:bc:63:
                    8c:28:51:09:8d:b1:b9:b3:6d:e7:47:aa:bb:c6:a9:
                    4f:a0:19:67:03:1d:65:fa:74:08:7b:6e:48:47:24:
                    6d:e8:58:63:c7:c1:30:a2:ff:54:9c:77:1f:42:54:
                    b9:d9:bb:77:33:76:24:59:76:74:22:0a:50:20:dc:
                    53:5e:18:7b:3c:05:9d:f2:cf:2c:de:b2:35:8b:69:
                    df:b9:f4:37:4e:79:a9:84:e5:3e:e3:7a:31:8b:8f:
                    5a:67:f3:ce:81:78:9c:ec:6a:a0:88:d7:87:26:9c:
                    8d:4c:63:c5:a9:df:8f:46:61:aa:a3:cd:39:ae:f9:
                    56:6b:9e:6e:0f:db:dd:cc:7b:5f:7f:7d:f2:0e:b6:
                    ff:17:bd:c4:54:63:08:51:73:af:cd:d2:40:c0:7f:
                    c3:8d:9a:df:c3:3a:20:fc:c1:eb:a5:3d:fd:16:85:
                    73:a4:2e:1b:5c:a1:24:04:e9:5d:bc:9e:e3:03:84:
                    5f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4B:36:E1:A7:6A:74:4E:C3:A3:67:B6:45:8A:EA:73:5D:69:C4:A8
            X509v3 Authority Key Identifier:
                keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/FA451D540E5311F0AD34E842762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:71:91:bc:a9:04:1c:e6:d0:e1:31:85:71:00:4a:0f:b1:6f:
         49:49:06:0b:d1:3a:d4:f0:d6:7f:6c:d7:35:ac:ac:34:e9:18:
         f8:06:d2:0b:59:34:49:d2:fe:5c:12:d6:f5:40:d4:a6:82:45:
         43:cb:ae:d4:ea:4f:81:0f:4c:5f:41:89:e2:99:d2:d3:70:8a:
         23:d2:ca:c0:ae:3e:b0:02:77:49:14:1b:27:7e:80:20:60:47:
         d8:b9:33:cf:44:a3:ba:9f:5d:df:6c:2b:2e:78:53:ea:7d:75:
         e1:c8:9c:0d:a8:63:58:26:3e:22:70:68:e9:3d:fa:98:77:29:
         4a:53:32:f5:74:87:9c:51:b6:6a:b2:37:78:9f:ba:92:25:6f:
         99:65:00:b2:8e:11:61:a1:fc:a0:d3:63:26:fc:d4:f1:54:79:
         0e:0f:4c:9d:2d:4f:6c:ce:39:27:d8:30:a7:ba:38:94:a9:9d:
         12:73:68:f4:16:2a:7b:4d:96:f0:68:89:72:4f:f0:c9:c0:20:
         f8:58:10:ea:c3:e2:35:a2:ad:c8:0e:71:7a:28:ea:eb:78:09:
         7a:9a:d6:8a:ae:ec:62:7f:9e:8e:98:23:a7:fd:46:03:01:03:
         0c:7b:4c:49:c4:eb:2d:a4:be:63:14:73:8c:b6:5e:93:1a:ee:
         5a:83:36:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:43 2025 by rpki-client on console.sobornost.net