Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/204EC2E060AA11F09DA45BEFDAE4EC9C.roa
File:                     204EC2E060AA11F09DA45BEFDAE4EC9C.roa (raw, json)
Hash identifier:          C51Mg/xjuJCCIA2Q1YqmvzfSlxC6XFI4Ew7WBR/S3Jg=
Subject key identifier:   3D:5D:BF:00:98:5F:1B:55:41:DF:F8:E2:63:4D:45:34:86:53:2D:C8
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0C33
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/204EC2E060AA11F09DA45BEFDAE4EC9C.roa
Signing time:             Mon 14 Jul 2025 12:00:25 +0000
ROA not before:           Mon 14 Jul 2025 12:00:20 +0000
ROA not after:            Tue 16 Jun 2026 12:00:20 +0000
asID:                     397373
IP address blocks:        102.135.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Jul 2025 00:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3123 (0xc33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Jul 14 12:00:20 2025 GMT
            Not After : Jun 16 12:00:20 2026 GMT
        Subject: CN=6874f159-ea36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:d2:94:35:bc:10:9a:d2:85:80:fb:98:67:
                    1e:88:36:04:4a:39:9d:a2:9c:3c:9e:c1:ec:57:d4:
                    3d:71:d1:3d:5c:d8:d8:ce:cd:68:f0:a0:44:8f:a1:
                    4d:41:dd:03:50:39:88:a1:b4:69:97:55:98:b7:82:
                    c3:bd:4c:cd:78:c2:d1:9e:93:2e:2f:95:d8:c3:c3:
                    55:d9:48:ef:29:e8:6e:a2:35:f7:c6:1a:ab:45:47:
                    96:df:8f:fd:02:b3:f7:a4:41:49:40:66:da:16:b2:
                    62:7e:3f:c8:59:c0:93:e8:f2:3c:45:c9:2d:6d:91:
                    eb:60:5d:55:0f:e1:83:b2:c1:e6:c8:aa:f5:e8:2f:
                    32:be:1b:db:fc:9e:0b:ab:37:8a:7b:41:7a:10:5d:
                    a3:f4:61:af:dc:db:8e:e7:ba:8c:d4:0e:c1:66:5e:
                    6a:c4:f4:b6:06:35:6b:ba:21:a2:f0:c3:e2:25:66:
                    9d:4b:13:03:a6:e3:ed:4c:1e:b9:90:6e:68:78:cc:
                    9f:f9:27:2d:9d:d1:9c:86:f2:50:4b:64:12:d5:5c:
                    0b:bb:47:43:38:92:69:0a:e3:7c:e0:be:4a:bf:91:
                    cc:1a:6c:e2:46:85:99:1b:15:0d:52:f6:23:fc:e1:
                    da:29:5a:fa:6c:66:f2:3d:20:12:75:8d:b7:e6:b9:
                    1d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5D:BF:00:98:5F:1B:55:41:DF:F8:E2:63:4D:45:34:86:53:2D:C8
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/204EC2E060AA11F09DA45BEFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:1a:48:3d:06:04:97:46:41:c0:c6:ce:6f:24:9e:21:b5:10:
         bc:26:39:80:0b:7c:5f:9c:4b:9f:73:e9:ca:31:33:80:22:c2:
         2c:68:b4:9d:7c:dd:58:cc:8f:81:b1:cf:ad:c5:8e:ec:e2:bc:
         fd:8e:3e:10:13:86:9f:11:8c:e0:ed:70:cb:96:41:13:62:df:
         65:c4:a8:0a:85:11:6e:54:8c:ad:eb:ae:16:0d:86:5c:19:f8:
         af:a2:4e:9e:bc:c2:ec:3b:83:8b:15:dc:2c:87:2a:ae:3d:ce:
         2a:2a:b4:5f:cb:46:ef:32:af:be:c0:50:f5:2b:d5:7e:ec:2d:
         a1:22:b5:a6:30:88:b1:a6:79:c4:7a:07:5e:0e:ff:a9:d1:06:
         2e:f7:a6:4f:cd:b6:dd:b2:98:6b:c0:21:7e:7d:7c:bf:e0:fc:
         98:3d:cb:d9:4b:1e:e4:4f:7d:05:63:90:a7:06:d2:82:6a:a4:
         f8:7c:99:91:aa:19:c6:85:c3:6b:f8:96:85:c8:02:7d:6d:d6:
         3c:1a:ab:b7:0e:cf:bc:e7:c5:f0:93:b9:a5:4b:4a:3e:ce:d4:
         6e:e5:87:ba:78:5f:70:d0:63:01:0b:6b:5a:05:88:d7:55:e2:
         55:f4:f2:cd:73:0d:1c:d0:c6:07:f4:46:64:44:0c:0f:81:3f:
         a2:d2:bb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:26:54 2025 by rpki-client