Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/467F91D260AB11F0BC72BDF6DAE4EC9C.roa
File:                     467F91D260AB11F0BC72BDF6DAE4EC9C.roa (raw, json)
Hash identifier:          sxperAhAMRIVdl81Pq6VYkFm7GUtKxqaOYDE8nU4SyY=
Subject key identifier:   FA:A7:A9:B3:5B:14:0F:C3:B6:42:21:A6:DC:41:BD:34:1E:00:03:2A
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0C49
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/467F91D260AB11F0BC72BDF6DAE4EC9C.roa
Signing time:             Mon 14 Jul 2025 12:08:39 +0000
ROA not before:           Mon 14 Jul 2025 12:08:33 +0000
ROA not after:            Tue 16 Jun 2026 12:08:33 +0000
asID:                     397373
IP address blocks:        102.135.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Jul 2025 00:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3145 (0xc49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Jul 14 12:08:33 2025 GMT
            Not After : Jun 16 12:08:33 2026 GMT
        Subject: CN=6874f347-b068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:65:42:94:d1:a3:72:1b:51:d3:2a:34:02:ce:
                    95:55:53:74:d2:60:41:26:ba:d3:80:28:51:60:5a:
                    f9:5e:df:a9:0f:00:bc:e6:1c:24:62:03:f9:ee:77:
                    c5:28:a1:58:31:12:39:c8:f8:b9:4b:8d:9a:6b:29:
                    ac:3f:0a:bf:ed:82:14:3a:70:0a:42:ef:89:14:e2:
                    3b:dc:12:11:df:c1:56:9c:0b:92:b1:f9:05:84:b1:
                    b1:58:27:ae:9f:18:58:b7:8f:5a:fe:da:6e:17:a9:
                    9b:a1:57:bf:14:a0:50:57:ca:57:9a:1b:5e:5b:54:
                    b8:ed:11:3b:89:ba:c4:6e:a8:6c:dc:ad:50:d3:2a:
                    b4:0e:13:23:5e:26:64:e4:6e:8a:a4:a1:6e:31:03:
                    d8:f2:49:c8:9f:e7:01:a9:8e:5f:bb:b4:8b:d2:47:
                    64:13:9c:86:4b:74:74:57:5e:77:cb:e1:15:98:9a:
                    79:b0:8e:59:86:1d:0c:4b:a9:31:98:a4:d8:ad:76:
                    33:99:7b:de:6d:d6:82:45:ed:e5:62:74:9e:73:c8:
                    04:82:d0:86:70:b0:aa:99:37:bd:a5:03:83:8a:f1:
                    a9:ee:f4:62:6a:f4:80:66:15:1d:5c:2e:cf:0c:6e:
                    ab:05:28:76:a4:44:f4:58:41:28:10:f5:fa:80:5c:
                    a2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A7:A9:B3:5B:14:0F:C3:B6:42:21:A6:DC:41:BD:34:1E:00:03:2A
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/467F91D260AB11F0BC72BDF6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:c2:69:e0:03:b3:fa:83:b1:c4:93:d6:d6:55:1e:2b:52:17:
         9d:54:9a:ad:07:fc:ca:57:b9:9f:db:46:fa:06:80:c5:93:a6:
         6c:02:a6:52:5b:cc:37:dd:e6:92:b4:b6:65:43:9c:5a:4f:b0:
         7b:0d:bc:00:7b:44:4e:15:e9:b7:fd:f0:b7:4c:f1:19:5e:6c:
         1d:55:46:f0:19:60:9b:d4:bc:e4:9f:9f:a2:84:8f:9d:99:f4:
         ac:d2:94:71:70:be:81:ad:52:16:58:f1:22:7f:a2:f1:35:7b:
         22:a0:1c:df:58:1f:ac:a1:24:76:3f:ae:75:c3:f0:65:24:d7:
         30:a1:b2:90:44:db:3b:2d:4d:03:2d:43:33:bd:e9:d9:71:1c:
         b0:dd:c4:1b:fc:27:16:34:76:9b:6c:57:0b:72:c4:a0:7a:a1:
         1c:09:7b:ca:e4:02:98:df:f8:39:a6:bf:20:e2:82:19:0b:50:
         3d:9d:40:b6:8f:cd:83:1a:67:d7:e4:1b:17:a9:5b:65:50:79:
         e9:d3:3b:c7:af:54:47:38:c3:b3:64:be:e2:d4:19:42:60:cc:
         75:21:9e:19:2b:ef:45:85:39:8a:42:92:74:43:2b:8d:95:33:
         af:ce:6f:5a:e6:99:0e:a1:10:43:53:cc:22:10:9e:97:bb:8a:
         22:96:a1:ba
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDEkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA3MTQxMjA4MzNaFw0yNjA2MTYxMjA4MzNaMBgxFjAU
BgNVBAMTDTY4NzRmMzQ3LWIwNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCiZUKU0aNyG1HTKjQCzpVVU3TSYEEmutOAKFFgWvle36kPALzmHCRiA/nu
d8UooVgxEjnI+LlLjZprKaw/Cr/tghQ6cApC74kU4jvcEhHfwVacC5Kx+QWEsbFY
J66fGFi3j1r+2m4XqZuhV78UoFBXyleaG15bVLjtETuJusRuqGzcrVDTKrQOEyNe
JmTkboqkoW4xA9jyScif5wGpjl+7tIvSR2QTnIZLdHRXXnfL4RWYmnmwjlmGHQxL
qTGYpNitdjOZe95t1oJF7eVidJ5zyASC0IZwsKqZN72lA4OK8anu9GJq9IBmFR1c
Ls8MbqsFKHakRPRYQSgQ9fqAXKIJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU+qep
s1sUD8O2QiGm3EG9NB4AAyowHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzQ2N0Y5MUQyNjBBQjExRjBCQzcyQkRGNkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh28wDQYJKoZIhvcNAQEL
BQADggEBAAnCaeADs/qDscST1tZVHitSF51Umq0H/MpXuZ/bRvoGgMWTpmwCplJb
zDfd5pK0tmVDnFpPsHsNvAB7RE4V6bf98LdM8RlebB1VRvAZYJvUvOSfn6KEj52Z
9KzSlHFwvoGtUhZY8SJ/ovE1eyKgHN9YH6yhJHY/rnXD8GUk1zChspBE2zstTQMt
QzO96dlxHLDdxBv8JxY0dptsVwtyxKB6oRwJe8rkApjf+DmmvyDighkLUD2dQLaP
zYMaZ9fkGxepW2VQeenTO8evVEc4w7NkvuLUGUJgzHUhnhkr70WFOYpCknRDK42V
M6/Ob1rmmQ6hEENTzCIQnpe7iiKWobo=
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:25:45 2025 by rpki-client