Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DB585D4860AB11F09840737ADAE4EC9C.roa
File:                     DB585D4860AB11F09840737ADAE4EC9C.roa (raw, json)
Hash identifier:          HT9KsGDxsQVLgXxp1moxj2PCzdj4CyNnA4wYkfLfbIk=
Subject key identifier:   97:E3:DC:3F:22:35:C5:59:FE:E1:97:17:39:83:88:E0:CB:8E:23:15
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0C55
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DB585D4860AB11F09840737ADAE4EC9C.roa
Signing time:             Mon 14 Jul 2025 12:12:49 +0000
ROA not before:           Mon 14 Jul 2025 12:12:44 +0000
ROA not after:            Tue 16 Jun 2026 12:12:44 +0000
asID:                     397373
IP address blocks:        102.135.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Jul 2025 00:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3157 (0xc55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Jul 14 12:12:44 2025 GMT
            Not After : Jun 16 12:12:44 2026 GMT
        Subject: CN=6874f441-c93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:60:84:07:ef:37:95:83:1d:dd:b0:22:9a:de:
                    99:df:75:77:3a:b7:a1:31:5e:17:c9:f9:a4:53:12:
                    48:9f:b8:36:ea:02:d6:5e:3a:ec:e0:23:fb:5c:f4:
                    9a:06:62:1b:4b:f8:16:3e:16:51:93:ab:01:bb:9f:
                    22:72:28:f1:2e:04:16:2e:6e:85:4b:d0:c0:ab:43:
                    1d:17:f0:28:da:0f:53:f0:ac:19:e3:dd:a5:b8:6f:
                    a9:0f:cc:24:e6:d4:c2:96:0b:3b:6b:fb:68:cd:be:
                    84:b9:d1:6c:f9:a3:43:95:be:4f:9b:f8:a6:f0:d3:
                    23:bc:59:c0:30:89:97:ec:25:1c:d0:a7:c9:36:c6:
                    15:9e:dd:b8:7e:a4:72:7a:7a:14:3f:07:80:b0:33:
                    15:ad:9c:0d:ac:7f:e1:3b:09:0c:03:f6:90:2e:67:
                    0b:89:28:3e:25:91:73:1b:33:7f:0e:fe:53:63:04:
                    76:11:1b:5f:23:d0:5b:a0:77:1b:97:57:08:85:f4:
                    84:fe:74:86:31:68:d6:00:e3:f8:e3:56:ef:4e:13:
                    13:46:aa:72:85:c6:25:2d:fe:6d:76:00:a7:1e:40:
                    f5:e1:9c:7e:a7:70:56:08:f6:6c:a4:26:47:95:a0:
                    97:64:1f:58:4b:74:62:af:cb:5b:b6:7e:88:9c:be:
                    bd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E3:DC:3F:22:35:C5:59:FE:E1:97:17:39:83:88:E0:CB:8E:23:15
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DB585D4860AB11F09840737ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:9e:44:c7:09:9b:24:b9:40:a3:f9:c0:d6:d1:3b:d0:79:26:
         db:72:7f:64:24:46:f1:f7:bd:b5:49:53:96:82:cf:40:2f:9a:
         4f:08:c3:92:dd:18:29:7c:f6:e3:aa:36:a9:42:6d:8a:0a:2e:
         c0:0e:2b:fd:20:65:68:0e:3d:68:64:e6:a2:f5:ea:9d:d2:30:
         a9:4b:d7:b8:df:2d:46:1c:be:fd:73:3e:31:54:b2:0e:a5:7b:
         ce:f7:69:e8:9f:35:d1:de:2a:06:11:8c:2c:68:55:ce:21:8b:
         e4:5d:7a:5b:23:52:67:c6:af:15:61:43:ce:89:1a:fd:28:d3:
         e0:8b:f9:48:dc:f6:58:d1:0d:15:d9:9b:9f:72:1a:5f:22:14:
         12:85:f6:10:80:b9:3b:bd:1a:1f:0a:11:bd:e6:2c:d4:da:d4:
         84:f2:b0:34:38:a3:b8:65:f7:e5:a4:b3:07:08:ee:95:15:31:
         c8:be:d7:9d:f0:ee:90:9d:eb:c1:8c:d2:df:d5:97:ca:8a:d7:
         2b:de:e6:03:22:e1:42:b3:d7:40:af:fa:67:f1:b2:a0:76:17:
         3b:fe:6c:1a:e4:96:55:c9:0f:ef:8f:7b:ee:ed:38:f3:b1:53:
         75:c7:35:b8:b0:a2:2b:df:ce:f0:09:03:b7:e4:fd:54:e7:6e:
         17:57:05:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:26:00 2025 by rpki-client