Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/078B992A8D7F11F08E194EA7DAE4EC9C.roa
File:                     078B992A8D7F11F08E194EA7DAE4EC9C.roa (raw, json)
Hash identifier:          tXrp7X5TYRxSDs5vSgoqyMl+QMZNg2CnT/mqC23paV0=
Subject key identifier:   AC:46:26:97:B9:26:4E:A8:D6:48:D1:67:30:05:71:87:1B:9B:8C:35
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0E27
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/078B992A8D7F11F08E194EA7DAE4EC9C.roa
Signing time:             Tue 09 Sep 2025 13:15:18 +0000
ROA not before:           Tue 09 Sep 2025 13:15:13 +0000
ROA not after:            Sat 05 Sep 2026 13:15:13 +0000
asID:                     9009
IP address blocks:        102.135.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3623 (0xe27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Sep  9 13:15:13 2025 GMT
            Not After : Sep  5 13:15:13 2026 GMT
        Subject: CN=68c02866-6513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:13:14:e7:8f:ba:e2:45:03:26:48:00:f6:7d:
                    50:75:80:73:f7:3b:5a:8a:66:c0:e4:61:c0:d2:e7:
                    ad:78:ab:2e:fb:0b:2b:d2:c3:b1:fe:6c:62:80:12:
                    fa:f0:87:76:b9:81:e1:a6:4a:db:f8:65:0b:eb:00:
                    12:6d:df:c5:0e:b0:c4:7a:8a:b0:42:e4:56:ae:00:
                    67:8b:66:cf:9c:b3:50:4a:29:76:8f:9b:14:9c:da:
                    e1:96:09:a7:6f:e0:cd:06:76:f6:17:2c:76:83:ea:
                    43:ee:a9:a1:4d:03:ef:f8:1c:1f:4d:ec:5c:70:e1:
                    f7:66:80:e3:d4:4e:9d:34:1f:18:39:b2:4b:9f:42:
                    cf:7b:0a:c3:7b:60:67:73:ff:ce:24:49:13:ca:24:
                    e2:6e:18:45:c2:27:83:cd:15:c2:f1:c7:d1:6a:a7:
                    84:d1:08:c7:d9:89:86:33:8d:07:86:f5:a8:37:c7:
                    e2:59:63:42:fb:71:b5:99:a4:38:21:2c:11:8e:15:
                    f4:20:6c:68:f6:af:4d:c8:e1:ec:4c:2f:50:0e:c7:
                    a4:56:95:56:c5:c4:f9:5e:9a:76:c8:b7:f1:7e:a3:
                    89:7b:cc:3d:13:29:fa:6b:9f:93:99:1b:e8:07:0e:
                    cc:48:d4:1f:a6:76:d4:99:60:08:7f:6c:9c:33:f4:
                    30:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:46:26:97:B9:26:4E:A8:D6:48:D1:67:30:05:71:87:1B:9B:8C:35
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/078B992A8D7F11F08E194EA7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:e5:5a:ea:20:f9:6a:8e:a8:04:21:2c:b8:65:b7:0e:91:67:
         6c:25:22:86:ec:0b:67:28:fe:13:d7:a4:05:0c:a9:83:46:a3:
         43:c9:0a:df:ea:09:a9:c6:dc:b2:12:46:cb:78:fa:15:25:b4:
         8f:b1:92:b3:ed:18:99:c6:a2:c4:66:08:9c:17:1f:02:24:2f:
         44:35:c8:8a:7e:60:55:34:b4:ba:1d:74:82:53:17:ea:82:dd:
         96:3e:d5:e1:6f:e6:b2:28:39:cb:26:47:9f:e9:59:2f:c9:5a:
         c2:1f:2c:b9:38:83:5c:c3:81:88:3e:5b:c5:d6:85:4a:16:40:
         57:5f:c3:1f:f3:35:6e:7a:82:9d:63:67:78:bc:b3:3d:54:1f:
         46:97:49:22:13:eb:6e:14:b2:01:7d:dd:b0:64:aa:94:a1:ca:
         4e:1c:cc:c0:f6:12:f8:55:03:5b:76:df:89:46:ef:99:77:9f:
         22:5d:94:c6:d5:4f:92:22:21:de:6c:5a:24:77:fe:26:1d:5b:
         f8:8a:60:66:69:39:03:7b:56:e0:8a:46:06:53:00:44:c4:1a:
         be:36:b1:ac:1a:b8:3c:79:f3:de:31:3c:c1:c5:b1:dc:72:82:
         d4:50:ee:aa:f2:05:bf:26:de:d2:12:e8:f0:76:61:1f:37:02:
         6b:5d:e2:9c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDicwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA5MDkxMzE1MTNaFw0yNjA5MDUxMzE1MTNaMBgxFjAU
BgNVBAMTDTY4YzAyODY2LTY1MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdExTnj7riRQMmSAD2fVB1gHP3O1qKZsDkYcDS5614qy77CyvSw7H+bGKA
Evrwh3a5geGmStv4ZQvrABJt38UOsMR6irBC5FauAGeLZs+cs1BKKXaPmxSc2uGW
Cadv4M0GdvYXLHaD6kPuqaFNA+/4HB9N7Fxw4fdmgOPUTp00Hxg5skufQs97CsN7
YGdz/84kSRPKJOJuGEXCJ4PNFcLxx9Fqp4TRCMfZiYYzjQeG9ag3x+JZY0L7cbWZ
pDghLBGOFfQgbGj2r03I4exML1AOx6RWlVbFxPlemnbIt/F+o4l7zD0TKfprn5OZ
G+gHDsxI1B+mdtSZYAh/bJwz9DBHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUrEYm
l7kmTqjWSNFnMAVxhxubjDUwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzA3OEI5OTJBOEQ3RjExRjA4RTE5NEVBN0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh34wDQYJKoZIhvcNAQEL
BQADggEBANPlWuog+WqOqAQhLLhltw6RZ2wlIobsC2co/hPXpAUMqYNGo0PJCt/q
CanG3LISRst4+hUltI+xkrPtGJnGosRmCJwXHwIkL0Q1yIp+YFU0tLoddIJTF+qC
3ZY+1eFv5rIoOcsmR5/pWS/JWsIfLLk4g1zDgYg+W8XWhUoWQFdfwx/zNW56gp1j
Z3i8sz1UH0aXSSIT624UsgF93bBkqpShyk4czMD2EvhVA1t234lG75l3nyJdlMbV
T5IiId5sWiR3/iYdW/iKYGZpOQN7VuCKRgZTAETEGr42sawauDx5894xPMHFsdxy
gtRQ7qryBb8m3tIS6PB2YR83Amtd4pw=
-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:40 2025 by rpki-client