Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1370104A8CCB11F0A3D30D94DAE4EC9C.roa
File:                     1370104A8CCB11F0A3D30D94DAE4EC9C.roa (raw, json)
Hash identifier:          88SB17x4QwPHaHrjdNglxdOH4ss2/qKmUSHtVOtWAd4=
Subject key identifier:   2C:C8:77:08:A2:49:E3:E7:49:59:7C:BF:A7:97:22:FC:00:DE:12:77
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0DEC
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1370104A8CCB11F0A3D30D94DAE4EC9C.roa
Signing time:             Mon 08 Sep 2025 15:47:08 +0000
ROA not before:           Mon 08 Sep 2025 15:47:04 +0000
ROA not after:            Sat 05 Sep 2026 15:47:04 +0000
asID:                     9009
IP address blocks:        102.135.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3564 (0xdec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Sep  8 15:47:04 2025 GMT
            Not After : Sep  5 15:47:04 2026 GMT
        Subject: CN=68befa7c-7cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:97:44:dc:a0:40:36:91:ec:61:7f:00:2c:04:
                    ae:a3:5f:e7:34:8d:ef:c4:2f:50:bb:9d:90:ae:d8:
                    c7:af:2d:18:90:3e:ee:08:77:83:93:61:ea:3b:fd:
                    64:90:d2:1b:eb:e5:b8:ea:b7:ac:a0:49:51:3a:96:
                    86:8a:13:15:9a:26:b9:b1:6b:dd:96:ff:1c:2b:dc:
                    18:13:3f:bc:20:f1:11:cf:c9:96:73:18:4a:58:e0:
                    31:cf:07:74:c9:8d:02:3b:c8:dc:35:cb:85:31:3d:
                    1f:05:6c:fe:67:b6:d4:99:71:24:67:bb:b7:7a:e5:
                    02:8d:53:32:c7:ff:49:e7:1e:86:96:71:c6:ce:29:
                    b1:f4:68:1f:42:80:2a:af:0e:ee:df:37:1a:98:15:
                    d1:72:90:69:38:fc:d2:07:6c:67:22:6b:d8:dd:a4:
                    c0:0c:26:7d:b6:54:f9:81:40:94:bc:42:70:10:dd:
                    75:60:8c:79:a9:3b:14:23:b8:ca:89:ca:06:e6:ce:
                    63:d2:39:c3:b0:87:16:9b:14:17:c4:dc:4b:b7:2c:
                    d7:07:ad:a6:19:2d:ae:c8:e1:59:87:34:1e:8a:22:
                    6c:6a:08:d4:19:80:7d:64:87:4c:fd:35:ff:5e:39:
                    b0:17:ce:23:91:90:5e:62:61:c5:64:96:56:8f:e8:
                    a0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C8:77:08:A2:49:E3:E7:49:59:7C:BF:A7:97:22:FC:00:DE:12:77
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1370104A8CCB11F0A3D30D94DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:46:9a:9f:ac:09:7e:83:68:4e:34:68:85:d2:3d:cf:0b:1d:
         ba:d3:03:3f:a9:15:0d:c6:b4:2e:bc:7b:74:46:e6:90:d6:2f:
         a7:66:7e:d2:df:6b:12:e9:0d:21:8c:71:e4:67:a2:d6:52:a0:
         e0:56:69:f0:d4:de:4e:b9:47:f1:50:79:af:66:0a:b1:70:66:
         05:20:bc:ce:1e:47:a0:26:36:6f:e7:00:a4:9c:29:83:06:ef:
         01:29:4e:ab:b8:9a:5d:c8:67:85:ce:7b:dd:0a:bd:2d:25:5e:
         52:33:e8:29:38:61:5e:87:a2:11:f4:25:93:60:95:43:65:78:
         36:f5:63:45:1b:92:c5:cf:f3:b8:2a:f1:ca:de:73:ad:9c:29:
         3d:12:96:28:d9:f3:7c:79:2e:a0:25:25:c3:52:09:3c:b8:b4:
         b1:25:56:35:1c:8b:16:13:c8:a5:11:11:6a:ab:44:e4:76:13:
         70:2c:4c:39:d8:c0:70:c8:d7:7c:7b:ba:6e:f9:4b:f2:d7:6b:
         80:0f:49:f1:6c:8c:e8:35:44:b9:50:3e:db:0b:ae:9e:f3:ef:
         9c:71:a4:c0:a2:81:8f:e0:5e:24:30:48:a9:87:68:3f:8d:46:
         ff:f4:cf:bc:8b:9a:09:7e:6e:81:63:1c:58:08:49:00:08:fc:
         8e:16:af:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:06:00 2025 by rpki-client