Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/19E0C4989DFA11F0B6FCB193DAE4EC9C.roa
File:                     19E0C4989DFA11F0B6FCB193DAE4EC9C.roa (raw, json)
Hash identifier:          ZPxUYh+Irp1Ly+VPZH2wrfbSFeEAN2CQOYXPhI/WMWs=
Subject key identifier:   9C:EA:14:F6:2D:20:D0:B1:BA:E3:29:8A:64:51:7D:BE:98:48:40:EE
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0EB5
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/19E0C4989DFA11F0B6FCB193DAE4EC9C.roa
Signing time:             Tue 30 Sep 2025 12:36:35 +0000
ROA not before:           Tue 30 Sep 2025 12:36:29 +0000
ROA not after:            Wed 30 Sep 2026 12:36:29 +0000
asID:                     9304
IP address blocks:        102.135.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3765 (0xeb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Sep 30 12:36:29 2025 GMT
            Not After : Sep 30 12:36:29 2026 GMT
        Subject: CN=68dbced3-a7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:49:9a:94:a9:59:3d:16:d8:b3:ec:06:e8:
                    3f:b8:cd:ac:8a:a0:14:7b:43:49:54:8f:22:2d:7f:
                    12:d0:ab:b7:30:6a:06:ed:da:4d:3c:12:23:5e:90:
                    d5:ac:bd:c5:61:f2:5a:b0:94:1c:f5:38:6f:86:99:
                    55:bb:63:37:c3:7d:de:00:e6:d4:73:77:ad:d3:82:
                    43:69:ff:4c:62:68:62:dc:27:aa:b6:7c:13:f0:4d:
                    e2:82:20:47:d2:f2:de:39:b3:1a:63:3a:3f:94:c0:
                    5e:71:1c:50:ae:b3:f1:b4:f4:ad:43:0d:dd:d1:b1:
                    e6:53:62:65:fc:c9:37:22:43:2e:92:e0:45:ed:6f:
                    da:83:6e:83:51:d1:51:af:ac:10:f0:ec:6e:3c:12:
                    46:f3:04:a0:af:da:db:e8:f1:ac:60:e0:cd:97:86:
                    2f:e1:05:a9:8d:f1:cc:5d:af:50:51:f5:0d:f7:20:
                    b8:c8:99:61:47:64:f1:4e:3b:14:0b:a0:af:a0:a3:
                    74:ed:20:bc:b7:bd:81:2e:60:96:65:ef:52:1d:28:
                    31:d9:cc:b9:d4:24:ef:c5:1b:40:37:52:2a:24:96:
                    d1:e0:eb:3b:dd:ee:50:f5:a7:fd:4b:22:02:e7:60:
                    2d:b0:c3:9c:ae:1c:74:08:25:1e:26:ad:96:08:64:
                    42:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EA:14:F6:2D:20:D0:B1:BA:E3:29:8A:64:51:7D:BE:98:48:40:EE
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/19E0C4989DFA11F0B6FCB193DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:33:68:d3:07:43:2b:6b:1e:61:be:8b:aa:74:4c:ec:cb:bc:
         84:b8:78:82:02:39:0a:e9:20:3a:b9:4b:60:b3:ba:f0:f2:b5:
         89:f4:d4:46:ed:1f:0c:cd:98:2d:df:4b:29:74:33:71:66:dd:
         79:1c:6d:a0:29:32:35:38:6a:a1:11:56:e6:44:74:3a:bb:3f:
         5b:f9:15:86:eb:bf:54:06:2e:63:c1:1f:6b:b4:16:74:86:69:
         15:7a:9b:ed:53:8f:b3:8d:64:34:96:23:ad:22:93:25:5b:a0:
         7c:e5:77:99:9b:c7:52:63:5a:24:07:0f:22:ae:4f:75:dd:46:
         60:25:1d:4f:58:bf:9e:2b:ac:7e:81:f8:de:ef:51:a2:3b:a0:
         2d:b9:b6:28:f2:15:26:8d:65:af:1e:e4:67:ae:65:67:d2:a5:
         28:ba:25:39:eb:dc:01:4b:44:42:dd:fb:46:ce:38:bc:cf:e7:
         08:7c:1d:34:26:c6:42:6b:44:9a:93:ea:a3:54:ae:61:27:8d:
         f8:04:af:28:11:1a:a7:a1:29:3d:eb:47:ee:8e:8d:f7:69:b6:
         83:20:19:0f:3b:36:b3:f5:cf:9b:bc:ce:4d:8e:ed:6f:22:ba:
         87:c0:74:d4:57:c8:51:9b:59:06:0a:35:f1:5c:e0:38:25:32:
         f2:1b:eb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:27 2025 by rpki-client