Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1B9D2776CEB511F19CA836EFCE1D38B0.roa
File:                     1B9D2776CEB511F19CA836EFCE1D38B0.roa (raw, json)
Hash identifier:          g9cY5BDGZD2kVWvtUgOyJDsNp/QCpiKdpuDTwG1Wubc=
Subject key identifier:   0B:CA:E6:D2:07:90:1A:5C:52:ED:D2:89:23:F9:24:C7:FA:93:7E:C4
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1332
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1B9D2776CEB511F19CA836EFCE1D38B0.roa
Signing time:             Fri 23 Oct 2026 07:41:08 +0000
ROA not before:           Fri 23 Oct 2026 07:41:03 +0000
ROA not after:            Sun 31 Oct 2027 07:41:03 +0000
asID:                     199899
IP address blocks:        102.135.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 08:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4914 (0x1332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Oct 23 07:41:03 2026 GMT
            Not After : Oct 31 07:41:03 2027 GMT
        Subject: CN=6adb0f93-2099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:92:92:04:e0:b8:bb:76:65:76:ad:67:ab:92:
                    17:96:ba:fb:fd:86:8a:0a:a6:1b:f3:8b:a7:89:55:
                    2e:84:fe:4d:2c:ea:72:09:d2:85:7e:6b:96:07:22:
                    f2:3b:49:97:f1:7f:d0:05:db:07:27:20:8e:d2:2f:
                    e0:69:99:80:1c:a4:e1:58:e0:f5:36:99:f8:11:34:
                    01:79:9f:ae:50:6c:f5:a1:33:09:58:4e:b8:d3:28:
                    65:e8:4a:46:48:21:94:98:2d:65:d4:f9:2b:88:cd:
                    2c:ee:06:aa:b7:19:8d:bd:ed:e3:ab:f6:3e:a1:ad:
                    bc:32:8e:31:51:3a:de:5b:a8:d6:f8:50:92:e3:1b:
                    f5:df:a2:30:09:9d:d6:06:e1:52:e7:c1:cd:08:f1:
                    97:90:ec:b9:c6:9f:42:ba:a6:cd:26:4c:42:44:6b:
                    e0:57:8a:cc:ad:3c:f4:02:e1:6c:98:ee:78:75:2e:
                    00:95:8d:aa:ab:05:84:7b:dc:c1:63:db:a0:73:72:
                    0d:a7:c9:49:cb:f9:3f:17:7d:4e:e2:e8:0f:d7:01:
                    06:e4:1d:a4:4a:79:7f:e1:ca:f0:b4:82:a4:bf:cf:
                    08:7f:46:de:ea:f1:9c:1c:de:7e:23:d0:46:91:ce:
                    f4:d6:17:95:09:23:9e:01:f1:85:e5:cf:04:07:f8:
                    2b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CA:E6:D2:07:90:1A:5C:52:ED:D2:89:23:F9:24:C7:FA:93:7E:C4
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1B9D2776CEB511F19CA836EFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:d3:cb:10:eb:ac:14:37:38:5e:8d:a5:c9:0c:05:d4:70:17:
         0b:d4:86:54:7b:46:1d:13:e4:9f:26:7a:1f:59:13:51:43:31:
         95:d5:13:1f:96:b3:82:3a:c7:9f:0c:37:9f:2d:27:02:fc:8f:
         33:c3:aa:f0:e3:b3:a9:d5:22:3a:1e:0d:05:80:27:e8:e5:d1:
         09:a8:3a:fa:2f:75:78:e3:20:b9:d8:2a:59:82:01:4d:d6:25:
         a6:9c:b2:92:d3:90:e7:18:42:18:f0:04:38:5e:b0:17:f7:f5:
         8b:f1:ca:c3:e4:6b:df:bc:b2:7d:28:8c:dd:d6:29:15:bf:fe:
         59:c5:5f:12:5b:ab:65:7e:d8:14:d7:b1:f3:54:d0:fe:51:84:
         be:cf:6d:bf:80:52:e4:70:6e:27:82:ed:67:24:fa:e6:23:84:
         3b:69:d6:9d:b8:dc:01:c8:74:5c:09:1f:d2:47:15:af:42:7b:
         65:84:90:2e:a8:5a:e9:8e:9a:0c:2e:fd:6a:3d:78:d6:84:35:
         43:6f:d2:d1:a5:a4:73:b3:64:60:17:c6:37:3a:95:68:2b:ad:
         74:99:fd:79:4b:e4:ef:37:19:d2:fc:db:47:70:61:c3:f7:b3:
         74:01:9f:13:43:e6:10:79:11:92:8c:1a:23:68:8b:b1:49:63:
         16:00:66:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----