Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/21469284533711F086B94197DAE4EC9C.roa
File:                     21469284533711F086B94197DAE4EC9C.roa (raw, json)
Hash identifier:          WpvDQKQtdH7FG/d4TqsXyArl6AUfGKS8WcVSrpa8H9k=
Subject key identifier:   97:36:D7:98:C7:1F:6F:07:F2:C7:E7:B8:37:B4:23:6A:3C:A4:F0:60
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0BF7
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/21469284533711F086B94197DAE4EC9C.roa
Signing time:             Fri 27 Jun 2025 09:14:30 +0000
ROA not before:           Fri 27 Jun 2025 09:14:25 +0000
ROA not after:            Wed 24 Jun 2026 09:14:25 +0000
asID:                     18811
IP address blocks:        196.251.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Jul 2025 09:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3063 (0xbf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Jun 27 09:14:25 2025 GMT
            Not After : Jun 24 09:14:25 2026 GMT
        Subject: CN=685e60f6-5ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:d0:40:8b:60:e0:42:6c:15:ae:ca:ab:2f:
                    0d:d8:a1:f6:07:21:21:5d:47:0f:8d:84:d4:2b:8f:
                    21:3f:e6:c2:16:88:9a:c0:49:38:29:40:b9:0b:4e:
                    d7:c5:5f:62:59:4b:72:44:fe:41:d2:77:9f:b2:69:
                    0a:22:08:b6:10:84:c9:0c:de:00:0c:4f:b7:6f:a3:
                    3c:40:9b:ca:a8:f2:a3:2c:05:38:66:c7:0c:9c:39:
                    c7:34:b1:13:3b:9a:5c:6f:34:06:50:30:94:09:63:
                    b9:c5:7c:e1:db:7a:fd:4a:1f:c7:c2:29:33:c2:4a:
                    e0:9f:88:47:46:13:b7:ec:b2:78:9d:da:cd:d1:c8:
                    22:50:fc:82:70:c0:8f:20:35:3b:7a:51:98:ec:a3:
                    ec:66:de:2e:f3:5d:0b:4b:01:56:56:50:a9:c2:10:
                    1f:f0:82:36:2e:95:49:9d:7e:da:65:9b:4f:0c:9e:
                    90:81:a0:b6:6c:f5:96:6c:1d:c8:02:66:b6:94:17:
                    44:ff:d6:7d:44:e8:4b:e2:a1:8f:3b:bc:26:da:6c:
                    03:8f:04:18:ff:26:67:90:60:8d:18:3a:e0:c9:94:
                    85:67:52:56:0e:14:fb:d5:cf:03:33:49:0c:bd:b4:
                    ac:08:08:46:d6:74:17:2f:fa:74:9c:b8:bc:de:c7:
                    13:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:36:D7:98:C7:1F:6F:07:F2:C7:E7:B8:37:B4:23:6A:3C:A4:F0:60
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/21469284533711F086B94197DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:27:22:66:5f:7a:eb:ff:73:10:ba:8b:54:e3:7f:0d:cc:b0:
         2f:7a:ae:84:9e:2b:13:3b:c7:61:ed:96:7f:7f:94:af:37:ca:
         8e:5a:b8:48:d7:18:23:72:a1:29:1b:f0:0b:12:d3:ae:d5:e3:
         92:f8:43:41:09:81:1b:c5:4c:63:49:0c:74:80:cb:f6:06:f3:
         11:3d:5e:17:d8:d8:9b:5d:10:ad:0b:7e:34:d8:5a:0d:70:5a:
         9f:9a:f5:32:0b:e2:e8:aa:58:b9:b9:21:f9:c5:0d:20:ee:f9:
         ae:65:0a:51:26:66:93:52:5e:30:3a:68:28:d5:0d:fb:04:04:
         b9:28:d4:09:8d:a3:5c:3c:a9:e5:c4:dd:de:0c:86:fd:2f:3e:
         95:b0:fd:75:3c:ab:aa:26:5c:86:73:b9:f6:8f:cf:47:50:78:
         79:74:12:dd:22:76:13:26:d7:43:17:a3:54:68:27:66:87:c3:
         0c:fb:85:9d:fb:89:57:58:fd:29:68:a0:f9:ee:5c:fa:ec:71:
         ef:48:82:4c:8e:95:50:86:11:97:51:fe:1c:d2:d8:39:47:73:
         76:f0:dd:fc:1c:5e:1b:02:f6:bf:c8:8c:d9:8a:84:9b:7a:f3:
         10:1c:fb:34:3c:83:0a:41:ab:81:45:42:65:8d:57:c4:41:47:
         85:41:59:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 01:39:26 2025 by rpki-client