Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2B7D700854FB11F1964CDFA8CE1D38B0.roa
File:                     2B7D700854FB11F1964CDFA8CE1D38B0.roa (raw, json)
Hash identifier:          F4h/aD8r0W+lJ+ahc1Zyf7udFN8N6a12m2hl+UvCONQ=
Subject key identifier:   FC:D8:49:9E:6C:0A:83:45:56:03:B5:5B:8E:1D:5A:C2:4B:6A:36:8E
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1183
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2B7D700854FB11F1964CDFA8CE1D38B0.roa
Signing time:             Thu 21 May 2026 09:55:17 +0000
ROA not before:           Thu 21 May 2026 09:55:13 +0000
ROA not after:            Thu 20 May 2027 09:55:13 +0000
asID:                     208185
IP address blocks:        196.251.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Jun 2026 02:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4483 (0x1183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May 21 09:55:13 2026 GMT
            Not After : May 20 09:55:13 2027 GMT
        Subject: CN=6a0ed685-b803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:6b:5b:53:d6:bb:69:0c:38:c5:da:a3:ce:
                    c6:0c:20:4c:35:eb:c0:25:38:bd:c1:84:47:32:58:
                    81:7c:51:9b:8e:1a:57:70:75:eb:fc:5a:e1:e4:80:
                    db:76:d9:a7:2b:d3:72:df:a1:2b:a9:8a:6f:74:73:
                    4d:10:3f:53:f4:99:22:60:9d:15:54:58:d5:55:9d:
                    78:32:94:5a:5d:2b:67:8d:3a:8b:0e:b0:66:0f:e2:
                    f8:bd:9b:3c:e2:b7:aa:9e:1c:5a:4a:e3:cb:ab:7d:
                    da:f3:35:0e:22:45:14:40:f1:81:ed:ca:4f:a0:0f:
                    19:6e:4b:b1:ed:90:6d:bc:93:01:67:1e:fb:b3:b1:
                    cc:d9:5a:f0:ee:5a:65:a8:27:d4:91:b0:8c:14:0f:
                    7f:27:ff:6d:0a:71:b7:b4:c1:9a:47:07:66:6c:f0:
                    ee:d1:93:70:2c:13:2b:29:23:02:62:ff:d2:e4:b7:
                    01:b6:32:05:f3:12:a6:73:df:5e:19:77:b8:ac:df:
                    cb:4f:ce:9f:ac:9c:96:b6:17:dc:7f:2b:ae:b5:c9:
                    86:cb:7d:d9:69:b4:6c:d2:d8:72:6f:44:5b:cd:5a:
                    97:7c:61:bd:48:ec:eb:04:86:9b:e6:18:86:28:cc:
                    d2:dc:03:32:60:f2:bf:4e:34:e3:b2:e7:56:a4:3b:
                    1e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D8:49:9E:6C:0A:83:45:56:03:B5:5B:8E:1D:5A:C2:4B:6A:36:8E
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2B7D700854FB11F1964CDFA8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:3f:a2:31:9e:e2:bd:b9:ec:22:45:eb:44:3d:3c:43:cd:a6:
         04:67:fc:da:db:d4:59:ee:a0:b3:76:cb:08:63:4e:c5:80:a0:
         f8:56:a3:38:15:c8:51:83:4a:8d:80:be:c1:e3:84:1e:4d:e4:
         51:1e:3c:4d:17:cb:63:fb:29:5a:8c:49:a1:bb:0e:f5:43:e4:
         96:9f:6c:41:89:b8:1a:5d:b4:d1:a8:01:97:dc:6c:f8:23:c6:
         c7:3c:56:99:58:8e:04:7d:56:cf:b3:6b:22:83:ac:80:76:e9:
         5f:1b:bf:38:b3:8c:4f:b6:e8:43:cf:25:6d:a0:6e:be:a1:ad:
         8b:36:e9:aa:f5:95:70:8e:de:0c:bd:e0:ef:38:2c:62:57:4b:
         70:40:dd:a2:95:2e:bb:ef:90:3a:3d:9e:a8:cc:35:35:64:c6:
         92:db:39:6d:6a:0b:6a:91:84:73:a4:29:dd:39:59:a6:d8:27:
         cb:4f:cb:3f:81:3d:2e:a0:13:92:06:59:bf:a6:6e:a3:e5:9e:
         f6:1c:08:85:2e:40:4e:eb:66:52:41:68:96:e3:20:10:5d:4f:
         4c:98:7a:ac:ae:f6:06:f7:95:07:68:70:31:ea:99:d6:57:ab:
         de:2b:f5:76:d7:22:1d:23:46:24:7f:76:bf:e2:77:d5:b3:78:
         ea:35:e6:8c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEYMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNjA1MjEwOTU1MTNaFw0yNzA1MjAwOTU1MTNaMBgxFjAU
BgNVBAMTDTZhMGVkNjg1LWI4MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5WGtbU9a7aQw4xdqjzsYMIEw168AlOL3BhEcyWIF8UZuOGldwdev8WuHk
gNt22acr03LfoSupim90c00QP1P0mSJgnRVUWNVVnXgylFpdK2eNOosOsGYP4vi9
mzzit6qeHFpK48urfdrzNQ4iRRRA8YHtyk+gDxluS7HtkG28kwFnHvuzsczZWvDu
WmWoJ9SRsIwUD38n/20Kcbe0wZpHB2Zs8O7Rk3AsEyspIwJi/9LktwG2MgXzEqZz
314Zd7is38tPzp+snJa2F9x/K661yYbLfdlptGzS2HJvRFvNWpd8Yb1I7OsEhpvm
GIYozNLcAzJg8r9ONOOy51akOx5xAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/NhJ
nmwKg0VWA7Vbjh1awktqNo4wHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzJCN0Q3MDA4NTRGQjExRjE5NjRDREZBOENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+3kwDQYJKoZIhvcNAQEL
BQADggEBAGY/ojGe4r257CJF60Q9PEPNpgRn/Nrb1FnuoLN2ywhjTsWAoPhWozgV
yFGDSo2AvsHjhB5N5FEePE0Xy2P7KVqMSaG7DvVD5JafbEGJuBpdtNGoAZfcbPgj
xsc8VplYjgR9Vs+zayKDrIB26V8bvzizjE+26EPPJW2gbr6hrYs26ar1lXCO3gy9
4O84LGJXS3BA3aKVLrvvkDo9nqjMNTVkxpLbOW1qC2qRhHOkKd05WabYJ8tPyz+B
PS6gE5IGWb+mbqPlnvYcCIUuQE7rZlJBaJbjIBBdT0yYeqyu9gb3lQdocDHqmdZX
q94r9XbXIh0jRiR/dr/id9WzeOo15ow=
-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:47 2026 by rpki-client