Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/35F8A36A542211F1B42DDDF7CE1D38B0.roa
File:                     35F8A36A542211F1B42DDDF7CE1D38B0.roa (raw, json)
Hash identifier:          rjLoFMS/Ek2URf+ICZxbWnH+ZskDsMeuvu1V/VPgJOk=
Subject key identifier:   7F:D6:DD:09:ED:CA:C2:EC:24:F5:47:4B:9E:BB:A6:D1:64:6C:23:80
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       116C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/35F8A36A542211F1B42DDDF7CE1D38B0.roa
Signing time:             Wed 20 May 2026 08:02:14 +0000
ROA not before:           Wed 20 May 2026 08:02:09 +0000
ROA not after:            Thu 20 May 2027 08:02:09 +0000
asID:                     205301
IP address blocks:        196.251.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Jun 2026 00:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4460 (0x116c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May 20 08:02:09 2026 GMT
            Not After : May 20 08:02:09 2027 GMT
        Subject: CN=6a0d6a86-72e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b7:ca:34:92:db:ed:17:80:f0:c3:7b:b1:49:
                    d0:87:b6:2e:07:67:bd:36:ec:8d:fd:66:15:0b:0d:
                    f5:68:26:44:12:19:99:b8:48:35:e9:72:b8:8a:50:
                    ab:0d:39:49:c8:43:84:d0:df:26:a9:30:ae:37:c6:
                    3e:dd:b8:43:d2:3c:8d:21:1d:68:e0:10:9b:96:46:
                    11:ff:61:92:e1:7b:79:bd:65:46:32:61:76:26:bd:
                    41:18:cd:60:0c:07:e5:c2:43:32:d1:12:46:bf:75:
                    52:56:77:e0:14:30:db:26:c1:2b:d7:09:ef:dd:10:
                    de:3b:cc:f7:6d:40:34:6b:e3:0e:08:5c:8a:ca:38:
                    bf:15:47:2c:33:cc:0b:09:ea:6b:ca:cc:bf:4d:d7:
                    4b:8f:86:e8:ab:8c:cc:2f:69:55:15:9b:95:65:bb:
                    f9:98:5e:08:74:47:6f:08:b4:cb:69:06:1c:52:f0:
                    14:77:5d:2b:4e:74:1a:f5:e9:09:10:31:5b:3c:28:
                    3a:1c:2b:63:12:d5:ba:bc:f9:cd:05:f1:6c:2d:db:
                    16:38:cd:df:1f:42:5d:e8:0b:a1:23:0c:31:3c:06:
                    f8:69:b3:e3:e3:6b:80:0a:36:a5:5f:a6:74:a7:1e:
                    44:05:4b:63:65:27:00:e3:b3:d9:87:4d:96:60:6a:
                    f7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D6:DD:09:ED:CA:C2:EC:24:F5:47:4B:9E:BB:A6:D1:64:6C:23:80
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/35F8A36A542211F1B42DDDF7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:f5:5d:7b:11:97:9f:f0:68:1a:8e:26:0e:3c:c1:02:33:81:
         e3:dc:f5:15:72:42:39:2f:5b:eb:39:c3:a3:70:6b:7c:e5:d0:
         13:3f:d5:e0:72:6a:60:20:97:17:ef:2e:cb:18:55:18:9d:d0:
         18:43:6a:a8:22:b9:d1:a7:40:af:87:a9:ee:c0:45:19:90:ba:
         9a:d6:91:56:c7:8d:ae:20:16:91:d0:1a:79:7b:0c:c6:84:82:
         c2:32:e5:7b:8f:33:fc:65:6d:0d:70:68:11:c0:86:93:a7:b2:
         71:87:90:45:29:13:af:84:8f:fb:88:3a:29:cd:14:8d:b0:03:
         e0:0c:6f:91:52:78:52:98:2c:31:4d:60:e2:87:4b:ce:82:e0:
         bb:55:7c:41:9d:69:b9:e1:07:56:be:dd:38:2c:18:e3:1b:8a:
         af:1a:d4:6c:10:e8:79:33:d0:47:30:75:d8:ef:8f:35:31:b2:
         2b:5d:a6:44:14:af:f2:51:eb:07:7d:01:9b:2b:4f:f5:92:50:
         38:8f:03:33:01:d8:b1:02:0b:fd:0c:12:52:07:a5:56:66:a8:
         1a:01:f4:97:de:09:08:c2:ea:24:e3:d3:17:93:48:ad:8b:90:
         cd:3b:95:e8:78:9c:d6:a5:3c:2d:81:25:73:b9:24:02:67:33:
         b7:87:97:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 09:16:14 2026 by rpki-client