Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3D8F0316925811F182805CBECE1D38B0.roa
File:                     3D8F0316925811F182805CBECE1D38B0.roa (raw, json)
Hash identifier:          W+flZ1nQuOuZdDQLFPxp0OHXmIyPfVD4shg3hFGKDoE=
Subject key identifier:   B4:EE:AB:04:E9:FF:03:2D:96:71:3C:A2:6D:12:FE:13:57:73:3D:86
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1274
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3D8F0316925811F182805CBECE1D38B0.roa
Signing time:             Fri 07 Aug 2026 12:05:12 +0000
ROA not before:           Fri 07 Aug 2026 12:05:08 +0000
ROA not after:            Sat 14 Aug 2027 12:05:08 +0000
asID:                     142240
IP address blocks:        196.251.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 11 Aug 2026 00:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4724 (0x1274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Aug  7 12:05:08 2026 GMT
            Not After : Aug 14 12:05:08 2027 GMT
        Subject: CN=6a75c9f7-324c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c5:c5:4a:ba:c1:98:53:54:50:e8:f5:9c:f8:
                    7b:f3:cd:12:0f:14:b3:2a:cc:b4:bd:eb:d0:ac:cf:
                    e1:5a:d8:b1:4c:18:78:0a:e8:e4:09:ee:d3:c8:b2:
                    24:70:89:e0:48:d6:ed:1e:83:e1:90:82:9a:31:22:
                    2e:81:71:bf:10:9c:4d:19:ac:ee:80:c0:42:18:ed:
                    c9:c0:a7:1a:60:e6:12:c3:7e:1b:6f:29:18:50:a5:
                    cc:64:c8:f4:dd:d2:e0:b5:96:25:d6:31:d5:c4:07:
                    3b:6a:e1:ae:ec:2a:db:64:f7:d9:5e:38:ad:08:94:
                    e7:cf:f6:28:6c:39:3e:62:23:f5:5d:b2:b5:3b:81:
                    23:ba:64:64:cc:6a:0d:21:25:07:d7:62:36:2b:ff:
                    93:6f:8a:db:db:fc:f2:53:c4:73:95:00:36:35:f2:
                    b0:94:82:a2:9a:15:ad:4b:d0:af:cc:d8:d4:0d:1c:
                    ba:5b:96:5e:7d:d4:c4:13:8a:b5:dd:0b:68:b8:1f:
                    a8:22:f2:b7:d5:93:55:24:be:35:8d:a3:a8:07:29:
                    bb:83:2b:d2:2e:e5:7b:f1:3b:d4:b7:a8:12:fd:ac:
                    bb:66:b7:ad:8f:4f:5e:d2:28:23:00:b4:01:3f:cc:
                    89:7c:78:4a:d3:06:26:12:98:4a:51:48:c0:d6:20:
                    7d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EE:AB:04:E9:FF:03:2D:96:71:3C:A2:6D:12:FE:13:57:73:3D:86
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3D8F0316925811F182805CBECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:ae:44:ae:66:eb:c5:89:8a:59:7f:98:55:af:50:59:bc:74:
         38:1b:99:6b:f2:94:76:2b:2b:9c:49:5a:90:57:ac:ce:9a:81:
         87:1c:04:45:30:56:a3:fb:87:da:7d:00:d3:07:c2:83:1e:e2:
         40:e3:7d:46:e0:74:a2:68:13:5c:aa:91:ed:32:cb:30:82:5e:
         02:50:72:b1:c2:36:f1:cc:93:09:51:1b:4a:95:62:d9:2c:58:
         d9:1a:f4:13:8c:11:77:ec:f5:ff:3c:aa:38:33:42:a6:7a:2b:
         7e:6c:bd:ea:2d:6b:2f:8b:a1:89:eb:9c:88:94:b1:29:93:76:
         eb:90:ce:49:51:10:c1:93:a6:c5:b0:c9:2b:ca:5a:03:47:22:
         59:f6:61:64:69:43:1f:1e:15:4f:eb:c1:9c:cd:fa:bc:83:31:
         1e:7b:90:4d:bf:bb:da:fc:f5:20:71:70:4a:93:b7:88:0c:c7:
         77:22:39:a8:07:2a:d6:0d:57:c7:2e:16:25:ca:74:cc:23:13:
         97:24:34:9d:bb:93:fa:46:07:4c:f6:ef:41:3b:a8:3c:67:2e:
         3b:54:70:aa:34:8e:c5:86:41:ce:bd:ab:dd:4a:4f:be:7b:0b:
         2b:df:d1:4a:f2:79:b1:41:32:4b:81:ef:bb:87:46:dc:f0:92:
         f9:66:8f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 15:15:41 2026 by rpki-client