Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3E82930454FB11F18466E6A8CE1D38B0.roa
File:                     3E82930454FB11F18466E6A8CE1D38B0.roa (raw, json)
Hash identifier:          5DWr6VKm61XHZuOQFJoGfnpdLiIrahrmLZN9ZR1AAlQ=
Subject key identifier:   50:35:EC:E2:37:63:2A:AE:58:E6:D6:AB:E9:7A:A6:AA:6F:5B:95:BC
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1185
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3E82930454FB11F18466E6A8CE1D38B0.roa
Signing time:             Thu 21 May 2026 09:55:49 +0000
ROA not before:           Thu 21 May 2026 09:55:44 +0000
ROA not after:            Thu 20 May 2027 09:55:44 +0000
asID:                     208185
IP address blocks:        196.251.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Jun 2026 02:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4485 (0x1185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May 21 09:55:44 2026 GMT
            Not After : May 20 09:55:44 2027 GMT
        Subject: CN=6a0ed6a5-89f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:34:6e:11:83:76:8a:1e:0d:6f:63:3d:2e:dd:
                    7e:68:27:7f:ae:e0:03:6d:6c:5c:7c:eb:ce:07:b6:
                    09:c3:18:4f:69:af:59:85:7e:fa:a2:f3:76:0a:3e:
                    c7:f4:21:da:fb:e5:3a:c5:2d:2d:1a:c2:5a:b5:79:
                    9c:2b:ca:06:72:7e:79:4c:af:ae:aa:e2:ae:02:36:
                    8d:d0:ae:0b:7c:2c:b3:68:e7:a1:6d:cf:68:c8:3b:
                    a3:6a:6e:84:1d:a8:81:fa:70:d3:bf:1c:18:40:70:
                    d3:36:a3:ec:e5:b5:cc:ad:83:1a:c9:4f:82:17:c3:
                    04:39:b4:6e:db:06:a8:c4:df:54:61:08:ca:d0:dd:
                    7e:0a:11:04:dc:0a:76:c6:e1:50:44:17:09:f4:d3:
                    f0:13:45:48:ae:d6:9e:d5:b2:0e:3d:46:12:26:91:
                    5c:de:85:7b:cb:70:06:79:9c:6e:7e:3d:96:a3:9c:
                    6e:bd:88:84:5e:d1:85:c8:a0:06:3e:89:26:98:77:
                    ec:c4:af:8d:73:8a:67:b0:df:11:c3:c9:e0:cd:04:
                    fe:7c:f8:3b:d2:c0:a8:73:d0:c2:aa:b0:f1:21:16:
                    2a:c7:66:0c:6d:99:6d:27:86:93:a6:b9:1c:9e:26:
                    38:ea:b0:86:54:12:5f:53:13:88:34:a8:43:c0:48:
                    6b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:35:EC:E2:37:63:2A:AE:58:E6:D6:AB:E9:7A:A6:AA:6F:5B:95:BC
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/3E82930454FB11F18466E6A8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:ca:6d:7d:ae:43:c2:a6:d4:f5:a8:d4:14:a8:75:2b:15:09:
         f5:1e:8b:5c:40:7e:06:dc:42:b0:84:f7:77:79:31:f3:92:af:
         ce:1d:c0:50:2f:fa:05:66:05:41:bc:e7:e9:f7:a8:d1:70:14:
         bd:23:65:75:e5:be:75:b9:fb:c3:c2:5e:75:82:86:e9:ef:d8:
         c0:d2:d0:14:7c:c9:9d:b0:6c:57:6d:77:24:1c:44:1a:d7:7a:
         32:1b:83:34:97:78:b9:45:3a:a3:de:4e:33:ae:47:a0:95:67:
         95:7a:9d:bf:ee:86:7a:af:c3:32:e3:1d:34:c3:9c:62:90:4f:
         8b:cc:a9:82:b8:b4:db:04:e0:6e:52:f4:cd:b2:6b:05:2a:0b:
         dc:f6:4f:0e:3c:a7:f8:7a:dc:b9:12:b2:26:42:86:c7:0b:88:
         de:d3:0b:07:e2:da:6e:15:f9:42:ff:0c:ab:de:79:71:1c:fa:
         81:19:db:1c:f7:69:d9:63:7b:c4:7c:2d:a0:73:88:a2:65:5a:
         62:b9:b2:c1:fe:f9:01:82:b1:cd:44:d5:9d:40:9f:b9:aa:79:
         0f:f1:25:e5:88:45:7b:f0:9b:89:88:f6:ae:74:be:ec:67:15:
         b5:07:b9:ac:2f:d9:31:d3:cf:5c:39:43:49:84:8c:22:ac:95:
         a3:db:8d:75
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEYUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNjA1MjEwOTU1NDRaFw0yNzA1MjAwOTU1NDRaMBgxFjAU
BgNVBAMTDTZhMGVkNmE1LTg5ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9NG4Rg3aKHg1vYz0u3X5oJ3+u4ANtbFx8684HtgnDGE9pr1mFfvqi83YK
Psf0Idr75TrFLS0awlq1eZwrygZyfnlMr66q4q4CNo3Qrgt8LLNo56Ftz2jIO6Nq
boQdqIH6cNO/HBhAcNM2o+zltcytgxrJT4IXwwQ5tG7bBqjE31RhCMrQ3X4KEQTc
CnbG4VBEFwn00/ATRUiu1p7Vsg49RhImkVzehXvLcAZ5nG5+PZajnG69iIRe0YXI
oAY+iSaYd+zEr41zimew3xHDyeDNBP58+DvSwKhz0MKqsPEhFirHZgxtmW0nhpOm
uRyeJjjqsIZUEl9TE4g0qEPASGstAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUUDXs
4jdjKq5Y5tar6Xqmqm9blbwwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzNFODI5MzA0NTRGQjExRjE4NDY2RTZBOENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+3owDQYJKoZIhvcNAQEL
BQADggEBAInKbX2uQ8Km1PWo1BSodSsVCfUei1xAfgbcQrCE93d5MfOSr84dwFAv
+gVmBUG85+n3qNFwFL0jZXXlvnW5+8PCXnWChunv2MDS0BR8yZ2wbFdtdyQcRBrX
ejIbgzSXeLlFOqPeTjOuR6CVZ5V6nb/uhnqvwzLjHTTDnGKQT4vMqYK4tNsE4G5S
9M2yawUqC9z2Tw48p/h63LkSsiZChscLiN7TCwfi2m4V+UL/DKveeXEc+oEZ2xz3
adlje8R8LaBziKJlWmK5ssH++QGCsc1E1Z1An7mqeQ/xJeWIRXvwm4mI9q50vuxn
FbUHuawv2THTz1w5Q0mEjCKslaPbjXU=
-----END CERTIFICATE-----
Generated at Sat Jun 6 02:29:09 2026 by rpki-client