Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/426DDF485DA511F1B828BADFCE1D38B0.roa
File:                     426DDF485DA511F1B828BADFCE1D38B0.roa (raw, json)
Hash identifier:          wFc/GeGxBvhyQYoFo+zSU5EmKCdjyIAej0hlZAmWQfE=
Subject key identifier:   C9:39:94:AF:D7:0B:21:5E:1A:CE:F9:80:87:B8:79:A5:6F:F2:CC:E8
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       11BB
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/426DDF485DA511F1B828BADFCE1D38B0.roa
Signing time:             Mon 01 Jun 2026 10:32:59 +0000
ROA not before:           Mon 01 Jun 2026 10:32:55 +0000
ROA not after:            Mon 31 May 2027 10:32:55 +0000
asID:                     206535
IP address blocks:        196.251.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Jun 2026 02:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4539 (0x11bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Jun  1 10:32:55 2026 GMT
            Not After : May 31 10:32:55 2027 GMT
        Subject: CN=6a1d5fdb-5a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:7c:29:cd:2b:b9:9e:3a:79:a4:7a:20:fc:
                    88:d6:57:9b:e8:ed:aa:07:c9:7d:7f:97:c8:ec:24:
                    03:65:23:6f:92:9c:a9:8d:13:bf:a9:b7:50:21:b3:
                    76:a7:e3:c5:24:97:46:fd:bb:87:e6:f8:ed:40:8a:
                    ea:bf:51:f2:73:ca:a8:63:72:ba:37:be:21:73:ce:
                    59:63:f7:04:fb:60:e5:c8:90:dd:94:e5:a6:ed:20:
                    ea:ca:86:ab:11:cd:25:59:65:4a:79:7d:e4:f2:59:
                    e4:ad:02:73:b6:9a:17:b0:e5:0d:6d:41:97:cd:92:
                    76:43:1e:ac:5d:ef:2e:dc:c3:13:af:ad:fe:43:34:
                    c8:9f:d6:63:05:43:c6:78:39:56:7d:55:61:31:5d:
                    05:b2:5f:c5:c7:98:2c:10:7a:20:57:f5:ed:94:2d:
                    89:94:04:e8:a6:52:e6:bb:7d:dc:98:1e:f4:f4:b6:
                    5b:72:08:ab:25:03:05:ae:8e:9e:0f:9f:da:31:91:
                    e7:3e:84:63:84:a8:6d:55:ce:f7:a7:c7:c8:39:ee:
                    53:d2:10:75:77:4a:62:2f:3f:e6:b2:c0:94:0a:d5:
                    11:69:d3:2a:b7:f8:06:3a:8c:82:57:61:22:18:20:
                    e5:0a:81:29:7f:ea:aa:ad:b5:65:b4:37:dc:c2:ea:
                    2d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:39:94:AF:D7:0B:21:5E:1A:CE:F9:80:87:B8:79:A5:6F:F2:CC:E8
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/426DDF485DA511F1B828BADFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:b4:c6:b2:14:52:83:46:26:99:cc:54:84:86:59:bd:a4:2e:
         7b:86:4a:ab:3c:df:4d:11:57:c4:f5:66:7b:53:ca:c8:ae:37:
         da:24:99:39:35:a5:94:d0:ad:75:5e:15:ac:67:3d:f0:24:e0:
         2e:0d:69:4c:d6:73:bf:ab:f6:0b:65:aa:fd:ec:ed:3b:36:4b:
         01:78:07:01:9d:fc:6e:6c:fc:9e:01:8f:2e:0b:3d:63:8e:8f:
         51:f5:43:cf:bf:23:df:06:52:23:38:64:35:b8:3d:9e:26:60:
         d6:7f:78:7f:0b:e4:90:45:ff:6e:e0:0e:77:88:9e:bf:7f:94:
         dc:ae:73:d6:f2:8d:7c:8b:cf:e9:2b:94:c6:4f:de:b5:44:79:
         3a:e3:dc:ab:40:2e:fb:d8:89:c0:c9:d9:3b:20:c8:7c:86:fb:
         cf:c9:30:6b:65:b6:93:fe:5e:3c:38:3c:a1:a6:0c:a7:af:db:
         28:be:90:57:ff:fc:9c:f6:83:1a:00:8e:46:bb:f9:ea:45:be:
         25:62:bd:25:f0:7f:ff:29:70:ec:ef:66:68:8f:4b:97:f7:3f:
         a3:c8:b2:a8:cf:20:69:f1:71:82:65:49:b0:80:e9:ab:65:72:
         15:bd:a0:76:6b:35:0e:33:01:16:56:38:4f:30:46:ce:95:0b:
         d0:db:e5:a2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEbswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNjA2MDExMDMyNTVaFw0yNzA1MzExMDMyNTVaMBgxFjAU
BgNVBAMTDTZhMWQ1ZmRiLTVhNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4pnwpzSu5njp5pHog/IjWV5vo7aoHyX1/l8jsJANlI2+SnKmNE7+pt1Ah
s3an48Ukl0b9u4fm+O1Aiuq/UfJzyqhjcro3viFzzllj9wT7YOXIkN2U5abtIOrK
hqsRzSVZZUp5feTyWeStAnO2mhew5Q1tQZfNknZDHqxd7y7cwxOvrf5DNMif1mMF
Q8Z4OVZ9VWExXQWyX8XHmCwQeiBX9e2ULYmUBOimUua7fdyYHvT0tltyCKslAwWu
jp4Pn9oxkec+hGOEqG1Vzvenx8g57lPSEHV3SmIvP+aywJQK1RFp0yq3+AY6jIJX
YSIYIOUKgSl/6qqttWW0N9zC6i2PAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUyTmU
r9cLIV4azvmAh7h5pW/yzOgwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzQyNkRERjQ4NURBNTExRjFCODI4QkFERkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+1gwDQYJKoZIhvcNAQEL
BQADggEBADG0xrIUUoNGJpnMVISGWb2kLnuGSqs8300RV8T1ZntTysiuN9okmTk1
pZTQrXVeFaxnPfAk4C4NaUzWc7+r9gtlqv3s7Ts2SwF4BwGd/G5s/J4Bjy4LPWOO
j1H1Q8+/I98GUiM4ZDW4PZ4mYNZ/eH8L5JBF/27gDneInr9/lNyuc9byjXyLz+kr
lMZP3rVEeTrj3KtALvvYicDJ2TsgyHyG+8/JMGtltpP+Xjw4PKGmDKev2yi+kFf/
/Jz2gxoAjka7+epFviVivSXwf/8pcOzvZmiPS5f3P6PIsqjPIGnxcYJlSbCA6atl
chW9oHZrNQ4zARZWOE8wRs6VC9Db5aI=
-----END CERTIFICATE-----
Generated at Thu Jun 4 12:00:00 2026 by rpki-client