Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/474C8D045BFF11F1B4711ADDCE1D38B0.roa
File:                     474C8D045BFF11F1B4711ADDCE1D38B0.roa (raw, json)
Hash identifier:          w+3WXWQYIvz6vBj3zcbUwCtObspVcQbG51LVir0NKUw=
Subject key identifier:   C3:23:75:94:28:AA:43:C4:14:45:60:CA:1D:4F:9D:94:E9:8B:03:6C
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       11A3
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/474C8D045BFF11F1B4711ADDCE1D38B0.roa
Signing time:             Sat 30 May 2026 08:12:20 +0000
ROA not before:           Sat 30 May 2026 08:12:14 +0000
ROA not after:            Mon 31 May 2027 08:12:14 +0000
asID:                     49443
IP address blocks:        196.251.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Jun 2026 02:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4515 (0x11a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May 30 08:12:14 2026 GMT
            Not After : May 31 08:12:14 2027 GMT
        Subject: CN=6a1a9be4-978f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:83:3f:0a:9f:7e:56:a9:a3:f1:92:e1:6d:7b:
                    c4:42:9a:76:b2:96:bc:98:c3:ee:d7:64:5a:46:43:
                    73:a0:bc:43:29:82:9a:4e:28:76:38:1a:e4:01:35:
                    10:a1:27:22:86:61:f4:f1:34:60:51:f7:50:51:83:
                    82:10:3b:73:5e:49:d4:0f:70:b0:f4:db:f7:e0:fa:
                    ce:3c:71:05:cb:09:e9:2e:8c:b1:a6:19:ce:3f:5e:
                    34:c1:a8:40:42:6f:7c:bb:bc:21:45:a2:d6:a1:68:
                    a5:f3:8a:e3:49:99:9e:d5:d7:fb:9c:e0:6f:af:2e:
                    98:34:15:91:ea:e5:49:49:0e:c6:d4:5e:c8:38:03:
                    d2:f6:0d:a7:c6:4b:d2:55:81:1d:95:35:e1:20:04:
                    f1:87:09:42:49:81:41:c8:38:0f:64:ef:8a:c2:5f:
                    e7:00:3d:19:ae:78:90:cb:a2:c1:e3:eb:9c:78:88:
                    f6:b9:d9:2d:0d:94:db:25:d2:9a:6e:eb:6a:42:15:
                    1e:b3:12:d4:f8:51:4e:74:d4:9a:66:0d:76:d5:21:
                    19:2b:a4:f5:22:de:97:2a:af:73:ce:74:b0:d2:0b:
                    58:26:b6:ab:f4:e0:33:61:5b:27:c5:90:c2:14:53:
                    a8:54:99:24:ec:2b:b9:54:95:3d:e0:77:0a:8c:da:
                    bf:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:23:75:94:28:AA:43:C4:14:45:60:CA:1D:4F:9D:94:E9:8B:03:6C
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/474C8D045BFF11F1B4711ADDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:c8:8c:05:90:ae:7c:c3:50:d6:00:e4:37:34:6b:18:74:46:
         dd:5c:fc:3e:95:33:53:e0:bc:1d:f1:7c:90:78:b1:80:b4:c1:
         8d:7c:c8:b2:55:72:3f:fa:2b:b9:76:00:09:96:2d:47:05:4a:
         40:7b:ab:b7:a4:bd:9a:ae:f3:7a:46:f5:39:ea:48:31:b1:d0:
         00:43:4a:4f:98:02:05:2b:f1:aa:3c:e7:d5:ee:53:4f:2a:6e:
         e0:b2:41:8e:fa:30:60:85:a5:24:d1:9b:a5:8a:b9:93:20:e5:
         b2:4a:ca:91:fb:59:68:7d:2d:57:a3:9b:2b:ca:50:1a:98:e2:
         8c:23:74:6e:ba:e6:6a:83:1a:30:b4:0f:06:8c:92:76:a7:09:
         8c:9e:fe:a4:eb:cc:9b:89:36:39:af:2f:ba:d9:b5:fe:59:b2:
         fe:01:6f:21:24:61:8c:43:44:cc:db:97:29:d8:d9:3d:33:19:
         ae:76:b1:c4:91:27:d1:bb:29:5b:aa:e7:c0:df:05:a8:99:34:
         67:44:03:ef:bd:27:e9:3e:dc:e7:1f:c8:11:06:12:2f:c5:75:
         85:c8:91:60:f5:08:2e:48:2d:51:10:06:78:a6:3c:fe:57:1e:
         bb:02:95:2f:02:a2:7c:25:d4:e5:54:bf:97:cf:93:4d:76:47:
         c0:ce:d4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:28:59 2026 by rpki-client