Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5EABC26883F011F0B77CB97CDAE4EC9C.roa
File:                     5EABC26883F011F0B77CB97CDAE4EC9C.roa (raw, json)
Hash identifier:          l7Mk83AlN5lOvFl0FxabzKbzV4YbthBRXjmjxiGUqRs=
Subject key identifier:   48:56:49:5F:C6:7B:D7:E7:5A:5D:09:AB:89:F1:7F:C0:D0:9F:8C:96
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0D7A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5EABC26883F011F0B77CB97CDAE4EC9C.roa
Signing time:             Thu 28 Aug 2025 09:21:26 +0000
ROA not before:           Thu 28 Aug 2025 09:21:21 +0000
ROA not after:            Tue 01 Dec 2026 09:21:21 +0000
asID:                     996
IP address blocks:        102.135.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Sep 2025 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3450 (0xd7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Aug 28 09:21:21 2025 GMT
            Not After : Dec  1 09:21:21 2026 GMT
        Subject: CN=68b01f95-8635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fd:1a:96:ea:57:10:f2:52:d8:3b:01:88:03:
                    d3:40:18:b1:e4:5c:b9:5a:fb:80:07:d3:a1:66:2d:
                    7f:57:c2:bd:e4:4d:32:75:56:a4:2d:b8:ba:f1:b2:
                    18:29:9b:35:ae:97:38:8a:c8:86:25:2b:6a:78:22:
                    63:15:28:04:83:b4:1a:92:99:a6:65:b9:a0:90:25:
                    4c:cb:a3:f1:11:c2:24:f0:e1:20:b5:bb:e9:d7:db:
                    2e:a4:d4:9e:26:e7:2a:89:b4:e5:42:c7:d3:56:e1:
                    21:62:81:8b:fc:73:5b:48:06:ff:39:9c:60:78:95:
                    ba:dc:9c:3a:73:99:9d:f4:d9:74:a8:40:09:e7:ec:
                    04:0e:19:bc:25:f9:83:79:28:aa:ef:c1:5c:eb:05:
                    e5:24:d4:dc:dd:c2:cf:aa:fb:bc:04:e7:88:85:c0:
                    34:90:52:60:29:15:1f:78:ec:64:9d:ff:bd:37:be:
                    04:4b:fa:7d:0c:20:63:fb:a9:ca:7c:b7:23:a0:e2:
                    10:8a:e7:94:85:1a:4f:a3:41:d3:11:1d:f9:d0:ff:
                    3d:df:c7:11:09:9f:d1:db:48:aa:ca:80:95:4a:56:
                    2c:55:66:e1:cb:3d:a9:75:67:70:fb:24:38:be:d7:
                    5c:2d:64:ff:14:bd:d8:5f:cf:20:62:12:7e:61:f8:
                    32:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:56:49:5F:C6:7B:D7:E7:5A:5D:09:AB:89:F1:7F:C0:D0:9F:8C:96
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5EABC26883F011F0B77CB97CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:14:5f:f5:73:e1:36:e9:00:91:6a:df:19:27:90:ab:fe:4b:
         8a:70:d6:1f:e7:6d:8c:33:3f:84:6a:52:db:7c:f4:00:be:b5:
         29:4c:fb:9c:47:0e:f4:96:7d:95:58:cd:fa:bf:5d:81:27:57:
         04:15:9d:e6:86:3a:d5:da:95:98:96:50:a4:78:c7:b9:bf:1f:
         63:eb:76:99:fb:79:38:25:d0:0f:67:28:84:83:08:6d:81:28:
         c6:27:20:a3:80:8a:55:c3:2c:29:56:a2:43:57:70:f2:24:64:
         88:22:3d:61:fc:62:92:f4:b3:ac:97:42:df:63:86:1d:26:ab:
         09:ae:25:4f:fa:04:5c:17:56:12:5d:4a:de:09:de:4e:75:76:
         96:01:41:42:49:71:43:a1:9b:d5:c0:88:6c:33:72:60:41:ae:
         85:bc:0c:b9:7e:a0:05:e7:dd:a0:b3:89:0c:12:f2:94:1c:54:
         11:5d:f1:73:d1:82:bd:68:92:4c:cd:88:f0:1d:14:52:34:bb:
         18:76:ce:91:a5:a9:06:67:45:25:aa:8b:f1:52:50:50:2e:00:
         c7:02:a7:e0:e7:40:de:9c:99:04:b6:07:45:47:b5:e7:8a:62:
         26:86:db:a4:8a:b8:b8:74:9b:17:ad:e1:e0:fe:c0:10:61:7a:
         aa:42:ff:1c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDXowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA4MjgwOTIxMjFaFw0yNjEyMDEwOTIxMjFaMBgxFjAU
BgNVBAMTDTY4YjAxZjk1LTg2MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDn/RqW6lcQ8lLYOwGIA9NAGLHkXLla+4AH06FmLX9Xwr3kTTJ1VqQtuLrx
shgpmzWulziKyIYlK2p4ImMVKASDtBqSmaZluaCQJUzLo/ERwiTw4SC1u+nX2y6k
1J4m5yqJtOVCx9NW4SFigYv8c1tIBv85nGB4lbrcnDpzmZ302XSoQAnn7AQOGbwl
+YN5KKrvwVzrBeUk1Nzdws+q+7wE54iFwDSQUmApFR947GSd/703vgRL+n0MIGP7
qcp8tyOg4hCK55SFGk+jQdMRHfnQ/z3fxxEJn9HbSKrKgJVKVixVZuHLPal1Z3D7
JDi+11wtZP8UvdhfzyBiEn5h+DKhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUSFZJ
X8Z71+daXQmrifF/wNCfjJYwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzVFQUJDMjY4ODNGMDExRjBCNzdDQjk3Q0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhwYwDQYJKoZIhvcNAQEL
BQADggEBAGMUX/Vz4TbpAJFq3xknkKv+S4pw1h/nbYwzP4RqUtt89AC+tSlM+5xH
DvSWfZVYzfq/XYEnVwQVneaGOtXalZiWUKR4x7m/H2Prdpn7eTgl0A9nKISDCG2B
KMYnIKOAilXDLClWokNXcPIkZIgiPWH8YpL0s6yXQt9jhh0mqwmuJU/6BFwXVhJd
St4J3k51dpYBQUJJcUOhm9XAiGwzcmBBroW8DLl+oAXn3aCziQwS8pQcVBFd8XPR
gr1okkzNiPAdFFI0uxh2zpGlqQZnRSWqi/FSUFAuAMcCp+DnQN6cmQS2B0VHteeK
YiaG26SKuLh0mxet4eD+wBBheqpC/xw=
-----END CERTIFICATE-----
Generated at Fri Sep 5 23:32:23 2025 by rpki-client