Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/64312A0ED1CC11F1B2E7631BCF1D38B0.roa
File:                     64312A0ED1CC11F1B2E7631BCF1D38B0.roa (raw, json)
Hash identifier:          FGrV+Z25wKCvd1SLmwAT3aTFok70Rtvt0a/SWqEZ5hA=
Subject key identifier:   D3:D6:7F:87:1F:D3:2F:28:97:AB:2A:64:3F:2E:C4:34:75:75:41:12
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1342
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/64312A0ED1CC11F1B2E7631BCF1D38B0.roa
Signing time:             Tue 27 Oct 2026 06:05:21 +0000
ROA not before:           Tue 27 Oct 2026 06:05:16 +0000
ROA not after:            Sun 31 Oct 2027 06:05:16 +0000
asID:                     834
IP address blocks:        102.135.14.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4930 (0x1342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Oct 27 06:05:16 2026 GMT
            Not After : Oct 31 06:05:16 2027 GMT
        Subject: CN=6ae03f21-7fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:04:af:9f:2c:78:04:11:2e:81:c6:49:5e:fd:
                    e3:14:3e:89:50:a5:e9:24:54:31:b7:ed:ff:8c:69:
                    54:dd:9c:e6:cb:d4:db:6e:73:00:a9:ab:3c:4d:dd:
                    56:4a:2b:3d:8b:5c:0c:fe:e8:f5:c8:c0:7e:c7:11:
                    2d:d9:1e:89:67:7c:6a:97:c1:00:4a:3d:ae:19:c7:
                    b8:38:aa:7a:05:f8:51:4a:a7:64:89:d0:3a:9a:bd:
                    09:a0:c5:24:0f:df:c9:5b:48:79:a2:84:07:f2:69:
                    59:a2:15:d0:b6:85:b0:97:b8:e1:88:72:ef:d7:72:
                    60:c4:e8:68:41:0f:9b:24:dc:64:29:c0:fa:ba:c9:
                    73:8b:4e:46:a9:4a:0a:c3:24:fb:29:4d:9d:6f:3d:
                    27:1a:b6:92:5d:f7:7a:82:51:78:19:71:5f:29:b0:
                    0c:d3:ad:77:1c:a7:16:a2:1f:78:17:88:2c:7f:0b:
                    28:31:59:81:1b:14:31:8a:cf:81:8b:6b:fa:01:ef:
                    67:1e:84:53:02:14:6b:37:57:1b:a6:01:f0:4b:26:
                    1c:57:6f:d7:f3:7c:58:12:6c:a1:79:7e:f9:89:0b:
                    14:d9:af:3e:d3:f2:31:81:6e:1c:a9:09:a5:e2:45:
                    e6:48:d6:6c:69:0c:91:81:c2:54:c4:c2:7e:f1:57:
                    ef:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D6:7F:87:1F:D3:2F:28:97:AB:2A:64:3F:2E:C4:34:75:75:41:12
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/64312A0ED1CC11F1B2E7631BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:33:9d:8f:bc:65:28:19:4e:1d:9b:ae:3b:6a:eb:e7:49:f2:
         bc:03:8a:52:b9:b3:6b:f2:cc:f6:28:e3:6b:2a:e8:8a:e7:63:
         b5:bf:cf:d1:fc:ed:67:c8:9b:7d:3a:e1:51:24:bf:06:ea:42:
         15:bc:b2:e0:e7:dc:07:ab:61:81:66:46:ac:f6:c8:24:b6:23:
         fa:a3:c6:16:23:5f:58:0e:1f:76:8c:63:a0:f7:31:06:7a:8f:
         cb:15:1e:85:5f:af:82:2e:10:37:f8:6b:c0:3e:eb:49:b8:11:
         31:54:2c:9f:cb:a5:fb:8c:89:6a:8f:39:fe:75:11:32:af:e5:
         ec:b7:45:37:c8:ba:3c:ae:40:a2:97:94:ba:86:63:25:e3:7e:
         ae:d6:b5:0d:13:f8:a8:48:c8:35:7a:b9:7b:af:c7:62:20:e9:
         30:92:85:f8:10:42:6c:06:75:ea:96:53:0e:64:b1:e5:33:c8:
         45:9b:03:85:5f:0d:9c:17:aa:4b:a9:15:14:a8:7c:e4:be:5b:
         01:92:06:ce:b4:62:67:cf:64:a2:62:95:1e:d1:a0:e2:25:1c:
         60:23:f7:a6:04:18:5d:aa:69:93:9b:42:a1:58:65:38:60:79:
         7d:66:2f:dc:c8:5b:8f:27:40:b4:a8:f7:81:cb:9f:30:30:7f:
         ea:eb:0e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----