Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/651BE79E6B9F11F185FF94D3CE1D38B0.roa
File:                     651BE79E6B9F11F185FF94D3CE1D38B0.roa (raw, json)
Hash identifier:          lCfAD89BAB3FNHxHtwPq2gO8E5coyM7sEyIQDxv339w=
Subject key identifier:   AF:00:54:AD:D3:B8:E2:4B:77:C7:CA:47:7F:A0:0A:B6:FE:9A:0D:E4
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1207
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/651BE79E6B9F11F185FF94D3CE1D38B0.roa
Signing time:             Fri 19 Jun 2026 05:26:17 +0000
ROA not before:           Fri 19 Jun 2026 05:26:12 +0000
ROA not after:            Wed 30 Jun 2027 05:26:12 +0000
asID:                     214061
IP address blocks:        196.251.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 Jul 2026 00:08:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4615 (0x1207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Jun 19 05:26:12 2026 GMT
            Not After : Jun 30 05:26:12 2027 GMT
        Subject: CN=6a34d2f9-a1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:21:45:5a:db:e3:ec:53:d6:67:d1:ec:00:fe:
                    a1:33:ad:cc:95:11:19:bc:83:7e:34:37:6b:d5:0e:
                    b9:7a:da:32:e9:52:bb:c2:ba:23:47:f1:a1:ed:74:
                    9d:be:b5:7b:49:6d:62:72:e3:a5:03:d2:55:e4:d6:
                    30:93:4a:cd:8b:f5:c2:a4:a5:03:94:3e:2d:cd:bd:
                    c5:9c:07:c1:53:a0:7d:90:f1:41:df:a7:a7:9b:89:
                    05:97:31:da:d2:90:c3:90:e2:2d:2c:09:57:11:eb:
                    e1:2a:fd:e0:72:51:20:f4:99:72:8a:b4:dd:0a:39:
                    03:12:64:f2:e0:64:71:59:b6:6a:59:d0:6d:6c:e8:
                    93:4d:97:3d:cc:96:b2:a6:f7:eb:15:25:b9:2a:38:
                    bb:8d:89:8d:24:04:3b:36:ad:b4:57:78:ed:a2:9d:
                    c1:b0:2c:ab:50:92:13:3d:b7:29:f6:d3:c1:00:71:
                    b9:3c:0f:81:b5:bd:63:08:62:b0:89:6b:31:e9:2a:
                    1c:84:8b:09:97:3e:f9:3d:51:d3:b9:93:4b:61:2e:
                    f2:c3:e9:99:5c:99:b3:80:59:6e:02:c8:e4:91:4e:
                    4c:ff:e3:a0:d8:54:ba:67:5c:7b:5f:16:a6:b1:a3:
                    f8:a8:f0:d9:35:0a:22:9d:eb:c2:9b:72:31:0d:b7:
                    c3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:00:54:AD:D3:B8:E2:4B:77:C7:CA:47:7F:A0:0A:B6:FE:9A:0D:E4
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/651BE79E6B9F11F185FF94D3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:a1:06:8a:cf:56:38:a3:50:9f:2c:31:f2:68:25:70:44:38:
         ef:f0:69:ac:6c:63:f2:99:fa:8a:89:b7:06:03:ce:3f:0c:18:
         ec:b5:f4:a5:4d:30:a7:39:05:65:c5:a7:5c:8d:9d:ff:1f:3d:
         36:4d:32:f3:c5:d9:aa:9f:22:81:e7:ea:dc:ae:75:35:d8:18:
         f6:65:96:c3:a3:64:21:17:a3:a9:16:e5:18:28:4f:9d:23:b7:
         bb:ce:5c:fd:69:4a:fe:99:c3:26:75:74:83:11:34:03:27:51:
         99:63:f2:a5:c5:3c:48:6f:0f:e1:8d:3e:29:d0:6f:6c:cb:c8:
         50:6a:b1:50:e0:ce:78:85:65:ee:f5:c4:f7:70:a7:27:7e:2a:
         20:e9:bb:22:6a:db:fa:0f:7e:bf:20:18:1f:72:77:d6:35:aa:
         56:70:c3:0d:85:d7:62:23:cb:bc:ba:27:6a:35:50:1a:a3:3c:
         11:a9:5c:0e:b9:59:b6:ec:27:0e:84:44:7a:4d:8d:98:52:c0:
         75:5e:ae:ce:3b:55:32:a5:25:8d:25:fc:fa:b9:f0:2f:ca:c1:
         92:6b:1f:7a:2b:1f:ae:95:59:4d:2f:f5:cf:95:d2:09:0d:1b:
         71:fc:6d:3c:65:66:19:30:e7:d8:ef:3d:6b:8c:71:b5:ca:44:
         85:13:fb:fb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEgcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNjA2MTkwNTI2MTJaFw0yNzA2MzAwNTI2MTJaMBgxFjAU
BgNVBAMTDTZhMzRkMmY5LWExYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4IUVa2+PsU9Zn0ewA/qEzrcyVERm8g340N2vVDrl62jLpUrvCuiNH8aHt
dJ2+tXtJbWJy46UD0lXk1jCTSs2L9cKkpQOUPi3NvcWcB8FToH2Q8UHfp6ebiQWX
MdrSkMOQ4i0sCVcR6+Eq/eByUSD0mXKKtN0KOQMSZPLgZHFZtmpZ0G1s6JNNlz3M
lrKm9+sVJbkqOLuNiY0kBDs2rbRXeO2incGwLKtQkhM9tyn208EAcbk8D4G1vWMI
YrCJazHpKhyEiwmXPvk9UdO5k0thLvLD6ZlcmbOAWW4CyOSRTkz/46DYVLpnXHtf
Fqaxo/io8Nk1CiKd68KbcjENt8PpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUrwBU
rdO44kt3x8pHf6AKtv6aDeQwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzY1MUJFNzlFNkI5RjExRjE4NUZGOTREM0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+3owDQYJKoZIhvcNAQEL
BQADggEBAC2hBorPVjijUJ8sMfJoJXBEOO/waaxsY/KZ+oqJtwYDzj8MGOy19KVN
MKc5BWXFp1yNnf8fPTZNMvPF2aqfIoHn6tyudTXYGPZllsOjZCEXo6kW5RgoT50j
t7vOXP1pSv6ZwyZ1dIMRNAMnUZlj8qXFPEhvD+GNPinQb2zLyFBqsVDgzniFZe71
xPdwpyd+KiDpuyJq2/oPfr8gGB9yd9Y1qlZwww2F12Ijy7y6J2o1UBqjPBGpXA65
WbbsJw6ERHpNjZhSwHVers47VTKlJY0l/Pq58C/KwZJrH3orH66VWU0v9c+V0gkN
G3H8bTxlZhkw59jvPWuMcbXKRIUT+/s=
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:04:45 2026 by rpki-client