Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7E7A288C831411F0B3426DD9DAE4EC9C.roa
File:                     7E7A288C831411F0B3426DD9DAE4EC9C.roa (raw, json)
Hash identifier:          +Qeyt3n734bR6kI1TVtqjD1w6YtzIH4pG6N+yCUlKYc=
Subject key identifier:   C9:CB:6D:2D:9F:9A:36:C7:B9:D4:0D:73:1A:B7:80:3B:C5:43:6F:49
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0D33
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7E7A288C831411F0B3426DD9DAE4EC9C.roa
Signing time:             Wed 27 Aug 2025 07:07:30 +0000
ROA not before:           Wed 27 Aug 2025 07:07:25 +0000
ROA not after:            Thu 01 Jan 2026 07:07:25 +0000
asID:                     34450
IP address blocks:        102.135.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Sep 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3379 (0xd33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Aug 27 07:07:25 2025 GMT
            Not After : Jan  1 07:07:25 2026 GMT
        Subject: CN=68aeaeb2-d6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ba:81:b7:32:49:cf:5d:50:d2:72:f3:87:e0:
                    97:df:56:b9:01:df:40:d5:6f:4d:e5:f3:88:d8:c8:
                    06:40:1f:fa:b4:bd:d5:7e:cf:a3:6a:db:f4:e3:33:
                    c0:e8:7c:fb:73:7a:a6:78:aa:62:a7:32:54:0b:3c:
                    f2:cb:83:bb:ea:31:96:80:fc:e3:c6:77:97:7d:b4:
                    ec:2d:32:cd:92:20:07:cc:99:36:38:85:3b:dd:2b:
                    95:6f:d8:30:ca:b4:0d:76:84:09:66:31:c4:50:0a:
                    f1:83:cb:0f:60:82:4a:6f:0f:18:f4:17:54:f4:00:
                    4a:d6:d4:89:8c:fb:f4:7e:40:41:92:04:5b:e1:86:
                    a3:47:fa:04:04:6c:c6:75:48:de:cb:de:37:06:3a:
                    6c:e9:71:cd:8c:47:fc:b2:d1:83:0b:07:f9:54:33:
                    44:46:64:7a:31:4e:7d:09:49:f6:d9:7c:f8:64:c0:
                    f7:58:73:e7:7b:82:f0:6b:8f:b5:74:42:36:c7:19:
                    ff:e6:4a:69:84:ac:c6:ed:af:9a:59:f9:ea:b4:7f:
                    c8:86:45:c3:b9:7b:74:ed:b6:14:72:1e:c0:1e:7a:
                    79:34:c1:23:db:d5:c2:1f:ca:07:ff:65:17:8c:4e:
                    e7:1d:05:9e:38:7e:52:7d:ae:43:c9:f1:e1:73:68:
                    67:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CB:6D:2D:9F:9A:36:C7:B9:D4:0D:73:1A:B7:80:3B:C5:43:6F:49
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7E7A288C831411F0B3426DD9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:28:1f:3c:10:ff:45:7d:da:b4:e8:87:80:7f:a5:a9:81:37:
         9e:5d:5a:c1:9b:37:07:38:90:f5:3c:f9:fe:aa:54:f2:02:e7:
         19:e5:cb:88:0e:c0:0d:70:08:10:83:1b:f6:fd:3a:0b:b6:e9:
         a9:bc:5a:03:54:3f:d0:ec:a1:7c:a0:83:b5:6c:02:ca:63:b6:
         ff:8e:55:a0:86:5d:0f:5c:25:dd:e4:c4:b0:7b:10:94:7e:73:
         09:75:9c:83:86:be:eb:21:b4:b1:7e:17:b3:72:79:b4:43:9d:
         1a:03:c5:75:dd:fa:fe:8f:73:47:35:17:49:98:1e:72:cb:51:
         b4:c1:08:4b:e3:b1:62:6e:21:51:72:1d:42:7e:2c:92:b9:61:
         d8:0b:4d:40:b5:ee:50:1f:04:49:4f:8f:29:43:dd:e5:96:74:
         65:82:00:ea:ec:7b:4a:f3:15:0d:ae:bb:df:29:4a:48:d8:4d:
         09:56:83:f4:88:65:0a:2a:5c:c0:8f:00:0c:71:f9:80:cc:fc:
         90:c4:46:6d:21:b0:2b:c6:b8:56:25:1c:48:07:60:c5:5c:e4:
         07:85:f0:fc:1f:e2:cc:fc:13:97:cc:c1:6f:ae:fe:11:6e:69:
         13:b1:f1:0f:f8:2c:ed:e5:6c:ee:25:82:77:b4:89:fe:ff:a0:
         8b:0e:13:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:42:02 2025 by rpki-client