Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/910D2402D33511EF97FAA099762E951A.roa
File:                     910D2402D33511EF97FAA099762E951A.roa (raw, json)
Hash identifier:          NphQMvNBNE2FphfOu52hUTRabJHWzQdVn8Bb5LWQqXY=
Subject key identifier:   70:FC:43:82:08:19:55:F0:A5:FC:C7:98:6B:EA:C2:1D:4D:36:F9:02
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       053A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/910D2402D33511EF97FAA099762E951A.roa
Signing time:             Wed 15 Jan 2025 11:40:49 +0000
ROA not before:           Wed 15 Jan 2025 11:40:46 +0000
ROA not after:            Thu 15 Jan 2026 11:40:46 +0000
asID:                     53356
IP address blocks:        102.135.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Apr 2025 00:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1338 (0x53a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Jan 15 11:40:46 2025 GMT
            Not After : Jan 15 11:40:46 2026 GMT
        Subject: CN=67879ec1-aa0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:d5:d8:3c:d2:ee:2b:9a:95:45:f1:6c:fb:
                    2a:7e:5a:d5:47:4d:59:5a:d5:2f:69:f9:48:53:ad:
                    ca:f6:22:2c:59:0d:2b:29:70:84:ad:83:77:28:8c:
                    77:53:63:c6:75:a0:12:23:50:6a:a7:66:c3:8f:96:
                    61:c8:f1:28:24:c4:36:9c:2f:d3:b4:7d:73:fa:1a:
                    4a:05:e3:12:77:4f:38:37:52:7c:93:32:cb:e4:ad:
                    70:f0:82:54:a6:25:46:99:83:75:9f:7d:77:61:a1:
                    b3:5c:9a:91:37:99:6b:a3:91:ed:97:a7:cb:ac:32:
                    50:09:34:db:92:13:7f:95:3d:1b:a5:fc:4a:a2:2a:
                    9c:77:99:26:45:a0:3c:27:34:bc:48:4e:c6:9c:7b:
                    60:ff:61:d2:a4:ef:9b:b9:07:50:7f:97:54:82:78:
                    38:45:f1:6b:57:38:f8:e3:a4:48:5b:64:da:c5:d4:
                    e9:3a:96:e0:b7:17:09:42:68:7b:40:d6:24:74:57:
                    6d:a1:e9:e2:e8:50:08:9e:d8:ff:ef:64:bb:83:00:
                    cf:d6:08:29:25:83:79:82:07:fd:f9:e2:7e:60:39:
                    d5:a6:5e:dc:4d:6c:a7:2e:74:0a:42:7a:29:4a:6b:
                    84:2b:df:e6:58:ae:91:b4:e1:e5:ff:ae:77:ef:80:
                    1f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FC:43:82:08:19:55:F0:A5:FC:C7:98:6B:EA:C2:1D:4D:36:F9:02
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/910D2402D33511EF97FAA099762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:7e:bd:07:7f:70:c4:74:de:6c:95:5a:21:b2:be:8c:12:12:
         62:5d:67:06:0c:9b:0f:fb:74:3a:4c:97:84:34:1b:12:0f:64:
         2a:93:fd:9e:ec:9d:b2:b9:9d:ce:11:99:45:d0:9b:bf:3e:e3:
         95:9e:80:7e:fe:f2:32:49:ec:f3:d6:b0:b6:c8:53:1f:8b:d2:
         87:6c:87:88:cd:a1:ff:f2:c8:0e:39:68:c5:e7:bd:9a:16:75:
         22:e5:3f:0b:27:d7:d0:4d:97:a0:eb:9b:dc:9e:cc:1c:c8:58:
         99:98:b1:1c:01:94:45:3a:55:b0:57:e5:ab:21:47:b5:5e:65:
         91:8b:09:58:31:aa:bc:38:2b:10:2f:ca:c3:83:2f:00:0a:81:
         99:e7:11:84:1d:ee:7b:3e:c4:a5:90:7b:06:45:ad:c0:fe:5a:
         f2:2f:23:5f:0f:38:64:53:da:86:47:e3:22:a6:b3:64:7d:ea:
         b6:d6:85:d9:16:a6:19:bb:2e:dc:4c:57:12:d3:f6:4b:9a:a0:
         0b:5d:76:7c:25:1e:90:f2:48:1b:11:eb:84:dc:b0:c6:13:d7:
         72:09:a3:14:8f:d6:2e:1a:b2:58:13:89:fe:75:1b:8f:1a:0b:
         c7:2c:c4:2f:a7:7c:ce:a4:80:9e:2f:52:cd:46:0d:be:86:f8:
         35:56:1c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:43 2025 by rpki-client