Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9E109BBCCEB411F188CAB7EBCE1D38B0.roa
File:                     9E109BBCCEB411F188CAB7EBCE1D38B0.roa (raw, json)
Hash identifier:          oulObqQA+VZ0XfB45dcsR5MwTaNC2X8xDab2T6CKDrs=
Subject key identifier:   8F:BD:C4:31:FC:51:1B:DA:41:4D:2E:06:C3:2B:35:9A:27:0F:92:EC
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1326
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9E109BBCCEB411F188CAB7EBCE1D38B0.roa
Signing time:             Fri 23 Oct 2026 07:37:37 +0000
ROA not before:           Fri 23 Oct 2026 07:37:32 +0000
ROA not after:            Sun 31 Oct 2027 07:37:32 +0000
asID:                     199899
IP address blocks:        102.135.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4902 (0x1326)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Oct 23 07:37:32 2026 GMT
            Not After : Oct 31 07:37:32 2027 GMT
        Subject: CN=6adb0ec1-5e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:b2:82:c8:96:ef:f0:c7:02:cf:5a:b7:b0:
                    fa:ab:ca:51:00:d1:06:cc:84:d3:46:5a:9d:22:ec:
                    f0:3f:91:3c:82:fe:79:51:01:65:f2:d3:b3:9b:64:
                    84:37:a6:25:a6:ca:60:fd:a4:de:5e:fc:da:30:9f:
                    16:6d:c6:de:51:0f:e6:bf:be:50:0e:03:a3:5a:08:
                    4a:40:e1:7d:1d:73:95:93:fe:38:77:02:bd:42:71:
                    e3:d4:d7:90:9f:4d:a5:41:ec:c1:f3:bd:eb:42:fc:
                    b2:fd:46:46:84:ef:2b:ea:8a:ea:f5:81:51:01:03:
                    80:d5:07:bc:3f:c3:8f:40:82:84:35:27:cc:dc:d4:
                    7e:e1:d7:d3:40:cd:e4:fe:c7:f3:6b:5d:56:cc:ad:
                    2a:c7:4a:b4:a5:e9:f2:bd:0d:ea:01:39:a0:b1:87:
                    df:7b:a3:c6:01:6d:fb:27:b8:f7:bb:ac:92:17:a3:
                    dc:94:22:7a:93:f3:c4:09:84:d1:3b:d5:35:eb:35:
                    68:62:98:6b:15:50:2e:77:8c:3e:27:cf:1b:04:db:
                    dd:2c:70:70:e3:6d:6e:2f:ec:66:0d:4d:0e:2e:ee:
                    eb:2b:60:bc:99:cc:ce:44:b7:4f:d0:a1:b1:e2:ec:
                    07:91:3d:8b:a8:88:5e:77:d5:0c:08:10:67:b8:c4:
                    90:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BD:C4:31:FC:51:1B:DA:41:4D:2E:06:C3:2B:35:9A:27:0F:92:EC
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/9E109BBCCEB411F188CAB7EBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:62:1f:2f:00:aa:8f:ef:f3:94:55:69:3c:70:71:6a:db:b9:
         3f:c6:1c:c3:29:80:f4:a9:fd:a9:ec:73:b1:0c:b2:9e:76:37:
         73:4b:1b:89:d1:26:7b:32:2c:e6:e6:40:9d:71:b8:b3:2d:b0:
         39:96:56:5b:a1:45:bb:7a:3a:6b:65:3f:b1:49:60:3b:6c:cb:
         a1:90:40:e8:eb:75:d2:83:25:67:49:1c:58:c6:45:cb:d5:91:
         88:16:22:5e:6b:70:88:01:c8:15:59:b1:0c:92:ae:0e:46:6c:
         1e:cf:6c:82:ef:68:30:c4:91:b3:a5:4e:6d:c0:27:68:53:ce:
         35:31:78:d7:f8:32:b4:b6:5e:21:54:f1:e7:65:f6:56:fd:53:
         f9:68:e3:57:87:86:7a:2a:45:b8:e7:23:14:e1:0c:cc:3a:7a:
         75:8a:10:f8:7f:45:33:36:b9:ae:fd:36:63:7c:e8:4e:b3:e8:
         9a:6f:fe:58:61:f9:fe:fe:34:63:aa:16:3e:f4:f4:f8:0e:37:
         69:46:2e:3e:1c:6d:9e:fd:e1:18:22:14:30:d9:2e:5e:45:bc:
         ef:23:1c:e2:37:69:04:39:01:e2:df:71:35:c3:c1:fc:ae:71:
         51:ab:69:f3:ef:0b:d3:64:08:e2:65:36:37:19:c6:ab:77:11:
         c0:be:45:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----