Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/ADD5CC748A5511F0A5D854A8DAE4EC9C.roa
File:                     ADD5CC748A5511F0A5D854A8DAE4EC9C.roa (raw, json)
Hash identifier:          JL7TelDtQ3RsAiZlv8YlmY+7fgPr+8YYgo4mOOa8O2M=
Subject key identifier:   51:9E:39:07:C1:39:14:AE:36:28:1D:18:D3:A1:CB:68:7B:59:2E:BA
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0DD7
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/ADD5CC748A5511F0A5D854A8DAE4EC9C.roa
Signing time:             Fri 05 Sep 2025 12:41:44 +0000
ROA not before:           Fri 05 Sep 2025 12:41:40 +0000
ROA not after:            Sat 05 Sep 2026 12:41:40 +0000
asID:                     208185
IP address blocks:        102.135.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Sep 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3543 (0xdd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Sep  5 12:41:40 2025 GMT
            Not After : Sep  5 12:41:40 2026 GMT
        Subject: CN=68bada88-c4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2c:cd:82:b9:74:46:75:90:87:45:26:bb:70:
                    5d:0d:9c:f6:35:f2:68:5c:af:43:86:29:d7:e3:77:
                    f9:4a:e5:83:96:27:c1:a7:f6:14:6c:f8:f0:8a:f7:
                    ae:72:4e:c1:55:26:5d:e4:08:a2:06:c8:d4:d8:fa:
                    33:e8:a2:e5:4d:6c:fb:61:f3:eb:c2:5b:68:83:af:
                    3b:a7:fd:50:45:18:fa:0d:b5:67:9b:46:02:c9:13:
                    2f:b7:21:c1:bb:8a:5c:b3:27:aa:96:0e:fa:18:36:
                    d6:37:e4:b2:8a:dc:07:c0:32:c7:c6:72:0b:02:77:
                    e0:e5:4e:fd:20:2b:ed:c8:d4:4b:70:59:1f:d0:26:
                    5d:85:8d:da:59:2c:27:67:d5:3b:ef:f4:30:26:c0:
                    c8:06:34:37:5b:e5:63:9d:9f:e6:30:5c:d6:f3:40:
                    64:f4:c6:20:48:63:39:c3:fe:4d:5d:10:1f:0c:b7:
                    6b:73:d5:55:52:ab:38:3b:8e:db:08:90:ff:81:99:
                    f1:af:71:3d:ad:9a:86:d1:65:fc:cd:32:79:8f:89:
                    85:ab:86:c8:ce:05:7d:3b:3d:af:30:32:d3:e6:b1:
                    a9:50:b6:92:4a:70:24:98:53:c1:ae:78:1b:02:89:
                    d6:2d:68:0f:bb:c9:30:0a:ad:13:b2:f5:f8:42:ee:
                    5c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9E:39:07:C1:39:14:AE:36:28:1D:18:D3:A1:CB:68:7B:59:2E:BA
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/ADD5CC748A5511F0A5D854A8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:2a:cd:61:a3:65:3e:2b:c7:c8:9a:f3:cb:27:29:5b:5c:65:
         6e:c1:d3:7e:93:1b:a5:ce:38:9d:57:98:78:8a:82:2f:57:c8:
         db:47:30:7f:df:98:f7:7e:f1:10:25:da:47:a9:70:8e:53:63:
         7f:bf:59:0d:17:3b:31:b7:9f:c6:60:ca:81:3d:3f:31:ba:12:
         ad:4c:a3:58:24:d4:80:2d:8a:d7:87:6d:c1:58:dc:ea:11:97:
         cf:4f:7e:ce:90:ca:72:30:44:71:d4:26:f7:b9:8a:52:6e:60:
         a1:eb:89:ae:39:88:56:75:6c:59:81:41:c0:73:dc:e0:d8:59:
         88:36:f2:fd:5d:bb:ca:68:c0:50:af:e1:ce:67:51:92:7e:13:
         d6:8d:c6:36:ea:34:3e:e1:51:d7:fb:b0:40:a1:6d:5e:a9:78:
         63:15:08:a5:af:c8:3e:70:98:06:d4:50:74:fc:fb:0e:65:70:
         aa:19:c4:8a:01:1b:82:23:ae:cc:24:ca:34:de:9e:c1:18:36:
         da:0b:31:b9:fc:13:a4:fc:5d:56:bb:39:57:dd:d0:2a:ee:82:
         89:28:25:03:a0:ed:cc:9b:95:73:ea:c1:24:1d:0b:78:29:92:
         90:6f:76:e8:69:76:8b:28:68:1c:81:84:8c:73:22:a8:1f:1b:
         32:dc:2a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 08:54:50 2025 by rpki-client