Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B6F43CA09AA911F0A1414D9FDAE4EC9C.roa
File:                     B6F43CA09AA911F0A1414D9FDAE4EC9C.roa (raw, json)
Hash identifier:          HzNhDkiE6CS8hUdL7d6S1ST3Ooxhk62sfeXLeIhmT14=
Subject key identifier:   6D:C0:54:E5:E7:6A:D8:BC:88:8D:4F:5C:9C:B0:BC:CE:7C:1D:FF:D0
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0EA7
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B6F43CA09AA911F0A1414D9FDAE4EC9C.roa
Signing time:             Fri 26 Sep 2025 07:23:36 +0000
ROA not before:           Fri 26 Sep 2025 07:23:31 +0000
ROA not after:            Fri 25 Sep 2026 07:23:31 +0000
asID:                     9009
IP address blocks:        102.135.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3751 (0xea7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Sep 26 07:23:31 2025 GMT
            Not After : Sep 25 07:23:31 2026 GMT
        Subject: CN=68d63f78-8637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7e:de:e6:4e:70:e5:78:e5:ea:a7:98:08:ef:
                    88:55:33:39:7a:2f:70:8f:c6:c8:6e:c1:55:1f:f9:
                    bd:8d:f4:09:69:5e:e7:a4:c5:3e:08:bf:ef:0f:44:
                    2d:6e:1d:7a:8f:4f:ea:21:c1:d2:fd:e9:f0:a6:8a:
                    77:c4:ba:f4:36:46:bf:2f:7e:14:0b:b0:48:b3:d9:
                    56:d5:a2:9d:e3:03:8a:95:63:a6:d0:7a:fc:e1:2a:
                    72:6a:01:33:bf:6a:9c:59:a4:41:a3:89:c1:58:81:
                    ab:13:f7:33:2c:5a:b9:16:a4:22:bc:c3:25:ea:bf:
                    22:84:03:da:e3:3a:b0:b1:83:d3:00:77:11:a9:e7:
                    b0:17:f6:6b:fe:66:b6:85:a5:2d:b2:ba:3e:98:81:
                    02:85:c1:82:e4:83:d1:d0:e0:3d:5c:30:f0:e1:d3:
                    61:b7:a6:ef:f8:a0:da:dd:ea:0a:79:f4:05:cf:9d:
                    8f:5a:d6:97:f3:66:61:32:f0:7b:a1:9c:06:ff:ee:
                    ce:ec:11:5f:f9:73:dc:f1:0c:40:8b:e7:68:b3:96:
                    3f:be:46:2d:ae:45:30:82:6f:2b:4e:1f:42:fa:87:
                    0f:e6:79:95:be:26:2d:3b:15:fd:84:ac:ac:4f:26:
                    51:05:a3:82:23:d0:95:a3:45:ab:d8:1a:d0:bd:aa:
                    62:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C0:54:E5:E7:6A:D8:BC:88:8D:4F:5C:9C:B0:BC:CE:7C:1D:FF:D0
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B6F43CA09AA911F0A1414D9FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:8c:63:06:f5:b6:e1:9b:1b:e6:8a:42:7d:8b:87:ff:ad:d7:
         4c:ba:bc:27:3f:8d:d5:08:c8:7f:0b:34:04:e9:7f:5c:a5:ce:
         1e:c1:6d:a7:45:31:06:2c:ee:9f:13:f7:64:34:14:9a:ad:2b:
         42:ce:20:1c:af:da:2b:2b:ea:14:23:b0:cc:77:1d:2e:cc:28:
         ed:d1:39:c1:ea:85:e9:07:0c:df:8a:a3:1a:6f:5b:cc:9f:e0:
         c0:66:82:e7:45:ed:77:4f:04:70:0b:85:19:37:9c:f0:25:d5:
         ad:49:78:3c:23:e3:a8:26:ce:85:7c:e8:8b:4d:eb:4d:5d:29:
         ca:0f:51:6e:49:ea:5f:a2:8b:0d:a7:d8:ae:3e:08:d4:42:e7:
         d2:dd:3e:2c:aa:c9:c6:22:9c:1c:cf:db:7c:a4:33:7e:c0:c5:
         95:9d:d1:2a:52:bf:c5:48:58:e5:e2:86:ab:3e:14:60:1e:37:
         2b:24:23:3f:d1:52:0d:b4:2a:15:8c:3d:34:69:ce:11:50:23:
         7c:3d:73:22:b2:4b:0a:42:2d:8a:8e:c4:a5:0e:fc:5a:b3:8e:
         db:69:d0:df:b8:53:2e:a3:df:53:92:27:17:9a:fe:a7:c3:e9:
         3a:6c:cf:21:f0:ae:ff:c9:9d:c7:2c:ff:94:eb:24:e3:14:b3:
         67:0d:37:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:37 2025 by rpki-client