Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C9F39F269AA911F0A42B8F9FDAE4EC9C.roa
File:                     C9F39F269AA911F0A42B8F9FDAE4EC9C.roa (raw, json)
Hash identifier:          RrQrKOI1KcFW2cTGuhpwUHC73p+ooHsopOk8TBkqXQg=
Subject key identifier:   B5:A3:1F:5E:CD:0A:A4:B0:45:B7:BA:B2:A1:49:3C:6E:17:F1:AE:FE
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0EA9
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C9F39F269AA911F0A42B8F9FDAE4EC9C.roa
Signing time:             Fri 26 Sep 2025 07:24:08 +0000
ROA not before:           Fri 26 Sep 2025 07:24:03 +0000
ROA not after:            Fri 25 Sep 2026 07:24:03 +0000
asID:                     9009
IP address blocks:        102.135.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3753 (0xea9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Sep 26 07:24:03 2025 GMT
            Not After : Sep 25 07:24:03 2026 GMT
        Subject: CN=68d63f98-5df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9f:3d:5b:97:91:50:0a:b3:58:bd:f2:7a:92:
                    67:96:47:ff:86:64:74:0f:f4:fc:10:ae:de:a4:31:
                    b9:62:ca:49:d7:51:bd:51:14:5e:dc:6a:ac:e2:3f:
                    9f:21:16:b4:be:12:53:36:43:cd:8c:b5:4c:df:b9:
                    cb:7c:c2:76:75:cb:df:28:16:cf:ad:50:b5:12:10:
                    bc:d6:c8:11:ab:37:3d:b3:44:c5:62:e3:03:32:2b:
                    f0:6b:9d:fd:7f:32:fe:d0:a9:87:4f:62:f9:90:0b:
                    56:cb:e9:54:7e:8f:86:0a:03:64:28:1e:18:0c:6b:
                    11:d3:ad:6a:4b:02:47:0e:02:b3:50:21:47:ea:ff:
                    6f:7b:4c:3b:69:1a:01:df:e5:4e:1f:2a:f7:cb:ed:
                    d2:ff:73:fe:a4:e3:50:02:b0:f0:14:bd:d8:7a:46:
                    6d:12:09:eb:b3:2f:34:af:fc:53:b2:c9:5b:1a:75:
                    4c:2e:3f:92:03:ac:20:ad:bc:ef:e0:0c:76:13:57:
                    cc:10:11:26:06:93:3b:63:ed:48:de:5b:9e:4b:ea:
                    3e:ea:2e:28:66:b3:5a:b8:29:5b:d7:ac:f5:21:cb:
                    13:dc:85:7b:3b:b9:14:97:63:c4:0b:b3:28:db:d4:
                    4d:37:04:c4:b3:e1:a5:dc:ec:ee:fd:2a:95:a4:f3:
                    71:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A3:1F:5E:CD:0A:A4:B0:45:B7:BA:B2:A1:49:3C:6E:17:F1:AE:FE
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C9F39F269AA911F0A42B8F9FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:fa:e3:72:1b:8c:c4:10:2d:c3:a0:e6:7a:29:ff:ea:73:b6:
         ef:81:0c:ec:7e:c2:33:45:39:f2:36:43:73:cd:c6:e6:56:38:
         8d:78:cc:2b:fe:34:61:df:76:8e:b8:9e:1d:d9:5c:86:87:0a:
         53:e6:70:e3:bb:db:06:70:18:0c:2b:d7:1f:ed:69:fd:37:ec:
         25:7e:bb:da:19:4c:6f:c0:f9:94:14:9b:8d:d4:82:8a:c9:dd:
         25:32:c1:0b:24:67:3b:73:7d:fc:69:d5:9e:af:4d:8c:10:12:
         c8:9b:46:18:e8:8e:07:92:1e:07:7c:a7:c6:0f:11:a7:88:f2:
         89:9b:90:5c:02:bf:72:8f:17:36:a4:94:97:2a:2d:bb:7a:d0:
         16:0b:cb:bf:65:65:ff:ab:3c:e2:55:5b:20:26:c1:7c:fe:55:
         80:7d:1a:64:ab:62:f6:9f:07:81:f8:ba:d4:01:ab:ff:96:e8:
         1f:ae:88:fb:3d:f7:6e:8a:a9:ff:44:8a:e1:30:86:8d:8b:ab:
         6a:9b:d9:03:ce:ce:d4:64:10:44:51:0b:e3:92:dd:b4:57:58:
         f3:a6:56:bd:b4:e6:ec:4e:b9:a4:d7:af:8b:48:4b:83:39:2c:
         dd:c9:e6:d6:7d:92:12:76:e7:1a:31:a4:5c:67:cf:4f:de:f3:
         47:a6:7c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:41 2025 by rpki-client