Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CD3DAA64542111F18A435DF7CE1D38B0.roa
File:                     CD3DAA64542111F18A435DF7CE1D38B0.roa (raw, json)
Hash identifier:          9JgeOhbQ30yhHOKV0+EwcgVz2g7MFFiYl918TVsHJ+I=
Subject key identifier:   63:03:07:18:AD:8B:79:57:88:B7:40:DF:04:47:8C:16:07:6A:51:C2
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1164
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CD3DAA64542111F18A435DF7CE1D38B0.roa
Signing time:             Wed 20 May 2026 07:59:18 +0000
ROA not before:           Wed 20 May 2026 07:59:14 +0000
ROA not after:            Thu 20 May 2027 07:59:14 +0000
asID:                     204868
IP address blocks:        102.135.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Jun 2026 02:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4452 (0x1164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May 20 07:59:14 2026 GMT
            Not After : May 20 07:59:14 2027 GMT
        Subject: CN=6a0d69d6-fdc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c1:62:ff:17:9e:92:a9:bd:05:ec:ed:32:26:
                    30:da:9d:91:46:d6:10:6f:17:80:c0:22:31:d8:2c:
                    fb:f6:5e:d3:d7:c0:f7:e4:13:28:64:af:fd:63:91:
                    17:cf:92:3e:fc:9d:d0:7e:ac:a6:7f:8e:e3:9e:e0:
                    c0:9f:4d:1b:b2:f1:73:23:a6:72:7a:68:f6:e8:be:
                    58:2f:af:2f:98:98:4c:11:2e:9f:77:49:b1:3f:7c:
                    98:d2:f2:c2:68:28:7a:23:be:df:c7:f1:8f:a5:96:
                    9d:40:35:49:24:0a:da:dd:8f:2a:17:ac:9d:56:27:
                    6d:09:c4:ab:cc:f3:f6:47:43:1e:4d:c8:0c:da:b1:
                    65:f5:ce:99:05:0f:5e:74:c7:d8:5f:64:2e:38:34:
                    dd:1f:78:c7:6b:b3:5a:e1:84:e6:c6:60:cb:5f:a1:
                    a4:81:c8:6b:91:93:55:20:2f:75:56:2d:e8:af:f7:
                    10:e7:76:41:84:46:14:cd:69:53:77:35:d3:f7:ff:
                    4c:7d:50:19:0d:d6:0e:d0:fa:c3:2a:b6:e9:bb:e5:
                    92:6b:17:ef:5e:ec:ce:93:1e:a0:74:07:1f:75:0b:
                    ad:b6:00:42:38:69:40:1a:ca:e6:d1:f5:33:fc:fc:
                    2f:ca:50:02:80:f9:bf:8c:4c:42:db:97:8f:2b:06:
                    7e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:03:07:18:AD:8B:79:57:88:B7:40:DF:04:47:8C:16:07:6A:51:C2
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/CD3DAA64542111F18A435DF7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:b6:cc:88:f7:de:c1:95:6f:b5:85:95:5f:b6:05:bf:e3:b2:
         20:19:53:ab:38:86:b9:f3:9b:a8:19:a5:6a:06:c2:ec:0b:1e:
         f7:3f:ef:e4:f7:96:79:7d:83:74:cf:5f:ad:ee:26:af:f9:67:
         23:d5:39:b4:2d:11:42:4d:e1:db:99:49:da:98:8b:f2:38:cc:
         19:5b:b2:8c:6a:0e:db:27:87:8e:f1:2b:35:d5:0e:63:1e:df:
         93:af:9a:79:35:11:36:55:98:d1:8e:49:83:de:b5:5e:bd:f5:
         b0:35:9a:a8:1a:21:51:ae:2c:4a:0c:b2:a8:35:dc:ed:e0:66:
         eb:67:c6:ef:0b:06:c2:d0:40:f4:37:ea:e0:ce:60:69:48:b8:
         22:36:b2:83:8a:67:9d:28:e2:25:a1:87:ae:9a:c5:b9:88:31:
         00:63:b8:7c:c2:76:68:21:29:42:54:27:04:80:2f:cd:27:b8:
         0d:04:7a:d7:3a:40:e8:5a:9c:1c:f9:5d:f3:73:21:04:1d:d7:
         94:75:dc:b3:b8:30:7a:e6:67:76:f6:8f:3f:e8:3d:db:fc:f8:
         de:4b:ba:8e:54:ab:fa:54:09:b4:9a:d9:50:d3:26:93:b9:57:
         7f:d6:4f:84:98:74:77:e7:0b:fa:e0:6b:94:62:b5:8a:b2:b7:
         6d:3a:ce:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:51 2026 by rpki-client