Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E9102BB8542111F1AFC091F7CE1D38B0.roa
File:                     E9102BB8542111F1AFC091F7CE1D38B0.roa (raw, json)
Hash identifier:          NzaTbKUUPhvw0gwKE+TlBdn02drJtb0IkZmI1gMvDgA=
Subject key identifier:   7A:2A:03:E8:CC:4A:8D:EA:7F:C7:BC:63:11:96:BF:AE:A8:57:28:A0
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1168
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E9102BB8542111F1AFC091F7CE1D38B0.roa
Signing time:             Wed 20 May 2026 08:00:05 +0000
ROA not before:           Wed 20 May 2026 08:00:00 +0000
ROA not after:            Thu 20 May 2027 08:00:00 +0000
asID:                     204872
IP address blocks:        196.251.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Jun 2026 02:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4456 (0x1168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May 20 08:00:00 2026 GMT
            Not After : May 20 08:00:00 2027 GMT
        Subject: CN=6a0d6a05-e94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:04:57:e7:fc:4f:5a:d7:a9:1c:a7:ff:e5:f1:
                    32:6c:e0:8c:ab:1a:84:e1:37:eb:89:26:10:bf:8a:
                    2a:b2:b1:c0:fd:d0:84:5a:27:4d:5f:49:05:6e:35:
                    6d:61:95:8d:7c:5a:1d:0a:fc:13:20:78:1b:1a:77:
                    71:1b:8d:91:72:f9:10:41:ef:89:93:1e:a7:82:70:
                    81:eb:ba:29:b9:09:2d:b0:08:16:34:14:99:a1:a9:
                    39:e3:1e:13:b1:aa:33:c9:b2:fb:33:34:f0:f1:97:
                    7b:f1:86:d6:1c:0e:61:ec:86:71:ca:7e:ad:2a:35:
                    f3:12:b9:72:71:8e:72:8e:b9:8b:1c:23:2b:3d:85:
                    41:ce:05:60:71:a9:dd:85:ac:a4:c7:06:e6:76:02:
                    99:d2:b1:e3:1c:04:ae:f7:e3:7d:42:e5:c3:04:df:
                    98:05:9d:b8:d6:5f:0f:20:90:e8:9d:6e:6d:45:78:
                    e3:fa:b3:54:92:28:b1:0e:eb:f9:e7:c9:f9:72:17:
                    2a:6a:f6:38:06:72:fa:42:8e:27:9f:05:93:9f:41:
                    ed:01:6e:a9:f8:a1:a8:08:a3:a1:d0:74:e8:b1:99:
                    a6:a0:6f:52:12:86:76:4d:cb:bf:32:49:e2:56:c6:
                    0d:31:e7:60:91:42:f8:d0:19:5a:b4:02:97:4f:72:
                    04:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2A:03:E8:CC:4A:8D:EA:7F:C7:BC:63:11:96:BF:AE:A8:57:28:A0
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E9102BB8542111F1AFC091F7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:92:17:2d:6a:ac:48:b4:08:60:cf:e2:0f:66:c4:19:eb:4b:
         85:6a:10:26:8f:3b:c6:a8:db:4c:5b:c9:4b:34:86:1f:13:cb:
         32:d4:49:b7:47:98:c4:39:0a:ca:ba:1b:6b:8a:d9:a9:7d:a9:
         c0:cb:69:36:b4:27:8c:97:72:c8:9d:b7:a5:47:16:49:ff:1b:
         26:ea:16:68:6e:be:bd:c8:db:f4:6b:db:dc:25:fd:dd:b8:f5:
         49:2c:6a:2f:c9:36:24:54:91:6c:61:3c:62:52:54:4c:68:03:
         e8:c8:91:72:a7:0d:76:a0:ba:cc:62:21:0b:04:45:ce:07:9c:
         87:98:00:2a:b6:99:c6:6b:e8:c0:7f:5f:42:5b:f7:b8:bb:70:
         48:09:ac:99:21:50:db:47:9a:c0:39:0f:b0:f5:36:c9:51:a4:
         ee:58:a2:bc:00:af:e3:1c:42:c0:79:f7:42:03:11:7c:78:0d:
         66:0a:32:93:7d:44:c9:77:44:e8:ab:53:f1:6f:5e:b0:12:0c:
         d3:92:d2:50:2b:45:c1:33:33:e3:51:78:f0:c0:d8:28:d9:de:
         bd:40:d2:2c:11:43:ee:f9:de:b9:86:5a:63:d9:b3:66:64:4c:
         1a:d3:f8:57:5f:ad:15:bc:b1:b5:19:e8:ff:c6:9f:cd:eb:eb:
         76:70:c9:53
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEWgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNjA1MjAwODAwMDBaFw0yNzA1MjAwODAwMDBaMBgxFjAU
BgNVBAMTDTZhMGQ2YTA1LWU5NGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDABFfn/E9a16kcp//l8TJs4IyrGoThN+uJJhC/iiqyscD90IRaJ01fSQVu
NW1hlY18Wh0K/BMgeBsad3EbjZFy+RBB74mTHqeCcIHruim5CS2wCBY0FJmhqTnj
HhOxqjPJsvszNPDxl3vxhtYcDmHshnHKfq0qNfMSuXJxjnKOuYscIys9hUHOBWBx
qd2FrKTHBuZ2ApnSseMcBK73431C5cME35gFnbjWXw8gkOidbm1FeOP6s1SSKLEO
6/nnyflyFypq9jgGcvpCjiefBZOfQe0Bbqn4oagIo6HQdOixmaagb1IShnZNy78y
SeJWxg0x52CRQvjQGVq0ApdPcgTxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUeioD
6MxKjep/x7xjEZa/rqhXKKAwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0U5MTAyQkI4NTQyMTExRjFBRkMwOTFGN0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+3YwDQYJKoZIhvcNAQEL
BQADggEBALWSFy1qrEi0CGDP4g9mxBnrS4VqECaPO8ao20xbyUs0hh8TyzLUSbdH
mMQ5Csq6G2uK2al9qcDLaTa0J4yXcsidt6VHFkn/GybqFmhuvr3I2/Rr29wl/d24
9Uksai/JNiRUkWxhPGJSVExoA+jIkXKnDXagusxiIQsERc4HnIeYACq2mcZr6MB/
X0Jb97i7cEgJrJkhUNtHmsA5D7D1NslRpO5YorwAr+McQsB590IDEXx4DWYKMpN9
RMl3ROirU/FvXrASDNOS0lArRcEzM+NRePDA2CjZ3r1A0iwRQ+753rmGWmPZs2Zk
TBrT+FdfrRW8sbUZ6P/Gn83r63ZwyVM=
-----END CERTIFICATE-----
Generated at Sat Jun 6 02:28:24 2026 by rpki-client