Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EAAC6AA65BFE11F1AA8BBEDCCE1D38B0.roa
File:                     EAAC6AA65BFE11F1AA8BBEDCCE1D38B0.roa (raw, json)
Hash identifier:          KIefoLyup5Spdo+NdTjYu7QSJJ0/d+i12yc10Ybbpi0=
Subject key identifier:   FC:BB:F3:67:15:F9:40:B7:42:27:E7:03:24:F6:ED:49:E6:4F:40:6A
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       119F
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EAAC6AA65BFE11F1AA8BBEDCCE1D38B0.roa
Signing time:             Sat 30 May 2026 08:09:44 +0000
ROA not before:           Sat 30 May 2026 08:09:40 +0000
ROA not after:            Mon 31 May 2027 08:09:40 +0000
asID:                     208317
IP address blocks:        102.135.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Jun 2026 00:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4511 (0x119f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May 30 08:09:40 2026 GMT
            Not After : May 31 08:09:40 2027 GMT
        Subject: CN=6a1a9b48-2c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:d1:3b:a7:23:bd:c4:e2:70:19:4c:ea:39:
                    11:df:d5:94:0b:0e:47:d0:1c:81:79:5a:5f:3c:6b:
                    43:69:05:23:1b:7a:b9:d4:28:4f:de:7b:39:12:e6:
                    ea:85:e4:dd:a0:fc:13:4c:92:dc:d6:8d:d9:36:24:
                    01:e5:0d:41:12:15:7e:fd:c1:03:09:33:e8:f2:b7:
                    74:45:2b:3c:f4:89:36:6a:9b:76:cd:ea:3b:6b:3d:
                    b9:5d:19:e6:36:ae:e1:90:67:e1:46:67:f6:45:c1:
                    28:83:72:2e:a4:c0:6d:17:78:c6:37:5a:7b:47:04:
                    0d:6e:22:10:1d:dd:2d:8f:17:55:05:33:7b:39:99:
                    30:ad:60:5e:50:2c:9f:34:03:62:c2:60:28:94:03:
                    e2:d1:71:c9:9c:04:ee:c6:80:04:f5:dc:d6:4c:4e:
                    7a:50:d9:c2:ef:41:c9:d0:b4:3e:dc:12:cd:55:27:
                    a5:8d:cf:91:cf:34:38:7e:66:21:6d:d6:0c:53:4e:
                    ce:32:4d:cc:51:66:06:33:e6:3d:4e:44:62:8b:0a:
                    41:fd:fb:b6:38:1b:7e:be:c1:8a:19:db:91:bc:f4:
                    98:f4:20:6e:58:ca:cf:dc:66:4a:3b:f1:94:9b:b5:
                    25:bb:3a:64:db:44:5b:3b:db:68:9e:2b:07:8b:eb:
                    9c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BB:F3:67:15:F9:40:B7:42:27:E7:03:24:F6:ED:49:E6:4F:40:6A
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EAAC6AA65BFE11F1AA8BBEDCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:93:9e:83:01:e5:66:73:c0:59:e1:04:2d:6a:50:ee:28:e3:
         89:66:54:0d:56:23:4d:8a:be:92:7e:73:05:80:b3:a6:15:8c:
         b7:76:54:2c:28:52:6a:a6:4b:31:6b:e0:57:e5:87:25:a4:d1:
         13:99:1c:db:b6:3b:54:73:44:b8:7b:67:c6:23:ab:7b:41:37:
         ba:9b:d6:0e:0d:db:67:36:e5:69:ea:99:50:ee:ad:60:82:e8:
         02:e7:2c:fe:ed:be:50:88:f1:4e:ba:9f:bc:ad:16:5c:0b:6f:
         0d:2f:b2:3f:a6:69:f8:af:42:cf:b4:cc:7b:60:21:e1:10:33:
         89:dd:8d:ce:90:6e:09:e6:e0:df:58:4c:78:65:78:91:b4:3e:
         73:c8:18:87:4a:f5:79:73:8a:f1:0c:fb:49:34:75:c7:ff:58:
         8c:60:d8:87:c8:3f:6e:15:31:93:51:af:b1:f7:10:41:9b:1e:
         49:82:89:84:64:cd:85:c7:92:74:4f:9d:ef:48:97:16:05:5a:
         e6:f0:a8:9c:6c:45:04:f3:0d:e3:b1:21:4b:d1:cd:70:d3:cd:
         62:8a:18:aa:36:f7:6c:71:1b:0e:43:2c:c3:e6:ff:67:16:7d:
         12:bd:f9:cd:56:27:37:cb:36:17:84:d8:8e:ba:8a:12:9c:58:
         77:8d:ef:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 09:15:52 2026 by rpki-client