Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FDD58D7E8D7D11F0BB2967A0DAE4EC9C.roa
File:                     FDD58D7E8D7D11F0BB2967A0DAE4EC9C.roa (raw, json)
Hash identifier:          UZwFhyKkvYouN/9ofoWu50iQmQQEWDi+1XUgoWWoqIw=
Subject key identifier:   92:48:13:66:21:9A:67:01:86:A8:4C:D9:3A:E2:FE:D2:FC:89:2F:65
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0E17
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FDD58D7E8D7D11F0BB2967A0DAE4EC9C.roa
Signing time:             Tue 09 Sep 2025 13:07:52 +0000
ROA not before:           Tue 09 Sep 2025 13:07:47 +0000
ROA not after:            Sat 05 Sep 2026 13:07:47 +0000
asID:                     9009
IP address blocks:        102.135.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3607 (0xe17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Sep  9 13:07:47 2025 GMT
            Not After : Sep  5 13:07:47 2026 GMT
        Subject: CN=68c026a8-d606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:10:ea:03:6b:2a:37:d5:2e:e0:75:7f:d2:7c:
                    88:8c:1f:67:44:42:16:a9:ba:22:73:f1:96:bf:17:
                    ee:d7:31:0e:9d:97:d1:ad:a9:8e:0b:7f:de:9b:94:
                    22:8d:c3:54:ea:74:e2:bc:01:d7:e7:71:c5:01:63:
                    1c:f5:f0:67:db:16:9f:7b:d9:74:6d:f6:f8:5a:1a:
                    e6:45:c9:18:cb:89:51:3a:a7:4e:89:34:06:86:6f:
                    cf:75:03:de:05:60:a0:fe:11:1e:db:e2:9a:40:ac:
                    be:cf:d5:c8:7b:09:ef:e5:cf:25:96:ad:fc:e3:ca:
                    df:db:70:a2:a7:a8:39:56:1e:43:03:77:19:81:e2:
                    c5:13:36:c8:3e:da:bc:23:6c:dc:87:d2:82:02:95:
                    98:35:a5:f0:0b:a3:58:78:9c:2e:ad:bf:d0:bd:c1:
                    3d:f1:95:1c:db:d4:3a:2e:02:0d:48:fb:48:5a:d2:
                    e7:4c:e8:d2:03:05:b1:5c:af:1a:a6:76:99:36:ff:
                    3e:89:a8:46:cd:14:8d:65:cb:46:12:ef:4c:9d:7a:
                    55:ed:6c:8f:5e:3d:54:b5:92:ea:7c:71:a8:b2:de:
                    1f:e6:3c:92:36:53:c5:60:30:03:78:26:37:14:b2:
                    63:ea:f1:35:ce:25:1b:73:bc:2d:ea:2c:dc:b1:a2:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:48:13:66:21:9A:67:01:86:A8:4C:D9:3A:E2:FE:D2:FC:89:2F:65
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FDD58D7E8D7D11F0BB2967A0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:fe:89:ff:73:0e:d2:ab:d7:0c:c8:0a:c3:29:e6:31:ca:44:
         e3:44:8a:60:40:b6:83:08:d3:1b:47:5d:82:1d:76:01:77:cf:
         5b:d8:b0:44:b7:ae:0e:dd:88:e3:03:32:db:0f:d6:5f:31:ea:
         05:93:af:3f:00:5d:21:2f:e4:31:52:d5:53:91:b3:8f:20:5a:
         57:c0:7f:f9:80:8f:a9:62:50:ef:3e:ad:2e:fc:b6:af:c0:bf:
         fe:67:d9:2a:10:8f:4d:72:21:ba:13:be:fa:31:fc:7a:09:63:
         37:18:d8:aa:3b:99:f8:cb:41:82:6e:30:9b:05:62:9a:98:28:
         33:77:4b:00:35:81:2c:45:13:16:c1:14:cd:13:2b:b2:8b:aa:
         4f:12:e7:6d:dc:f4:ad:98:ec:1b:96:d4:0f:17:b9:6c:0d:ae:
         18:37:c0:ea:76:30:94:9b:b6:ce:9e:93:bd:e6:ea:78:91:ae:
         8b:62:2c:f7:38:4b:f5:f7:a8:ff:1f:63:7c:fe:0d:50:b7:62:
         e2:26:23:2c:1a:b2:18:3c:ba:63:c4:ed:16:d6:b9:bc:0c:ea:
         f2:a3:4e:78:8e:d5:d2:8f:f6:42:2f:3a:80:8e:ec:07:d9:0a:
         7e:f6:4d:8f:ca:b6:1c:ac:0f:85:f3:af:35:c4:b4:15:4b:5f:
         4f:cd:8c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:15:29 2025 by rpki-client