Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/E631424846C511F0802C0082DAE4EC9C.roa
File:                     E631424846C511F0802C0082DAE4EC9C.roa (raw, json)
Hash identifier:          XDAB5XeuUP/8wavFXKpAQBTJhSuFwoK6JGeU6nezG7o=
Subject key identifier:   99:06:52:B9:2A:01:B7:DB:08:38:A3:2C:E8:4B:54:AA:8E:0E:61:C5
Certificate issuer:       /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial:       0D4C
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/E631424846C511F0802C0082DAE4EC9C.roa
Signing time:             Wed 11 Jun 2025 13:13:44 +0000
ROA not before:           Tue 24 Jun 2025 13:13:39 +0000
ROA not after:            Fri 18 Oct 2030 13:13:39 +0000
asID:                     206283
IP address blocks:        41.193.254.0/23 maxlen: 24
Validation:               Failed, certificate is not yet valid

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3404 (0xd4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
        Validity
            Not Before: Jun 24 13:13:39 2025 GMT
            Not After : Oct 18 13:13:39 2030 GMT
        Subject: CN=68498108-b0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0b:84:9b:87:74:06:54:00:7b:d8:61:db:37:
                    d8:cd:c9:42:d6:f8:9b:46:60:93:19:f6:04:43:e5:
                    62:43:07:56:49:bd:2d:d2:80:7d:04:f7:20:dd:b9:
                    7c:75:dd:ba:ed:45:8d:09:07:51:c9:c5:10:43:2c:
                    f7:3b:3f:a4:f3:44:f6:55:7e:87:82:1e:6b:c7:2d:
                    a2:1d:87:7a:b7:3f:87:47:58:fb:0a:20:09:04:55:
                    5e:5c:63:c9:50:a3:4e:aa:a6:f4:b9:a4:c3:33:09:
                    19:54:b1:a4:6d:63:03:d4:46:01:da:44:f9:25:cd:
                    0d:7c:94:35:f3:a3:00:97:f0:90:4b:40:b6:84:51:
                    2d:32:ed:ff:a7:c4:9d:ba:3e:5c:f0:f3:47:e6:a5:
                    93:95:cc:e4:3d:d9:6e:e5:4e:d5:9e:ef:6b:b0:53:
                    20:6c:9e:83:02:47:35:9d:85:d7:9f:0a:23:53:d3:
                    84:fd:94:da:0a:49:df:ba:96:b6:b0:70:35:fc:5d:
                    20:f3:3e:fe:d7:96:11:ea:5e:67:2a:80:9a:3b:6e:
                    94:de:9b:f2:b0:20:76:30:9e:8b:c0:ad:34:10:0c:
                    c1:dc:52:be:2f:89:70:fd:45:a8:7e:55:0c:81:ae:
                    5f:e9:0a:5e:01:bd:00:6b:64:ed:ba:ec:c4:38:3f:
                    8c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:06:52:B9:2A:01:B7:DB:08:38:A3:2C:E8:4B:54:AA:8E:0E:61:C5
            X509v3 Authority Key Identifier:
                keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/E631424846C511F0802C0082DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.193.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:a5:a6:93:36:b3:23:d3:66:1c:ea:4e:25:4a:33:0e:9b:7a:
         23:f0:4a:3e:e4:f5:a7:89:26:3c:ac:02:ea:cc:9c:70:59:87:
         aa:ed:15:c5:27:c1:e5:db:dd:4c:a4:9c:55:7b:ec:bc:20:4a:
         c3:3d:f8:f4:b8:2a:9c:92:a0:2d:14:da:4e:42:e5:f7:fa:f3:
         67:67:db:21:5a:47:92:7c:da:70:d3:fd:49:7e:6b:94:f0:00:
         1b:eb:20:00:08:66:ad:53:87:2a:ea:d4:dd:15:92:16:b3:58:
         62:3a:c2:c3:e9:17:6a:f0:3c:7a:cd:13:3e:e6:af:b7:af:9b:
         95:b6:90:9b:1f:ba:40:51:83:f9:e8:e2:ed:08:53:15:42:22:
         56:70:66:d8:2e:c4:78:95:69:97:51:50:25:17:75:e6:69:c7:
         91:b4:e2:c3:1c:f0:d8:03:89:73:61:83:55:a9:71:d4:8e:4f:
         41:fb:3f:f1:ab:19:81:89:07:7a:3e:6d:7d:ba:dc:e5:03:a4:
         b3:09:91:f0:7a:e6:b5:82:09:6f:39:93:b4:fd:3d:53:46:29:
         81:1a:8e:98:bd:07:99:22:d0:71:74:d3:ee:a4:3e:b0:78:a7:
         4b:18:16:e3:c8:b6:dc:73:ce:e1:11:1d:90:98:97:dc:50:bb:
         ce:a4:c1:ed
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDUwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkUzOUVBRjExMC8GA1UEBRMoQTEzNjhFOEJGQzgwRjRFQTVBQjA5NzE2RDI1NzIx
MTkzNjE4Mjg1MTAeFw0yNTA2MjQxMzEzMzlaFw0zMDEwMTgxMzEzMzlaMBgxFjAU
BgNVBAMTDTY4NDk4MTA4LWIwZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/C4Sbh3QGVAB72GHbN9jNyULW+JtGYJMZ9gRD5WJDB1ZJvS3SgH0E9yDd
uXx13brtRY0JB1HJxRBDLPc7P6TzRPZVfoeCHmvHLaIdh3q3P4dHWPsKIAkEVV5c
Y8lQo06qpvS5pMMzCRlUsaRtYwPURgHaRPklzQ18lDXzowCX8JBLQLaEUS0y7f+n
xJ26Plzw80fmpZOVzOQ92W7lTtWe72uwUyBsnoMCRzWdhdefCiNT04T9lNoKSd+6
lrawcDX8XSDzPv7XlhHqXmcqgJo7bpTem/KwIHYwnovArTQQDMHcUr4viXD9Rah+
VQyBrl/pCl4BvQBrZO267MQ4P4w1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUmQZS
uSoBt9sIOKMs6EtUqo4OYcUwHwYDVR0jBBgwFoAUoTaOi/yA9OpasJcW0lchGTYY
KFEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4QUVBMjI4L29UYU9p
X3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29UYU9pX3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4
QUVBMjI4L0U2MzE0MjQ4NDZDNTExRjA4MDJDMDA4MkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEpwf4wDQYJKoZIhvcNAQEL
BQADggEBACGlppM2syPTZhzqTiVKMw6beiPwSj7k9aeJJjysAurMnHBZh6rtFcUn
weXb3UyknFV77LwgSsM9+PS4KpySoC0U2k5C5ff682dn2yFaR5J82nDT/Ul+a5Tw
ABvrIAAIZq1Thyrq1N0VkhazWGI6wsPpF2rwPHrNEz7mr7evm5W2kJsfukBRg/no
4u0IUxVCIlZwZtguxHiVaZdRUCUXdeZpx5G04sMc8NgDiXNhg1WpcdSOT0H7P/Gr
GYGJB3o+bX263OUDpLMJkfB65rWCCW85k7T9PVNGKYEajpi9B5ki0HF00+6kPrB4
p0sYFuPIttxzzuERHZCYl9xQu86kwe0=
-----END CERTIFICATE-----
Generated at Sun Jun 15 22:18:00 2025 by rpki-client