Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/13B3AF1E485411F0A91362B1DAE4EC9C.roa
File:                     13B3AF1E485411F0A91362B1DAE4EC9C.roa (raw, json)
Hash identifier:          7R4VBZyINuq9BCx1MHR5HkLq8iE6g/LVKuUynBNNk9w=
Subject key identifier:   C8:0D:25:6C:0B:DA:6C:E6:E5:22:CB:17:29:40:49:77:76:C2:DE:32
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0B36
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/13B3AF1E485411F0A91362B1DAE4EC9C.roa
Signing time:             Fri 13 Jun 2025 12:44:00 +0000
ROA not before:           Fri 13 Jun 2025 12:43:55 +0000
ROA not after:            Sat 13 Jun 2026 12:43:55 +0000
asID:                     208485
IP address blocks:        196.251.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2870 (0xb36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Jun 13 12:43:55 2025 GMT
            Not After : Jun 13 12:43:55 2026 GMT
        Subject: CN=684c1d10-97c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:32:1e:4f:c2:b7:1f:94:d9:7c:52:87:ed:31:
                    f2:8e:8c:65:d1:0f:33:eb:3f:87:cf:43:5c:e3:bc:
                    25:af:be:cc:64:d2:6d:e3:a6:fe:9d:4a:9e:a4:d6:
                    d0:7e:c4:60:ac:52:e7:53:08:2c:63:e9:d6:58:c5:
                    71:1f:8a:c5:86:3a:09:da:1a:35:a6:c0:fb:72:75:
                    04:e2:0d:1e:a0:c2:80:f2:fb:73:3b:6e:65:cd:87:
                    8e:79:14:03:7c:57:d0:20:f0:34:24:fb:96:26:6f:
                    42:5f:7d:ce:ca:0b:b8:22:9a:93:82:a5:e9:79:1c:
                    4d:b7:6d:0d:e5:ff:3d:b5:51:6f:17:b2:b9:99:31:
                    b5:ce:40:f1:69:81:5c:4e:9e:d9:ec:88:e5:6b:9e:
                    c7:c6:fe:7c:ca:3c:9e:f3:e0:10:15:f3:db:2e:e8:
                    d0:2e:df:fb:f0:76:c4:ce:88:40:75:de:a7:c5:dd:
                    b9:b5:6e:95:31:92:76:2d:33:04:5e:47:9f:32:2d:
                    5a:ae:a1:66:d5:27:f6:5a:95:5b:48:03:82:49:4c:
                    c5:09:f4:0c:72:35:f2:e9:36:6f:f0:7a:fa:ab:ca:
                    e3:a8:70:cb:90:b0:7f:5f:88:5a:24:79:88:78:ce:
                    c1:92:15:0a:48:55:e2:df:90:f8:8a:5c:04:78:55:
                    4f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0D:25:6C:0B:DA:6C:E6:E5:22:CB:17:29:40:49:77:76:C2:DE:32
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/13B3AF1E485411F0A91362B1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:84:e9:14:75:f0:5d:74:75:4f:99:93:2c:77:e0:4b:44:73:
         43:66:9d:5b:e7:de:d5:5a:17:a0:d1:19:66:ea:03:d6:e7:fc:
         8e:81:2a:92:c4:cb:cc:3a:5d:a7:be:ac:fe:14:f3:50:7d:91:
         39:87:f1:2d:38:7f:00:2a:a6:f7:e6:5b:a1:d7:07:5c:09:8e:
         54:9a:31:2c:d3:ed:91:9b:a2:a5:66:83:d4:84:6e:e8:89:f4:
         25:a6:05:ec:ae:c2:25:93:e8:80:c5:13:16:dd:bd:37:c3:75:
         e3:e7:62:ce:d0:79:91:c5:59:83:4f:7c:b3:e2:30:05:0e:03:
         ff:f2:0a:2b:47:41:47:c9:a8:04:61:13:41:94:2a:bd:d4:43:
         63:ec:72:9e:af:c6:b1:0d:d8:8b:74:7e:f6:3a:bd:3a:e5:52:
         5b:1a:61:b2:99:0e:0b:8f:ee:59:13:02:40:f2:db:ec:7e:f7:
         d7:0b:02:2c:aa:a9:70:e7:04:39:c3:a3:b0:2a:17:b8:a4:fe:
         d5:4a:95:f1:6d:07:9b:50:6f:1b:4e:54:e6:e7:fa:98:e5:a7:
         91:5c:9e:8c:9c:89:f4:d6:ee:c6:d1:5c:fd:a1:7c:1b:26:29:
         71:81:c3:c1:29:55:4e:66:8a:98:fb:28:92:de:1e:b1:05:22:
         6d:2d:a2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:43:49 2025 by rpki-client