Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/23070A7E121B11F1B45915DFDAE4EC9C.roa
File:                     23070A7E121B11F1B45915DFDAE4EC9C.roa (raw, json)
Hash identifier:          FW0xV5dSVTfO+qRnU8OOUQT0y4A6Qy6MVyFR6xoDLa8=
Subject key identifier:   44:0B:6D:15:BD:11:1C:FF:E2:46:0D:3F:52:29:2A:8E:29:AF:70:8E
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1066
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/23070A7E121B11F1B45915DFDAE4EC9C.roa
Signing time:             Wed 25 Feb 2026 07:25:19 +0000
ROA not before:           Wed 25 Feb 2026 07:25:14 +0000
ROA not after:            Thu 25 Feb 2027 07:25:14 +0000
asID:                     29802
IP address blocks:        102.135.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4198 (0x1066)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Feb 25 07:25:14 2026 GMT
            Not After : Feb 25 07:25:14 2027 GMT
        Subject: CN=699ea3df-c695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:6e:89:b2:bf:81:73:b2:2c:f6:d7:4c:5d:
                    fc:f4:80:13:c6:1c:2c:28:dd:3d:8b:32:c9:1c:7d:
                    43:7d:d3:d0:46:1f:64:8d:fa:08:54:13:e2:c7:dd:
                    3e:ff:3d:65:3a:50:fa:86:dd:83:f3:f5:c7:d5:87:
                    83:5a:9f:87:5d:83:78:68:f9:d3:d7:28:6c:6b:2a:
                    6d:41:73:0e:15:3b:a3:b9:85:17:38:e9:87:af:6e:
                    06:94:cf:eb:68:fc:e5:f5:b1:0a:da:66:90:79:a9:
                    48:3a:b6:07:bc:6a:0a:28:84:d2:bb:54:fe:36:bb:
                    b5:fb:96:5e:39:49:e4:06:c2:02:3e:9d:c9:9e:1e:
                    8d:03:16:51:5b:0d:00:77:2c:01:c0:fd:a7:3c:49:
                    d6:8a:72:24:b9:13:15:ac:37:41:61:92:23:30:45:
                    2a:18:40:0c:58:e3:b9:c2:b7:a3:45:64:e7:8d:a9:
                    9f:04:e8:c8:13:3e:de:0f:e2:42:62:cf:de:76:84:
                    62:ce:d2:03:fc:e5:a5:77:5e:f8:fe:d0:f5:19:bc:
                    42:c9:71:7e:1e:dc:02:4f:f0:a6:56:43:69:6d:cf:
                    c2:1b:ff:ad:3a:d8:e3:ce:47:63:1c:e3:f9:e7:7d:
                    ee:8f:41:67:36:3e:86:1e:0f:1d:a0:69:8d:03:8a:
                    33:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0B:6D:15:BD:11:1C:FF:E2:46:0D:3F:52:29:2A:8E:29:AF:70:8E
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/23070A7E121B11F1B45915DFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:42:38:b3:4b:8f:d8:28:02:77:4e:eb:4c:b0:48:be:5c:02:
         a8:8e:2d:61:29:27:0c:22:0a:b8:92:cd:c1:7d:72:4c:72:2a:
         0d:59:c0:42:24:7a:56:24:f9:44:72:bf:44:13:9b:29:b9:42:
         7a:82:8c:5c:92:eb:7c:41:21:4b:08:1f:ac:34:b2:84:43:f1:
         c6:80:60:90:34:75:11:25:a4:9d:cb:7c:b8:62:a0:cb:e0:32:
         03:1e:7f:1c:95:b6:3f:57:c6:04:2a:40:5c:98:ae:cc:91:57:
         11:72:fe:ce:b5:4c:5e:d4:4b:c9:5f:6f:07:91:5d:fc:e5:7e:
         9b:b0:7f:b2:7c:f3:27:b7:c2:bb:ca:14:d4:83:47:94:5a:da:
         25:9d:4f:cf:60:69:93:0c:80:dc:38:b9:2c:26:9b:f4:ca:da:
         23:4a:db:b4:cd:ec:ca:41:98:af:57:5d:c6:2f:30:9f:fa:d6:
         28:46:88:9f:d5:e6:5b:6e:1d:6e:b5:7f:6e:c0:39:bc:07:b5:
         7a:f9:8b:63:a8:06:68:bf:eb:9a:79:5d:03:1f:dd:31:40:95:
         65:1c:ec:0a:95:c2:f7:c0:9b:17:8a:9f:f7:ac:f9:a2:25:e7:
         34:fd:ec:02:52:79:2f:a8:b9:e1:2f:71:2e:71:91:c6:69:4d:
         23:fe:69:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:19 2026 by rpki-client