Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/456D5030B40811F09FE3ABE7DAE4EC9C.roa
File:                     456D5030B40811F09FE3ABE7DAE4EC9C.roa (raw, json)
Hash identifier:          QjP1GS355r5oFeakxAbFTxHfyHRgUZiZhQXbULLLDzc=
Subject key identifier:   0F:AC:AB:96:87:7D:FE:38:C6:EA:2E:6C:DD:AE:D5:9D:A0:D3:C8:4A
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0F4B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/456D5030B40811F09FE3ABE7DAE4EC9C.roa
Signing time:             Tue 28 Oct 2025 14:13:27 +0000
ROA not before:           Tue 28 Oct 2025 14:13:22 +0000
ROA not after:            Tue 27 Oct 2026 14:13:22 +0000
asID:                     213441
IP address blocks:        102.135.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3915 (0xf4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Oct 28 14:13:22 2025 GMT
            Not After : Oct 27 14:13:22 2026 GMT
        Subject: CN=6900cf87-3a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:13:34:28:ad:1c:06:25:91:a5:fc:38:7a:
                    75:25:07:22:ce:61:61:6b:6d:71:09:32:f8:19:7d:
                    46:47:c3:9f:19:ae:98:57:30:7d:33:31:a2:f9:87:
                    3d:fb:77:cc:57:0b:6a:c9:b8:b5:39:29:07:3e:a3:
                    5c:61:64:b3:29:38:c9:45:62:fd:c0:60:63:03:56:
                    67:bc:38:8d:4c:41:d3:05:0d:d2:bc:c9:b3:9c:1a:
                    04:c0:2d:a4:66:be:d4:bf:01:ef:d2:55:21:65:9e:
                    78:fb:00:d4:ae:d6:fd:d5:a8:89:88:97:9c:a8:95:
                    27:9c:e0:03:20:75:0e:0f:58:d0:90:e5:26:23:0f:
                    50:17:fb:d7:5c:b8:61:f8:79:1c:1b:da:b3:9e:c6:
                    40:90:bb:f6:c2:dd:e2:a5:83:01:61:26:2d:b7:09:
                    38:6c:c5:e9:99:78:f6:9b:29:63:4d:db:52:1b:2d:
                    36:49:79:86:16:a4:50:60:7c:68:c6:7c:1f:13:de:
                    fe:1e:ba:fa:5c:55:da:1c:3b:c1:90:b5:b3:86:8f:
                    2d:04:df:82:af:f6:16:80:e7:6a:e8:73:c1:52:ed:
                    27:43:87:1d:17:28:66:26:f6:4d:7e:1d:2a:13:de:
                    af:e4:32:37:b3:37:3e:ae:c9:35:6f:6f:85:3f:25:
                    88:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AC:AB:96:87:7D:FE:38:C6:EA:2E:6C:DD:AE:D5:9D:A0:D3:C8:4A
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/456D5030B40811F09FE3ABE7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:87:c1:59:e3:a0:91:0c:7f:b2:31:34:87:bf:66:23:09:d7:
         f3:92:ab:ae:2b:54:6c:c0:4d:55:2b:88:7e:1d:9c:22:c9:a6:
         f3:56:2f:a9:02:9d:9d:70:93:cd:97:d2:51:d4:27:30:38:4f:
         a4:9b:fc:79:24:da:62:98:c3:50:2d:ea:a3:9a:0f:57:d4:14:
         cf:87:bb:6a:37:31:c7:3b:a6:e7:54:23:08:72:e7:de:30:06:
         35:f0:79:25:c3:fe:9c:d9:6e:f2:09:d1:ef:dc:1a:2c:07:c3:
         3d:7e:29:3b:20:84:17:38:bc:02:ff:90:36:80:af:4d:9e:3c:
         5b:f6:2c:2a:ea:d8:e6:45:fd:73:d0:4d:8c:5a:f0:36:e7:3f:
         28:3a:ca:26:73:88:b9:6f:23:9f:bb:07:2b:10:2c:ee:94:2f:
         7b:fe:1d:6e:35:08:2b:89:33:5c:17:f6:a8:4c:a0:44:4c:36:
         44:53:c2:96:d6:c8:02:3b:40:d1:f0:d8:df:4e:89:10:db:dc:
         fa:7f:50:09:d7:ea:17:9d:a1:1e:8d:cf:4f:7d:16:97:40:e3:
         97:32:7a:98:96:60:d3:5a:15:8d:98:2d:69:a4:73:9f:5c:2e:
         67:f8:ed:3b:2c:78:cb:a3:a5:81:55:ea:45:98:fe:e2:f2:43:
         77:9b:de:15
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD0swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTEwMjgxNDEzMjJaFw0yNjEwMjcxNDEzMjJaMBgxFjAU
BgNVBAMTDTY5MDBjZjg3LTNhMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCovxM0KK0cBiWRpfw4enUlByLOYWFrbXEJMvgZfUZHw58ZrphXMH0zMaL5
hz37d8xXC2rJuLU5KQc+o1xhZLMpOMlFYv3AYGMDVme8OI1MQdMFDdK8ybOcGgTA
LaRmvtS/Ae/SVSFlnnj7ANSu1v3VqImIl5yolSec4AMgdQ4PWNCQ5SYjD1AX+9dc
uGH4eRwb2rOexkCQu/bC3eKlgwFhJi23CThsxemZePabKWNN21IbLTZJeYYWpFBg
fGjGfB8T3v4euvpcVdocO8GQtbOGjy0E34Kv9haA52roc8FS7SdDhx0XKGYm9k1+
HSoT3q/kMjezNz6uyTVvb4U/JYghAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUD6yr
lod9/jjG6i5s3a7VnaDTyEowHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzQ1NkQ1MDMwQjQwODExRjA5RkUzQUJFN0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh1swDQYJKoZIhvcNAQEL
BQADggEBANCHwVnjoJEMf7IxNIe/ZiMJ1/OSq64rVGzATVUriH4dnCLJpvNWL6kC
nZ1wk82X0lHUJzA4T6Sb/Hkk2mKYw1At6qOaD1fUFM+Hu2o3Mcc7pudUIwhy594w
BjXweSXD/pzZbvIJ0e/cGiwHwz1+KTsghBc4vAL/kDaAr02ePFv2LCrq2OZF/XPQ
TYxa8DbnPyg6yiZziLlvI5+7BysQLO6UL3v+HW41CCuJM1wX9qhMoERMNkRTwpbW
yAI7QNHw2N9OiRDb3Pp/UAnX6hedoR6Nz099FpdA45cyepiWYNNaFY2YLWmkc59c
Lmf47TsseMujpYFV6kWY/uLyQ3eb3hU=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:47:38 2025 by rpki-client