Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/468534DA121B11F1912E31DFDAE4EC9C.roa
File:                     468534DA121B11F1912E31DFDAE4EC9C.roa (raw, json)
Hash identifier:          6rtUtKnlyVYw/V/mIsRwJtkvjdePtJm0fEtLeXWzCVY=
Subject key identifier:   FF:E2:57:3B:D0:D4:8A:29:37:13:1F:82:93:50:02:1C:57:20:19:87
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1068
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/468534DA121B11F1912E31DFDAE4EC9C.roa
Signing time:             Wed 25 Feb 2026 07:26:18 +0000
ROA not before:           Wed 25 Feb 2026 07:26:14 +0000
ROA not after:            Thu 25 Feb 2027 07:26:14 +0000
asID:                     29802
IP address blocks:        102.135.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 01:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4200 (0x1068)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Feb 25 07:26:14 2026 GMT
            Not After : Feb 25 07:26:14 2027 GMT
        Subject: CN=699ea41a-2bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:75:a0:a9:21:a3:f4:5a:52:b6:eb:6f:33:89:
                    10:1c:d6:00:b4:1b:4f:cf:95:d1:19:48:9c:06:12:
                    aa:38:c0:fb:bf:1b:94:40:6d:e9:54:b9:01:32:ad:
                    27:b3:f9:22:97:c7:ce:c7:03:f3:f0:34:cd:74:46:
                    25:0c:fa:6b:30:f6:2d:c1:c8:f3:e1:0d:eb:a9:55:
                    fa:2b:58:5c:6d:13:ab:76:88:45:ca:18:8a:cc:6d:
                    b4:ac:52:e9:bd:a9:31:d6:32:06:16:5f:c1:e3:14:
                    b0:74:b1:37:6e:63:48:20:eb:c8:74:8f:7a:13:b2:
                    4e:fa:5a:58:f0:fb:9e:e5:fc:52:bd:13:34:01:3b:
                    6a:dc:80:a7:94:d9:f5:25:4a:d0:be:cc:30:ab:9d:
                    a8:be:30:01:e8:9d:9b:3e:66:ec:e1:88:a5:7a:19:
                    ec:68:09:be:9a:8e:c2:c9:c9:df:1c:09:46:9f:76:
                    a5:6f:cd:6f:20:a6:05:1d:30:5e:ac:42:6e:9c:d2:
                    45:0b:ea:ae:f4:1c:c1:d2:85:11:04:5d:e6:d5:28:
                    8e:b7:67:c3:c2:18:92:8f:22:0e:c6:ef:95:73:ef:
                    6c:fd:bc:08:d9:81:0d:3a:f8:cf:c3:cd:3a:5f:c3:
                    c9:f4:22:f2:bc:2c:29:4d:6e:8b:a5:bc:90:eb:29:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E2:57:3B:D0:D4:8A:29:37:13:1F:82:93:50:02:1C:57:20:19:87
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/468534DA121B11F1912E31DFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:7b:ed:07:31:6f:bb:0c:4f:e1:89:72:60:8b:53:b6:7c:83:
         1b:9a:21:0b:f5:2c:58:a8:aa:e9:36:2c:9b:a3:35:b8:c7:d2:
         ea:b3:6b:6f:7e:c1:e3:6b:9f:9f:15:e5:53:70:06:9a:3c:0a:
         06:80:cd:87:f7:f1:cb:a7:74:d8:68:b6:40:24:78:d3:3c:f9:
         f3:46:2d:fd:38:8d:c7:41:68:0e:37:cf:93:4f:ce:08:d9:62:
         16:c9:5f:89:c1:5b:49:ce:6a:e0:02:0c:cf:b6:99:e3:d5:db:
         c0:13:dd:12:fb:6a:8a:b1:17:00:d4:6d:60:70:e1:dd:81:f1:
         cf:06:6e:74:1e:73:63:d8:97:48:40:e6:12:ce:a8:4a:05:16:
         e3:62:2c:a2:a2:28:86:53:ad:00:0a:c2:9b:48:c8:be:b4:21:
         1a:de:c7:8b:f6:e7:dc:b6:d7:c1:b3:5e:94:c8:fd:d5:67:4b:
         52:b0:17:0f:25:47:b9:3b:bf:1b:a9:41:42:cd:7c:cd:d6:95:
         16:a7:e3:b8:79:2c:5c:21:c4:7a:d5:98:86:09:70:c0:b5:af:
         96:a0:07:f9:6e:9a:a8:6a:e0:c4:db:74:6b:47:3f:d0:3d:cb:
         bd:9e:a3:5a:8d:a7:df:cd:52:75:96:97:13:3c:bf:40:76:33:
         65:39:5e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:23:01 2026 by rpki-client