Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4BDC3EE2121611F18426FBC1DAE4EC9C.roa
File:                     4BDC3EE2121611F18426FBC1DAE4EC9C.roa (raw, json)
Hash identifier:          /A2XEGOmilZUaluK44T30VN91ZeNR/U9kUVm0juxUyg=
Subject key identifier:   41:AE:2B:31:D8:A9:7B:E9:72:4A:C0:2B:68:0A:81:14:AF:02:6A:91
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       105B
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4BDC3EE2121611F18426FBC1DAE4EC9C.roa
Signing time:             Wed 25 Feb 2026 06:50:40 +0000
ROA not before:           Wed 25 Feb 2026 06:50:36 +0000
ROA not after:            Thu 25 Feb 2027 06:50:36 +0000
asID:                     56913
IP address blocks:        102.135.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4187 (0x105b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Feb 25 06:50:36 2026 GMT
            Not After : Feb 25 06:50:36 2027 GMT
        Subject: CN=699e9bc0-3b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6e:82:e0:1f:9a:bb:f9:f2:85:ca:81:cb:55:
                    5b:3d:35:60:ab:00:a2:18:8d:5a:8b:60:af:65:a7:
                    31:e0:0f:95:69:56:00:26:5b:e9:3e:04:1d:e6:48:
                    82:2c:dc:5d:c7:c6:9d:cb:7a:03:76:34:53:47:a3:
                    39:f2:96:19:da:4d:69:86:49:11:52:45:76:dd:77:
                    45:78:6b:07:1c:d7:b0:c0:70:c5:0d:a3:1d:98:e8:
                    01:c3:78:a1:7c:6b:f7:ea:71:29:04:48:ff:d6:fe:
                    31:a8:25:c0:b4:72:7b:49:58:2a:cb:18:d9:d8:81:
                    fc:74:82:29:cc:f8:a5:9f:47:71:e2:cc:5a:9a:5e:
                    80:c1:9e:d3:ec:c8:1a:cc:fa:1c:ce:b8:ef:d4:15:
                    3f:24:4d:2c:b2:fe:2f:03:c7:fc:e2:31:f3:80:c1:
                    c2:fa:17:97:09:8c:83:69:a8:ad:29:a9:6a:49:bd:
                    32:a0:aa:69:6a:23:3f:54:ad:0e:92:fd:fe:ed:04:
                    5a:c9:95:ed:16:a0:5c:2f:c5:38:47:5d:92:eb:be:
                    6e:5c:77:24:0a:fd:98:27:49:71:73:5d:28:5f:d3:
                    c6:b3:10:d3:73:38:e9:c2:10:7e:ee:e1:81:d6:47:
                    d0:1f:b1:e9:77:c1:f4:e4:ae:e8:1a:70:e2:8a:66:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AE:2B:31:D8:A9:7B:E9:72:4A:C0:2B:68:0A:81:14:AF:02:6A:91
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4BDC3EE2121611F18426FBC1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:15:94:22:0d:ad:aa:15:46:ec:09:b7:0a:a2:83:f1:a9:84:
         c8:f4:b4:b9:52:28:5b:af:61:70:21:7b:c4:2f:8d:2a:52:3e:
         3e:53:2c:4f:a5:ba:b4:ab:c8:1c:17:4d:b2:70:e7:96:82:b1:
         32:80:ae:b1:5a:a1:db:d0:8c:01:ce:78:0d:70:73:99:b6:66:
         a2:35:d7:0d:69:37:d6:f0:0c:5e:db:c4:3b:3f:a8:82:c4:ae:
         a8:d7:be:c7:79:66:e2:8e:c7:60:20:2c:b8:d3:39:7c:2d:57:
         72:3b:9f:da:00:b4:c5:e0:f7:2a:06:7e:8f:ea:23:ea:8d:0c:
         34:ac:0f:59:e2:54:5d:e4:b5:95:7e:6f:04:fa:c7:07:97:a2:
         47:45:cd:74:73:23:8a:e9:20:c6:7f:05:23:73:c6:a4:cf:64:
         9b:c9:7e:db:90:40:41:3c:09:ce:d7:79:fa:87:21:7a:9a:cb:
         25:ba:04:78:1f:4b:86:d9:4c:d0:4b:70:d8:48:a8:e7:e2:ec:
         a0:99:e8:87:40:f7:f7:82:96:07:f5:8e:12:fc:00:84:c2:de:
         85:5a:be:36:4b:a1:84:8a:60:45:b0:0b:f7:e9:41:d9:9d:9a:
         f4:db:d2:9f:88:bd:0c:0d:6a:cc:b9:8f:fb:ec:f5:72:99:28:
         e1:d7:41:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:38 2026 by rpki-client