Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4C0998FC67C511F0B869F1C3DAE4EC9C.roa
File:                     4C0998FC67C511F0B869F1C3DAE4EC9C.roa (raw, json)
Hash identifier:          VIzopDeS9FbfsQCqor1Ka5YwjFuWB4xCQKdn3TmSe/A=
Subject key identifier:   AB:37:8B:E7:62:D9:D0:30:F2:F3:5F:21:E4:0D:4E:93:6A:D8:0A:5C
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0C9D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4C0998FC67C511F0B869F1C3DAE4EC9C.roa
Signing time:             Wed 23 Jul 2025 13:02:33 +0000
ROA not before:           Wed 23 Jul 2025 13:02:28 +0000
ROA not after:            Tue 21 Jul 2026 13:02:28 +0000
asID:                     197450
IP address blocks:        102.135.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 08 Aug 2025 04:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3229 (0xc9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Jul 23 13:02:28 2025 GMT
            Not After : Jul 21 13:02:28 2026 GMT
        Subject: CN=6880dd69-48ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:ed:4d:8e:ba:92:53:83:b0:47:97:d9:22:
                    44:59:ac:54:81:a1:2b:31:38:ba:03:1d:7c:25:37:
                    c8:2b:39:3f:c7:8f:9d:90:2d:b0:be:ef:94:fe:3a:
                    ff:7c:92:48:7e:ef:00:b2:a5:58:1b:8f:34:78:f1:
                    bc:7e:e4:02:a7:55:39:86:a9:89:87:85:b1:22:1e:
                    25:0a:25:96:82:01:8c:9b:65:70:0e:e7:b4:19:63:
                    2a:f9:7e:f1:7b:3a:b0:57:de:2f:2d:04:86:79:01:
                    4c:bd:54:65:f7:59:3b:54:53:0c:f7:b9:53:95:df:
                    53:14:79:6e:5e:21:d8:a8:33:e6:30:0a:27:91:4f:
                    c2:3c:7e:20:12:1f:23:ad:83:65:4c:52:b9:a4:2a:
                    9a:76:15:62:0f:1e:cb:d3:d2:9a:e1:c4:c2:0a:b6:
                    c0:88:22:36:f1:a4:b2:df:5f:37:0e:ee:0c:3e:bb:
                    eb:a3:eb:1d:da:c8:b3:68:97:c9:0a:46:9d:a3:7d:
                    39:91:85:2d:9d:b3:51:a8:12:b7:7d:2d:af:87:f8:
                    66:ea:7e:1a:8c:fb:b9:d6:2d:55:69:95:48:b8:dc:
                    01:09:bc:d2:f1:09:da:57:1d:83:d2:86:53:0d:be:
                    14:8c:2b:c0:3c:91:e2:93:53:b1:c5:9e:07:b3:5a:
                    32:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:37:8B:E7:62:D9:D0:30:F2:F3:5F:21:E4:0D:4E:93:6A:D8:0A:5C
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4C0998FC67C511F0B869F1C3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:45:8f:4f:24:6f:34:50:7a:21:0c:51:95:c0:26:e7:c4:27:
         70:dc:7e:5a:80:a2:e0:c6:14:a7:31:67:b8:ed:39:63:c6:16:
         45:65:2f:94:c6:05:a3:1b:8f:86:84:fd:68:c4:71:73:3c:bb:
         89:7a:6a:b8:1b:8e:8a:5d:56:35:a8:2f:b6:a3:42:92:94:21:
         de:46:19:70:50:e3:46:ae:c4:47:5c:57:cc:7c:05:5f:8a:9c:
         f1:ee:21:03:42:fc:4f:ec:c0:99:b8:34:45:c2:6b:65:74:16:
         dc:01:e8:82:aa:c0:dd:5a:42:21:31:28:07:00:f2:41:c4:a9:
         ff:24:d2:7b:d0:74:31:c9:c9:fa:b5:ea:18:dd:bc:6e:9c:6b:
         69:fa:3d:f8:21:18:33:00:4f:b7:02:33:f5:f9:6f:20:b3:61:
         73:80:59:ec:d1:35:c1:de:2c:4d:00:b4:23:7a:2c:0b:b6:f2:
         38:14:2d:e2:c8:9a:29:4a:e4:82:84:c7:b3:92:f0:4d:4b:3f:
         02:1a:c4:0f:1b:b7:f9:de:bb:8a:71:bc:c1:b8:f9:85:9b:db:
         8f:c7:66:14:e8:cc:8d:ec:a9:3c:b2:40:72:bb:99:43:ee:7f:
         91:9d:45:be:24:79:b7:c5:1b:91:2d:7f:35:ad:29:b0:d6:fa:
         c9:60:95:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:03:28 2025 by rpki-client