Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/603F758E121B11F1BA2249DFDAE4EC9C.roa
File:                     603F758E121B11F1BA2249DFDAE4EC9C.roa (raw, json)
Hash identifier:          AOB77366XhkykPNSzKvu4htFQi9C0KRfP/RnQhL9DdU=
Subject key identifier:   94:DB:1E:98:D7:5B:67:CF:86:62:48:9B:CD:D8:5E:FD:86:6E:AD:82
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       106C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/603F758E121B11F1BA2249DFDAE4EC9C.roa
Signing time:             Wed 25 Feb 2026 07:27:01 +0000
ROA not before:           Wed 25 Feb 2026 07:26:57 +0000
ROA not after:            Thu 25 Feb 2027 07:26:57 +0000
asID:                     29802
IP address blocks:        196.251.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4204 (0x106c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Feb 25 07:26:57 2026 GMT
            Not After : Feb 25 07:26:57 2027 GMT
        Subject: CN=699ea445-f688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:c7:98:31:50:b8:fb:5d:2a:84:fc:65:d4:
                    ff:53:2e:91:2b:73:96:95:6c:13:7d:90:1b:c6:e1:
                    65:cc:7e:fa:47:cc:09:0d:5c:70:7d:7c:05:2f:70:
                    9f:ed:57:85:70:05:f5:97:dc:57:f1:16:92:4d:ff:
                    74:b3:a8:d9:c4:ff:de:41:92:16:9c:75:d0:5e:4d:
                    df:7f:07:4a:19:fd:9b:98:ed:30:ad:78:94:2f:f1:
                    ec:7f:9c:02:70:71:d9:59:ef:60:ce:cb:8d:e4:69:
                    ed:30:ae:39:30:ce:eb:8e:45:aa:dc:7f:79:0f:40:
                    f1:e5:0f:5b:3d:79:69:e2:c8:03:d7:39:bf:f4:51:
                    16:a0:b2:40:49:fb:52:cc:fc:f0:2b:a3:21:60:aa:
                    88:d2:61:19:f7:6f:09:d4:62:ce:8a:11:1c:cb:cf:
                    18:0c:8e:86:d1:ed:71:08:4e:75:55:b0:7a:48:c5:
                    f6:d3:d9:0d:cb:2d:6c:38:ae:12:4f:3f:34:75:77:
                    16:e7:82:d5:e4:36:74:12:a1:94:0b:f3:2a:b4:44:
                    b9:db:00:ad:da:20:93:ef:df:0b:25:77:8b:43:0e:
                    4a:5c:53:89:35:3b:be:81:f1:ae:b3:f5:5b:57:55:
                    1c:78:c4:f1:b2:51:00:c3:dd:03:53:12:72:37:ca:
                    ea:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DB:1E:98:D7:5B:67:CF:86:62:48:9B:CD:D8:5E:FD:86:6E:AD:82
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/603F758E121B11F1BA2249DFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:ff:ef:5f:9d:b8:4f:60:fb:9c:e3:0e:9e:00:4a:1d:c6:73:
         d3:37:9e:b4:18:54:90:ef:a5:90:33:dd:ec:b9:ed:a7:29:c8:
         29:2a:a2:7a:81:e9:0d:8d:39:94:aa:8e:28:63:6e:f6:49:41:
         19:d9:39:a1:b8:e7:db:3f:f4:49:c1:58:b0:9c:bc:a6:a5:8a:
         c5:a9:9b:5a:1e:92:c3:34:67:6b:2c:24:29:b7:08:48:1d:9d:
         46:b7:5f:02:38:7a:56:0b:87:f0:d5:e3:f3:6f:ed:2c:46:14:
         78:7d:d4:bb:f2:3b:6c:49:e8:96:51:ee:c6:14:20:06:0c:7b:
         b2:ef:4f:03:d6:1e:ff:24:14:2f:a9:10:8e:94:d4:d9:5e:25:
         f1:af:f3:82:b8:b8:5e:41:69:5e:b1:2d:82:c0:27:c5:03:b2:
         ee:af:ac:68:39:e5:54:01:24:7e:79:a8:4d:d6:ad:3e:88:56:
         ff:7b:52:1c:a8:b1:2a:9f:84:40:cd:58:f7:c8:43:fb:01:ba:
         f6:e8:fc:75:1b:9e:02:b6:d6:10:e5:c8:8c:e4:48:fa:d3:0f:
         7c:d9:c7:55:35:64:dd:85:a5:2f:de:66:fd:65:a7:03:ed:68:
         c4:a0:cb:95:cd:6c:a5:87:72:c4:c9:a8:a5:9c:77:50:c0:ed:
         84:47:33:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:28 2026 by rpki-client