Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/707D6AF4B3CB11F0BA8746EFDAE4EC9C.roa
File:                     707D6AF4B3CB11F0BA8746EFDAE4EC9C.roa (raw, json)
Hash identifier:          9SxQsppFzac8isLwgSRMpg7+bJxfqmDhggBcB7WBU88=
Subject key identifier:   4C:C7:35:06:35:0D:F3:BF:DC:68:2E:F2:4E:08:29:B4:B0:98:FB:A3
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0F45
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/707D6AF4B3CB11F0BA8746EFDAE4EC9C.roa
Signing time:             Tue 28 Oct 2025 06:58:00 +0000
ROA not before:           Tue 28 Oct 2025 06:57:55 +0000
ROA not after:            Wed 28 Oct 2026 06:57:55 +0000
asID:                     205886
IP address blocks:        102.135.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3909 (0xf45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Oct 28 06:57:55 2025 GMT
            Not After : Oct 28 06:57:55 2026 GMT
        Subject: CN=69006978-0134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:77:73:88:6e:cd:af:30:c4:d8:f2:2e:a4:4d:
                    de:4d:cb:f0:e2:ba:80:fe:b6:8a:99:7d:a0:19:ba:
                    92:fc:1a:66:28:10:09:16:ae:1d:b0:89:df:37:f6:
                    8e:47:9a:e2:d5:ea:27:4a:65:dc:4e:0c:30:cc:f0:
                    12:99:df:1d:0a:11:0e:ff:df:d4:7e:5f:36:8d:9f:
                    21:cb:7c:fb:fc:37:44:04:61:c6:d1:16:55:44:ec:
                    7b:ef:2c:cb:c6:7f:3f:ed:c2:dc:ef:d2:78:4d:6c:
                    15:84:31:31:eb:2c:ce:49:b4:33:cc:71:39:2c:81:
                    01:33:62:0d:e2:82:cb:6a:2f:a1:41:3b:c9:12:7b:
                    b5:61:ee:32:99:e4:c2:a3:43:2c:f7:fd:8e:38:cb:
                    80:0b:a7:d4:82:29:56:23:29:a0:13:78:e3:a8:8c:
                    36:46:76:c6:6d:f7:e3:db:57:71:45:7f:e7:5a:c8:
                    94:90:11:61:eb:31:2a:93:d6:b1:5f:26:53:cd:14:
                    e9:bb:87:18:f1:68:2a:b4:c4:24:29:71:10:e9:a3:
                    a4:e6:b1:b1:69:2f:42:b5:c5:93:e8:8d:86:a0:48:
                    83:b2:fa:50:54:fa:a3:19:61:4a:0a:7b:53:48:16:
                    07:40:fd:5f:9f:1b:3c:6f:3c:36:3f:3e:ba:f9:97:
                    87:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C7:35:06:35:0D:F3:BF:DC:68:2E:F2:4E:08:29:B4:B0:98:FB:A3
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/707D6AF4B3CB11F0BA8746EFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:99:db:15:38:ff:e4:6d:70:30:e5:49:ea:f1:39:ee:7b:3e:
         2e:9d:a6:2e:fc:c3:7f:61:80:91:62:8f:e5:30:d0:e6:97:3f:
         5d:b4:a9:8d:24:97:f9:23:99:06:0c:ed:67:c2:e6:7c:58:66:
         7c:94:d8:15:75:9f:d0:1a:71:be:72:e0:82:83:80:ed:81:56:
         37:6c:5f:36:66:3e:12:f8:3a:13:f4:d6:5c:47:99:b7:0d:8d:
         de:53:41:a8:b7:9f:48:64:ef:7d:b1:4c:ab:e2:12:50:b5:51:
         62:dd:1b:98:e2:6a:33:ec:58:26:d1:9d:de:c0:7a:27:f1:d7:
         5c:dd:87:45:d0:1b:a3:11:40:f5:a9:8a:4f:3a:a8:c0:c1:ec:
         ec:c0:b3:26:92:2a:2c:05:c3:cd:a4:d3:8f:f4:42:83:23:4c:
         81:11:29:92:f4:8e:5e:ac:ae:59:e4:e4:28:67:41:5b:b2:9b:
         f7:57:19:6e:89:40:6c:8e:5e:14:04:2e:be:bb:a3:89:af:4e:
         76:f4:fd:30:db:59:b3:27:b0:11:f5:6d:c9:78:9a:f2:bd:13:
         0e:c6:81:1b:6e:b7:ba:5b:65:7a:30:7a:45:8b:d5:d4:1f:51:
         f9:0a:0f:a1:21:1d:9f:85:f3:b3:eb:88:ec:1e:26:27:d5:91:
         94:d1:e7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:54:18 2025 by rpki-client