Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7A7FBC36485B11F0854A91E1DAE4EC9C.roa
File:                     7A7FBC36485B11F0854A91E1DAE4EC9C.roa (raw, json)
Hash identifier:          vzPkuyyqiAkUzMFQU+vX5+tofu30mwmEF70xCQo3zpA=
Subject key identifier:   51:26:D8:64:3B:5E:18:08:A5:09:F8:72:70:C8:6D:83:E8:18:C8:18
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0B4D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7A7FBC36485B11F0854A91E1DAE4EC9C.roa
Signing time:             Fri 13 Jun 2025 13:36:59 +0000
ROA not before:           Fri 13 Jun 2025 13:36:54 +0000
ROA not after:            Sat 13 Jun 2026 13:36:54 +0000
asID:                     29802
IP address blocks:        102.135.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2893 (0xb4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Jun 13 13:36:54 2025 GMT
            Not After : Jun 13 13:36:54 2026 GMT
        Subject: CN=684c297a-c5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:08:da:1d:64:0b:2e:c4:9f:39:70:ec:cd:
                    97:79:70:d4:7d:eb:6a:78:6e:e6:81:e3:da:34:41:
                    77:42:a7:e1:27:fd:50:30:06:6e:e0:db:f0:46:53:
                    b6:84:09:d1:3f:6e:98:75:e8:97:80:4d:bd:01:bb:
                    ff:83:5c:2a:06:08:0c:4c:a7:bb:e2:4e:67:b3:95:
                    7a:e0:a5:28:bd:d3:c4:cc:e7:56:a5:93:c0:a2:1b:
                    9b:87:94:a3:8f:68:a6:25:57:65:ce:f9:0f:02:66:
                    c6:17:58:7a:0c:12:42:a6:e8:f2:59:ee:72:0f:2d:
                    6b:9c:20:f2:db:46:1f:cb:c5:8f:95:02:73:17:1b:
                    d9:a0:9d:fa:e4:e8:26:53:3a:23:3f:75:8e:ad:8b:
                    e2:98:9e:8a:48:85:f4:4f:c8:7d:f6:25:a2:67:89:
                    c5:0d:41:0d:5d:e0:ee:7a:0f:d8:d6:70:8d:e5:06:
                    ee:24:cf:78:82:16:09:b3:f0:8f:3e:c5:c2:bd:d8:
                    69:2b:08:05:cb:8b:86:1b:1d:8c:8d:57:33:cc:46:
                    83:8f:d8:1e:ba:d4:00:13:9a:ce:62:e5:fd:ff:ea:
                    b6:27:fc:b7:9b:70:e6:88:93:09:2a:4e:2c:9c:5f:
                    25:64:70:2f:f2:dd:00:4d:21:ac:34:67:3f:4c:af:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:26:D8:64:3B:5E:18:08:A5:09:F8:72:70:C8:6D:83:E8:18:C8:18
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7A7FBC36485B11F0854A91E1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:c7:0e:52:f4:28:f0:e2:6d:a8:ac:87:bd:b6:49:1f:b9:05:
         88:50:5a:9d:ad:03:f8:5d:bd:ed:6b:a6:17:8d:ed:47:8f:88:
         86:f0:f1:1e:b3:51:eb:d3:12:df:e2:9a:2d:ba:b9:5f:a1:bc:
         66:30:17:f8:cb:91:51:c1:93:ed:e7:c5:23:9b:1e:bb:dc:dd:
         dc:46:90:f2:53:18:07:1b:cf:51:5e:62:73:e9:70:e3:d8:7c:
         55:bc:8f:cd:ca:10:78:9b:30:0d:bf:f8:8c:6a:47:a9:f2:e6:
         66:46:63:5d:a9:93:0b:51:15:35:a8:5a:fa:aa:27:f2:ff:0a:
         e9:a3:3c:13:36:4c:2d:e3:e0:ef:7b:cd:fd:09:4a:4d:a0:45:
         0c:a1:83:53:5e:01:1d:48:60:fd:1b:7c:04:94:00:95:47:70:
         aa:b8:67:64:31:88:6e:b5:95:5a:e2:2e:14:10:da:34:57:23:
         37:a0:a0:fe:59:04:e9:a0:f6:5e:d1:69:8d:d7:4b:b7:c1:92:
         2a:ea:d8:0d:60:63:13:66:69:91:0a:64:c1:06:a2:aa:9b:ef:
         b2:f9:1f:39:be:7d:92:a5:48:c0:4f:01:44:53:af:f6:99:82:
         f6:4b:ae:d8:08:82:1b:ed:ba:40:ed:44:a2:f8:44:96:1d:1b:
         68:eb:62:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:34:10 2025 by rpki-client