Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/92BE814A488511F0B84C5EECDAE4EC9C.roa
File:                     92BE814A488511F0B84C5EECDAE4EC9C.roa (raw, json)
Hash identifier:          WzUD5bKNNlkfKUSffnWSs860eJpHdc2GsLZ9+OfP8is=
Subject key identifier:   A8:92:42:D4:C1:C8:CD:1A:8E:F0:B3:AF:BD:73:30:74:C7:37:C0:92
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0B5C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/92BE814A488511F0B84C5EECDAE4EC9C.roa
Signing time:             Fri 13 Jun 2025 18:38:18 +0000
ROA not before:           Fri 13 Jun 2025 18:38:14 +0000
ROA not after:            Sat 13 Jun 2026 18:38:14 +0000
asID:                     29802
IP address blocks:        102.135.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2908 (0xb5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Jun 13 18:38:14 2025 GMT
            Not After : Jun 13 18:38:14 2026 GMT
        Subject: CN=684c701a-a275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8c:93:e0:c0:37:64:c4:08:41:b1:66:72:49:
                    db:6a:9b:d1:b3:6e:94:69:04:00:b8:03:77:8c:3c:
                    e6:e2:8e:af:9f:5e:d2:71:69:80:b4:05:e4:d4:ff:
                    18:01:b7:c8:05:cd:c6:6b:34:df:c9:2c:ed:e8:b1:
                    ff:9b:44:5f:94:35:d7:2f:e0:68:cf:4b:5d:99:ce:
                    8b:96:bf:02:73:07:93:36:68:ab:22:ac:d1:f9:27:
                    5e:4e:88:f1:d7:96:2f:72:c4:e5:47:b9:53:49:e7:
                    dd:f9:db:da:12:db:ee:3f:47:21:de:d3:23:9f:d7:
                    24:e1:49:8d:3a:ee:60:75:f0:14:d6:9c:f6:d8:6c:
                    87:0c:d9:f1:42:d9:fe:de:3f:35:c2:bc:85:1f:4c:
                    23:03:21:0b:23:fc:de:a7:83:53:8f:3e:85:cd:ac:
                    8d:29:52:84:05:82:0f:69:9a:0c:4c:37:4b:14:5d:
                    3b:d6:fe:7a:7d:53:e1:28:82:f0:af:69:44:82:81:
                    41:56:82:79:d7:51:0d:9e:e4:05:dc:bc:32:67:57:
                    2c:90:8f:1a:31:3a:94:f1:32:f7:79:26:11:ad:85:
                    e2:37:70:d5:84:33:98:51:87:93:84:c0:41:4a:20:
                    aa:1b:04:82:31:0b:f9:4c:12:38:4d:72:54:2d:5f:
                    bc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:92:42:D4:C1:C8:CD:1A:8E:F0:B3:AF:BD:73:30:74:C7:37:C0:92
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/92BE814A488511F0B84C5EECDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:c7:99:9e:e5:57:47:09:0d:db:e6:25:bb:e4:5e:5b:67:43:
         3d:08:7d:f0:af:5a:dc:9f:54:c1:a9:b7:69:a5:8d:bb:16:60:
         6c:15:51:e8:b8:bf:4a:a8:25:fb:79:f0:dc:5a:c6:37:0a:c6:
         0c:6a:43:ee:93:1d:e6:12:88:c1:cd:7e:f4:fe:e5:1c:14:56:
         ef:32:68:f3:9c:a3:9e:5e:15:0e:84:d4:87:b0:00:57:45:2f:
         cf:aa:7c:37:ba:72:5a:23:cd:99:99:47:16:eb:d4:0a:a5:55:
         6f:46:74:be:96:c5:ab:3d:aa:43:e5:0a:c8:4b:0a:ff:72:f1:
         39:46:58:66:30:45:94:18:96:4b:8a:ec:77:37:a9:64:5e:31:
         f4:f0:83:6f:6f:fd:64:9a:de:d0:df:dd:e9:2f:b6:39:61:0b:
         37:9b:e6:ef:06:9a:31:6f:ba:c3:93:55:e5:c0:4b:09:09:ab:
         14:81:62:06:2f:a3:fd:51:2f:a1:ad:0d:46:18:c9:64:f9:ee:
         29:e0:e9:ed:4d:53:a7:b0:4d:af:1d:62:db:b3:0b:58:87:00:
         f6:99:3d:2d:6d:8b:c1:dd:e6:ad:9e:af:9c:84:60:6e:8a:d3:
         85:00:92:b0:76:e5:b1:c7:36:5c:77:7f:2f:67:4f:39:84:7f:
         40:d3:44:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:36:03 2025 by rpki-client