Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A140E392616211F183C6DA1CCF1D38B0.roa
File:                     A140E392616211F183C6DA1CCF1D38B0.roa (raw, json)
Hash identifier:          qgoc8bT/L5FyGbxBrU0s5shzJ5+IncOTC3whTUevUaM=
Subject key identifier:   48:38:9E:D9:83:5D:10:BE:78:37:75:E5:47:5C:3F:A7:83:6C:54:11
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       11CA
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A140E392616211F183C6DA1CCF1D38B0.roa
Signing time:             Sat 06 Jun 2026 04:46:07 +0000
ROA not before:           Sun 06 Jun 2027 04:46:02 +0000
ROA not after:            Wed 30 Jun 2027 04:46:02 +0000
asID:                     399631
IP address blocks:        196.251.123.0/24 maxlen: 24
Validation:               Failed, certificate is not yet valid

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4554 (0x11ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Jun  6 04:46:02 2027 GMT
            Not After : Jun 30 04:46:02 2027 GMT
        Subject: CN=6a23a60f-5b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:e3:84:8d:1f:25:2e:6b:75:bb:aa:7b:60:
                    6f:31:ac:76:ac:c7:18:b8:7f:e7:38:47:19:62:2f:
                    7d:39:a6:88:6c:09:68:1d:63:95:c8:22:d4:44:2f:
                    4a:3e:5b:8f:b9:24:06:56:46:51:d9:07:21:70:0f:
                    bb:c0:51:40:80:ef:03:48:89:68:4c:98:fd:a7:92:
                    dd:9d:81:3f:eb:bb:06:d2:04:d7:98:8b:c5:27:8a:
                    ae:1f:2d:27:61:1b:b8:7d:27:eb:ae:88:2b:ca:0f:
                    61:e1:3e:6d:0a:8c:dc:6f:84:1b:2c:9b:d4:37:21:
                    ad:16:8f:5b:69:93:80:34:b1:63:d0:7b:2a:c4:06:
                    8e:8d:ca:e5:3f:bd:a7:62:64:ab:e9:f8:9a:01:6f:
                    17:83:68:d5:61:63:d7:30:9b:e5:d0:c9:de:f9:c2:
                    c2:b6:75:a7:88:03:f5:a8:55:20:b0:fa:ac:42:77:
                    50:3f:ff:40:25:ff:ad:8d:41:c2:54:50:0f:99:d5:
                    70:6d:0a:a5:39:ba:68:ca:57:6c:58:db:17:c9:7d:
                    f3:b7:0f:80:41:03:2a:4f:8e:d6:41:15:2a:83:38:
                    80:fe:5a:a6:8c:0b:3b:67:52:8e:e8:08:9c:bd:a3:
                    7c:67:67:fb:0b:ec:c0:fc:42:65:1e:41:24:be:37:
                    ec:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:38:9E:D9:83:5D:10:BE:78:37:75:E5:47:5C:3F:A7:83:6C:54:11
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A140E392616211F183C6DA1CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:78:15:92:98:6a:9b:b9:30:be:92:56:24:53:ef:8e:ed:42:
         cd:5f:59:7e:83:33:cb:b8:3a:b2:8c:83:ce:1a:0b:f7:ca:7e:
         c3:80:8b:4c:c2:30:8c:b4:6b:71:b1:71:7f:a9:73:17:e5:21:
         c5:a8:a8:15:41:f5:b8:5a:bf:87:57:23:a0:bc:54:b0:98:89:
         8b:6d:8e:15:ed:59:3c:a3:cb:65:4d:fb:5b:b8:b6:5f:d1:70:
         67:f2:49:f8:55:62:4e:e5:f9:cd:64:86:36:75:f6:be:01:c5:
         b2:20:04:fe:75:d0:88:da:d9:fe:c9:2c:ca:61:91:e7:7a:d7:
         ab:41:24:90:5d:46:c2:0c:5a:10:e9:c5:f4:bd:9f:2c:4b:db:
         fb:13:76:04:86:31:b8:51:e1:39:35:e1:95:8d:ff:6d:af:58:
         1b:03:15:73:f8:57:c5:c9:63:f0:b1:4b:88:f8:6f:bd:d4:05:
         66:06:4f:93:01:d5:5b:cb:df:33:4f:71:23:0b:30:da:fc:09:
         1a:f2:82:f1:a1:6b:f3:80:f6:fb:ef:89:43:81:42:09:00:12:
         52:27:6a:3b:22:ef:68:6a:cc:bb:74:aa:79:2b:69:7c:06:91:
         9f:ce:69:08:bc:bd:70:75:bd:be:8f:4c:9d:e3:d1:dc:1c:e5:
         1e:17:61:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:28 2026 by rpki-client