Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C75753C0485B11F081FB9CE1DAE4EC9C.roa
File:                     C75753C0485B11F081FB9CE1DAE4EC9C.roa (raw, json)
Hash identifier:          NCKF+2oA6fNxmWyOzJKOWzdgkytX0/6RVl6DLgcZQjw=
Subject key identifier:   CD:7A:38:CB:DA:12:31:3B:9E:07:E8:EF:CC:05:B6:54:ED:6E:A9:3B
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0B51
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C75753C0485B11F081FB9CE1DAE4EC9C.roa
Signing time:             Fri 13 Jun 2025 13:39:07 +0000
ROA not before:           Fri 13 Jun 2025 13:39:02 +0000
ROA not after:            Sat 13 Jun 2026 13:39:02 +0000
asID:                     29802
IP address blocks:        196.251.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2897 (0xb51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Jun 13 13:39:02 2025 GMT
            Not After : Jun 13 13:39:02 2026 GMT
        Subject: CN=684c29fb-1289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:58:d6:b3:e1:fd:03:cd:a9:68:17:52:37:c5:
                    d2:8a:e9:8a:5e:96:0f:8d:9c:06:1e:2b:29:21:0e:
                    47:ba:e7:a4:16:d8:44:58:f8:5b:7f:73:6f:54:37:
                    f2:f8:19:7e:97:6b:df:cf:96:ba:aa:16:7c:64:72:
                    2f:77:69:20:3f:8c:4e:27:e6:e5:e2:a1:08:75:f4:
                    be:f8:1f:63:61:af:8f:54:af:14:91:69:9e:f2:91:
                    cb:d5:cf:1a:07:b6:cf:4f:3e:3e:e4:0d:13:d9:58:
                    2d:30:1b:94:33:bd:38:c2:5d:00:70:3a:ca:cf:16:
                    5b:14:d7:d0:06:cf:1a:6a:8a:4b:8a:81:99:61:1d:
                    e4:4c:12:ef:a1:26:8a:5e:0d:19:ad:2f:77:2d:4b:
                    10:7e:a3:a1:a0:55:7f:60:63:57:00:6d:08:2e:08:
                    38:24:4e:8d:9c:b0:f5:0a:40:38:38:68:ab:26:33:
                    f9:67:56:e0:ce:e4:7d:cd:2f:a6:09:b1:eb:8d:0d:
                    24:92:07:d5:b0:e3:a2:04:54:f0:87:92:33:a3:1e:
                    3f:8e:6a:77:fa:85:bb:d4:fe:83:3e:0e:f4:4a:6b:
                    28:05:2c:4b:e9:3b:0e:83:5f:23:1b:ff:2e:b5:8f:
                    7a:bf:93:b0:1a:09:b7:a2:a3:66:b5:60:c5:c5:77:
                    4c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7A:38:CB:DA:12:31:3B:9E:07:E8:EF:CC:05:B6:54:ED:6E:A9:3B
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C75753C0485B11F081FB9CE1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:19:53:ec:30:5f:9d:89:26:63:8b:f7:24:c7:bf:96:a6:fa:
         32:c8:7d:18:6b:b6:58:3e:2b:89:41:ab:f5:48:09:7b:e8:a1:
         05:74:ac:ba:26:17:c8:e5:53:1c:4d:e3:63:f3:02:93:e8:f7:
         e4:30:d9:4e:a4:b1:92:9d:0c:84:aa:67:45:04:e3:e8:73:a6:
         01:b3:79:6f:9e:34:be:c6:0c:3f:04:6f:36:6b:1c:fb:09:30:
         55:92:05:1e:78:44:1e:c7:f9:2b:94:da:05:66:30:9d:11:d6:
         46:83:be:94:62:2d:f8:d5:d6:75:a7:5f:48:6f:a7:6a:9b:b7:
         98:7a:79:48:16:42:e6:50:04:3c:38:1e:ba:be:c2:75:4f:1d:
         73:d1:7f:ad:3f:3d:c4:2f:fb:55:64:e3:4d:47:5b:00:b2:90:
         49:7f:12:d8:df:2d:39:a4:e2:c9:8c:bb:36:7c:8c:f7:35:d1:
         66:5f:ce:fb:aa:be:4b:8f:29:30:8b:e5:01:4d:f1:7b:d8:9d:
         6c:8c:e2:42:ee:eb:d6:85:af:5f:e6:40:d1:2b:e2:cf:9c:95:
         a8:6d:67:e4:62:ec:3b:36:e7:6f:6d:76:29:3f:7a:52:f4:be:
         32:4f:f5:2e:90:79:81:e9:e4:f2:dc:47:27:dc:54:92:6b:e2:
         b8:61:55:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:40:04 2025 by rpki-client