Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E48AA364ADD811F186FBD91DCF1D38B0.roa
File:                     E48AA364ADD811F186FBD91DCF1D38B0.roa (raw, json)
Hash identifier:          tTRAM4ELWObVRIW7EjWSw3ey29/XNikwdxajRA4tTxI=
Subject key identifier:   28:C7:92:09:6C:90:60:05:EF:DC:55:FF:AB:2F:E3:11:54:2D:7D:5D
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       12C8
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E48AA364ADD811F186FBD91DCF1D38B0.roa
Signing time:             Fri 11 Sep 2026 12:04:09 +0000
ROA not before:           Fri 11 Sep 2026 12:04:05 +0000
ROA not after:            Thu 30 Sep 2027 12:04:05 +0000
asID:                     207184
IP address blocks:        196.251.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4808 (0x12c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Sep 11 12:04:05 2026 GMT
            Not After : Sep 30 12:04:05 2027 GMT
        Subject: CN=6aa3ee39-873a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:68:86:19:22:e8:b8:8e:d2:af:95:c9:da:97:
                    d4:9c:20:04:19:04:0a:67:6c:1c:a8:54:26:c7:9d:
                    0a:79:a5:53:ba:8f:a6:c7:ea:47:47:3d:2f:b8:a5:
                    b9:7d:c8:67:71:23:91:84:4d:37:8b:48:58:6e:21:
                    4a:24:2c:1e:78:a0:b6:dc:37:53:80:12:64:6b:3a:
                    0a:46:c0:c3:15:08:c9:08:b6:9b:25:cb:46:27:f5:
                    41:22:4d:fe:83:0c:d8:2c:8c:68:2d:fd:6b:ad:fc:
                    a5:3d:2b:95:f8:52:42:c1:5e:58:87:69:7e:e6:9d:
                    b7:2a:ce:04:55:16:e0:5c:18:db:4a:67:32:26:c8:
                    d8:e8:0b:2d:22:11:43:c7:c5:76:4e:e1:d7:99:02:
                    c7:d1:82:bf:68:2d:e4:92:21:c8:c9:d9:87:fb:df:
                    d0:f6:7e:0f:3a:bc:bc:05:b5:4e:cb:1c:e5:4f:44:
                    c8:82:ba:b4:b4:a1:5c:ac:ec:16:23:09:49:20:14:
                    9d:34:4d:b2:87:86:99:8e:3e:7b:83:28:0e:b7:d9:
                    1f:6b:18:43:7f:9f:8f:b3:f8:1d:b1:e2:cb:db:05:
                    70:c5:0e:d2:74:14:73:cf:b0:e1:ce:fa:c7:7a:c8:
                    7c:88:31:cf:98:ca:8f:29:ba:68:2a:f5:de:f5:0f:
                    97:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C7:92:09:6C:90:60:05:EF:DC:55:FF:AB:2F:E3:11:54:2D:7D:5D
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E48AA364ADD811F186FBD91DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ce:ab:5f:05:d3:76:2e:64:b6:4a:ea:4e:5f:52:d2:f3:3f:
         b2:1c:f9:d0:63:0a:63:07:86:42:96:25:40:2f:12:6c:0c:83:
         af:56:07:98:ec:47:ea:ba:91:a6:66:b5:4b:2b:37:4d:7e:6b:
         34:78:10:70:48:5c:3d:09:3c:0c:22:b1:6b:62:36:4d:bf:e3:
         6d:9d:77:77:dc:b4:2c:5b:81:82:28:91:04:99:22:f9:13:3a:
         de:df:73:42:30:7f:0f:50:29:23:c1:d8:39:a1:5d:e9:37:15:
         85:93:e7:d3:e4:6e:77:29:ee:fc:a7:bf:0b:4c:24:41:14:6b:
         16:9d:79:40:b7:89:1d:d0:9c:9f:da:6e:f8:72:43:0f:5d:1e:
         f1:19:91:ff:ce:af:89:87:c5:7c:61:f9:2a:29:73:0a:73:c7:
         46:54:7d:a8:c1:cc:18:49:95:aa:94:d1:17:76:ed:9e:ff:50:
         09:f4:30:e7:9b:54:bd:de:b8:99:ca:1c:7a:c2:73:df:f6:d4:
         a1:8b:c7:ce:60:3c:d8:15:7a:af:18:a0:83:f9:39:63:16:31:
         99:58:64:49:3e:99:0b:36:8a:f6:20:b8:a2:b1:23:bc:b4:e7:
         cc:48:ba:3f:7b:eb:52:e7:42:e2:1b:b6:a6:5e:d2:7c:ed:d0:
         2a:8c:d6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----