Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F03CF05E121511F1AFDE23BEDAE4EC9C.roa
File:                     F03CF05E121511F1AFDE23BEDAE4EC9C.roa (raw, json)
Hash identifier:          TjRW35MmxAkSmaeMDW4jAssMI4/FyTirZNorGAB9rzY=
Subject key identifier:   B3:0E:9F:92:36:B5:39:8E:4C:4E:7E:12:7A:58:16:A0:5D:E4:92:E3
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1059
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F03CF05E121511F1AFDE23BEDAE4EC9C.roa
Signing time:             Wed 25 Feb 2026 06:48:06 +0000
ROA not before:           Wed 25 Feb 2026 06:48:02 +0000
ROA not after:            Thu 25 Feb 2027 06:48:02 +0000
asID:                     6079
IP address blocks:        102.135.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4185 (0x1059)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Feb 25 06:48:02 2026 GMT
            Not After : Feb 25 06:48:02 2027 GMT
        Subject: CN=699e9b26-116f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:81:7f:9e:16:c4:53:4a:99:2b:db:e2:1a:cb:
                    16:8f:99:e7:58:fc:21:9d:c0:e1:3b:23:63:cd:74:
                    86:74:cc:6f:05:ae:18:d2:d4:e6:b9:96:78:7c:04:
                    6d:9e:32:2b:de:5d:e8:16:22:24:ea:aa:05:59:24:
                    cf:63:f8:9c:75:3e:7a:be:a8:64:4c:eb:38:d5:59:
                    5f:67:0e:79:07:ac:13:b3:2a:ff:8f:6c:58:24:82:
                    96:97:11:a2:29:2a:2f:56:2c:c0:17:ce:4e:7f:2a:
                    86:2f:27:d4:53:a0:8f:86:a9:4e:e4:84:f5:92:82:
                    25:bf:a3:c2:c0:6b:d0:97:a2:e8:79:dd:53:32:72:
                    88:f3:ea:0c:96:2b:0c:42:4e:96:87:d9:00:23:81:
                    65:12:78:f7:e4:c5:ef:8c:c5:a2:6c:06:ae:b7:4f:
                    35:74:62:47:2a:2a:11:5f:c4:ab:e6:bf:62:1b:30:
                    65:07:65:54:f9:c5:19:62:2f:28:a2:ea:0e:24:d2:
                    42:c0:bd:14:9f:b9:d5:cd:5c:5e:c7:65:f6:1e:81:
                    89:f9:9d:ab:ff:af:2f:12:15:73:2f:52:2f:57:d5:
                    8e:8a:bb:84:25:ae:c9:9a:c6:40:1e:1a:23:96:f5:
                    51:74:d3:3b:2f:39:48:43:cf:2d:63:aa:da:0c:2b:
                    ec:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0E:9F:92:36:B5:39:8E:4C:4E:7E:12:7A:58:16:A0:5D:E4:92:E3
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F03CF05E121511F1AFDE23BEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:c2:ff:6a:15:b4:84:aa:af:09:13:6b:02:9b:86:bf:db:07:
         31:b1:cd:d0:c5:d0:d5:41:10:52:81:74:67:a8:00:9a:ac:3d:
         0d:e9:6d:f2:a2:9f:76:a3:ea:c0:e2:22:e2:3d:54:50:22:7e:
         7a:f8:68:70:ba:84:ae:3c:75:fe:89:6e:8f:9f:76:ff:11:02:
         39:64:51:72:1e:ed:57:6e:1e:bf:9f:9d:d4:ee:69:48:77:31:
         c3:0c:45:2a:34:15:0e:f3:6f:9f:c7:33:7a:51:d1:cb:92:6b:
         bc:7c:13:3d:f0:3d:89:5d:bd:e4:bf:50:43:ce:ea:38:17:d9:
         de:a8:15:8a:f0:32:ae:64:60:ba:16:fd:6a:63:c8:76:ef:19:
         49:c7:c4:04:c1:e5:da:03:b3:f5:c5:85:88:90:4d:ae:b6:0e:
         ff:3d:f9:8f:ab:7f:55:4d:5b:d5:c3:99:61:aa:95:2b:d8:33:
         da:cc:7f:20:06:b0:55:47:7b:8e:91:aa:e6:e1:46:5a:cb:2c:
         d7:8b:29:ad:76:f6:75:cc:4d:d7:ea:d4:40:5b:fe:21:c5:f3:
         34:7e:b5:64:85:30:f5:96:0f:6e:5a:25:3b:10:c3:9b:48:f8:
         ae:71:84:87:f1:eb:36:90:c3:d1:7f:ac:7c:8d:d7:f7:84:7f:
         eb:d6:85:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:09 2026 by rpki-client