Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1CC85844479E11F199AC24DECE1D38B0.roa
File:                     1CC85844479E11F199AC24DECE1D38B0.roa (raw, json)
Hash identifier:          /VkkJbk9OJPwS3znFHHH3SEp9ZKaeypz2qadMvLGaxw=
Subject key identifier:   6F:B8:D8:93:22:36:5B:B6:44:86:EB:EA:D0:7E:9C:5F:EF:57:D2:28
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1124
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1CC85844479E11F199AC24DECE1D38B0.roa
Signing time:             Mon 04 May 2026 09:46:24 +0000
ROA not before:           Mon 04 May 2026 09:46:20 +0000
ROA not after:            Wed 05 May 2027 09:46:20 +0000
asID:                     55154
IP address blocks:        102.135.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 10:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4388 (0x1124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May  4 09:46:20 2026 GMT
            Not After : May  5 09:46:20 2027 GMT
        Subject: CN=69f86af0-c56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1e:55:7c:bc:c2:33:f8:ae:c2:4d:54:98:00:
                    fd:3d:a1:73:fa:ea:41:5b:b5:d6:b9:89:fa:b0:aa:
                    47:37:55:ef:3a:30:db:41:a2:1c:8c:d6:a7:a0:65:
                    17:6e:34:89:4a:30:75:d8:95:18:4a:d8:9c:d3:38:
                    06:8e:60:b2:30:bb:bc:d9:e4:de:9b:59:91:70:da:
                    00:2b:1c:55:ba:40:31:14:ef:c2:08:17:05:a9:e7:
                    77:b5:61:64:ca:3b:d4:22:44:10:f8:8f:7b:a7:8b:
                    c9:b4:80:ee:be:c4:3c:81:f0:03:2f:72:ac:e6:8e:
                    13:b3:46:e9:c8:60:5b:af:f6:e5:e6:6f:8c:e8:45:
                    42:4e:91:55:9c:17:73:37:2c:c9:13:87:31:68:2d:
                    2d:55:74:b3:c9:c4:01:47:16:c6:2f:f9:76:a6:41:
                    ee:d8:fb:63:f6:9e:6e:31:2f:5d:64:91:ad:ff:d7:
                    aa:7c:d3:9a:74:bb:b6:db:28:99:22:2e:8a:4b:25:
                    e4:0d:26:38:55:66:84:2c:aa:74:00:42:3f:1f:25:
                    7a:b3:3e:fe:e6:95:d0:48:c1:82:cc:ab:bb:25:a7:
                    03:d8:a4:90:c8:f7:3f:6f:ed:3a:6b:4c:ce:34:2f:
                    a7:dc:16:6e:d8:84:f8:63:b2:11:80:d0:a4:8d:4b:
                    6c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B8:D8:93:22:36:5B:B6:44:86:EB:EA:D0:7E:9C:5F:EF:57:D2:28
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1CC85844479E11F199AC24DECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:d2:9e:dd:e6:f0:fa:bb:38:57:b5:4b:ae:2f:be:fb:f8:0e:
         e3:a5:a0:46:0e:d4:e1:78:98:4e:b5:63:81:79:bd:93:0f:75:
         14:d5:4e:16:ec:2c:e6:b7:3a:a9:9b:b3:d3:64:06:1f:27:66:
         fa:a8:18:4c:08:64:00:21:d7:f9:20:54:23:6e:76:67:c8:0a:
         c1:b6:0b:12:06:2a:c7:51:e1:27:dd:d7:05:d4:a9:45:13:bd:
         54:69:fe:43:4c:59:eb:23:27:ae:6e:42:11:7b:f8:20:93:66:
         ef:9b:94:59:ce:03:39:e3:2c:0e:f8:ee:e8:d4:50:a8:1c:31:
         10:45:ea:f2:b0:43:df:57:b3:d7:9c:74:d9:2e:a5:02:b3:64:
         1c:3f:db:b3:1b:58:89:53:1e:a9:8f:68:2b:15:21:24:af:f7:
         53:3d:33:70:d7:ae:50:65:64:68:6c:50:88:91:24:58:82:0d:
         57:c8:af:be:2a:af:ca:e9:7d:05:2f:d9:b3:cb:ab:17:74:4c:
         19:cf:d4:71:6f:a6:02:92:3d:f3:0c:55:24:4a:96:18:bb:6a:
         d2:6c:ed:5c:1f:e2:05:5c:55:ed:4a:94:01:74:9e:b7:81:64:
         7a:d4:52:59:f6:65:28:2c:be:bd:fe:37:02:96:4a:b2:5f:ab:
         dc:9a:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:58:54 2026 by rpki-client