Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1E1CAB2C479A11F1BB439FC4CE1D38B0.roa
File:                     1E1CAB2C479A11F1BB439FC4CE1D38B0.roa (raw, json)
Hash identifier:          pGXTkOU2+QckCUEmAMAml4drEPPXm9CbFHubbZpNbSE=
Subject key identifier:   74:E5:35:15:0E:30:E3:AD:F6:C5:23:02:A1:68:4C:B4:E8:8A:9E:04
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       110E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1E1CAB2C479A11F1BB439FC4CE1D38B0.roa
Signing time:             Mon 04 May 2026 09:17:48 +0000
ROA not before:           Mon 04 May 2026 09:17:44 +0000
ROA not after:            Wed 05 May 2027 09:17:44 +0000
asID:                     55154
IP address blocks:        196.251.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 10:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4366 (0x110e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May  4 09:17:44 2026 GMT
            Not After : May  5 09:17:44 2027 GMT
        Subject: CN=69f8643c-5a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:81:c7:d0:f0:fe:d6:a4:75:1e:e7:1a:82:02:
                    b1:93:81:0d:f4:7c:e7:a3:e6:94:77:54:72:1d:70:
                    01:08:d1:25:9d:dc:d8:91:13:10:4e:cd:be:83:e9:
                    37:f7:e6:de:74:d3:80:5d:31:81:fe:6e:31:45:eb:
                    ec:45:eb:c6:47:8c:2c:8c:5b:28:cb:22:75:1e:40:
                    99:29:c4:c2:1d:08:22:9f:44:9c:f8:43:46:0d:08:
                    b7:3c:85:0a:43:bf:b2:60:7d:e0:6c:8b:7e:07:be:
                    7d:09:45:44:cc:f4:63:90:a5:7f:3a:88:13:1b:a7:
                    90:d3:77:a4:3a:74:32:c1:79:32:7c:e5:db:ae:1b:
                    4d:f7:9c:a2:12:49:c4:43:1c:09:94:c7:32:e3:64:
                    23:91:40:66:22:33:38:2e:1f:fd:0e:c5:4b:57:a8:
                    94:e2:47:13:f9:3e:ab:e4:e0:d4:57:8d:c7:3c:63:
                    c0:6a:6a:c0:69:47:20:86:8f:88:c5:84:34:59:06:
                    c7:f6:e7:e7:72:09:77:55:7c:f5:fa:a7:58:02:69:
                    fe:ae:3f:0e:76:a0:b7:a0:d9:65:0b:58:eb:50:e2:
                    bb:d9:44:9d:7d:63:c9:4d:b1:1b:92:a3:be:91:7b:
                    92:1d:39:f1:36:c7:05:1c:91:a9:15:ef:4a:98:d7:
                    9b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E5:35:15:0E:30:E3:AD:F6:C5:23:02:A1:68:4C:B4:E8:8A:9E:04
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1E1CAB2C479A11F1BB439FC4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:f3:2e:95:06:e0:a7:4a:5a:14:ec:e1:0a:be:cc:5e:8f:57:
         59:7f:97:20:e1:4a:b5:cf:9a:2d:70:11:b5:5d:e5:99:92:ff:
         e8:b4:9b:87:ec:e0:a0:c2:cd:47:5e:83:85:03:19:4a:8b:01:
         91:e0:74:ac:c3:da:57:14:9d:73:9d:68:75:a2:fa:61:0e:9e:
         05:53:4f:16:28:4f:6c:41:4d:20:b7:47:f2:82:44:92:3c:d8:
         40:b9:25:84:3f:ee:c7:45:16:a2:fc:9c:83:59:b2:9f:82:6f:
         f5:b7:ce:4b:9a:1b:6c:ee:f9:2c:7d:62:00:3f:0b:1a:1e:00:
         fa:d8:74:6d:8a:fd:88:38:0c:05:d9:4a:61:59:28:24:2b:17:
         72:10:07:eb:de:2b:6c:8b:20:18:2f:b0:72:ea:90:6c:bd:ec:
         b0:3c:e5:6e:14:f7:fb:67:00:fa:4c:16:03:8a:fe:43:1e:d3:
         4f:00:cc:3d:c0:0e:ba:19:c9:4f:11:03:b5:84:bb:2d:bd:5d:
         c8:b5:af:74:d4:52:1f:0a:e9:d3:fe:4d:e9:53:70:7e:77:a2:
         f3:58:c2:2b:53:6d:a8:c8:c7:d6:98:01:85:1d:d7:30:9b:bf:
         c5:98:9c:f4:3c:c6:e8:08:2b:03:ba:35:29:ac:74:69:c2:50:
         2e:76:4d:8e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEQ4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNjA1MDQwOTE3NDRaFw0yNzA1MDUwOTE3NDRaMBgxFjAU
BgNVBAMTDTY5Zjg2NDNjLTVhOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD8gcfQ8P7WpHUe5xqCArGTgQ30fOej5pR3VHIdcAEI0SWd3NiRExBOzb6D
6Tf35t5004BdMYH+bjFF6+xF68ZHjCyMWyjLInUeQJkpxMIdCCKfRJz4Q0YNCLc8
hQpDv7JgfeBsi34Hvn0JRUTM9GOQpX86iBMbp5DTd6Q6dDLBeTJ85duuG033nKIS
ScRDHAmUxzLjZCORQGYiMzguH/0OxUtXqJTiRxP5Pqvk4NRXjcc8Y8BqasBpRyCG
j4jFhDRZBsf25+dyCXdVfPX6p1gCaf6uPw52oLeg2WULWOtQ4rvZRJ19Y8lNsRuS
o76Re5IdOfE2xwUckakV70qY15utAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUdOU1
FQ4w4632xSMCoWhMtOiKngQwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzFFMUNBQjJDNDc5QTExRjFCQjQzOUZDNENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+1MwDQYJKoZIhvcNAQEL
BQADggEBACnzLpUG4KdKWhTs4Qq+zF6PV1l/lyDhSrXPmi1wEbVd5ZmS/+i0m4fs
4KDCzUdeg4UDGUqLAZHgdKzD2lcUnXOdaHWi+mEOngVTTxYoT2xBTSC3R/KCRJI8
2EC5JYQ/7sdFFqL8nINZsp+Cb/W3zkuaG2zu+Sx9YgA/CxoeAPrYdG2K/Yg4DAXZ
SmFZKCQrF3IQB+veK2yLIBgvsHLqkGy97LA85W4U9/tnAPpMFgOK/kMe008AzD3A
DroZyU8RA7WEuy29Xci1r3TUUh8K6dP+TelTcH53ovNYwitTbajIx9aYAYUd1zCb
v8WYnPQ8xugIKwO6NSmsdGnCUC52TY4=
-----END CERTIFICATE-----
Generated at Wed May 13 03:51:47 2026 by rpki-client