Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2508CCF2425111F198D7F116CF1D38B0.roa
File:                     2508CCF2425111F198D7F116CF1D38B0.roa (raw, json)
Hash identifier:          BUCMDAEj7OgWrKMlCFUugT7F7vdj9onM4baWrvCznrA=
Subject key identifier:   98:2F:8D:B8:B0:7B:3C:4C:46:01:B4:DC:22:A2:AC:E0:1F:15:0B:A6
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       10F2
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2508CCF2425111F198D7F116CF1D38B0.roa
Signing time:             Mon 27 Apr 2026 15:52:51 +0000
ROA not before:           Mon 27 Apr 2026 15:52:46 +0000
ROA not after:            Tue 27 Apr 2027 15:52:46 +0000
asID:                     834
IP address blocks:        102.135.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 10:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4338 (0x10f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Apr 27 15:52:46 2026 GMT
            Not After : Apr 27 15:52:46 2027 GMT
        Subject: CN=69ef8653-640e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d7:97:15:65:b5:9c:e0:77:77:8b:01:f3:37:
                    46:78:21:98:a6:ca:8a:3b:43:1e:0d:73:3f:ae:e0:
                    1e:a2:8b:9f:02:69:84:bd:5d:1a:c4:70:01:97:44:
                    d4:21:cf:00:74:3c:60:b6:34:69:4d:91:2f:a8:4f:
                    ce:13:77:18:5c:55:c7:e3:08:77:eb:bf:d1:fb:e4:
                    0c:b3:ee:52:00:df:95:7c:77:5e:51:6d:fb:9b:9b:
                    73:23:86:73:da:8e:a3:12:07:1e:62:15:cf:be:58:
                    74:f8:5a:61:80:9a:c7:6a:98:d6:bc:9b:bd:52:2f:
                    d9:36:c2:68:66:2a:59:8d:e8:ff:13:33:4a:17:51:
                    52:66:74:75:5f:f1:59:b4:3f:b6:93:26:e7:cf:1f:
                    e4:29:fc:3f:b9:66:b9:2f:23:eb:bf:fe:d3:ff:c0:
                    9c:d6:d6:3d:a8:f6:e9:bc:ca:ca:b8:71:0c:6b:36:
                    45:34:eb:09:4d:25:c6:29:d9:58:61:78:81:83:b0:
                    cf:0a:5d:d0:7a:6b:4e:8d:58:87:b2:7c:a6:cb:fe:
                    34:70:76:e2:a5:0d:1d:fd:0a:d4:f7:43:a1:d6:3e:
                    ab:53:a8:f4:20:c4:c5:7a:d2:f7:ac:22:a7:d4:03:
                    56:8f:37:b5:5b:8a:16:99:4e:20:24:0e:aa:ae:3b:
                    c7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2F:8D:B8:B0:7B:3C:4C:46:01:B4:DC:22:A2:AC:E0:1F:15:0B:A6
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2508CCF2425111F198D7F116CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:97:ec:a3:15:14:cc:0f:dd:bf:bb:64:c4:d4:08:c0:0a:1b:
         25:c7:a2:a1:45:d0:0f:75:29:95:db:fa:67:10:79:b3:f5:66:
         17:61:84:84:48:2e:0f:1e:09:fa:db:76:cc:22:99:f0:98:c0:
         b6:3b:88:77:de:1f:54:47:d6:d8:b9:66:14:75:26:5a:1b:c4:
         78:0d:9d:ed:59:71:78:ef:4e:b1:c8:15:df:2f:af:44:c9:fe:
         42:d9:9c:44:d3:72:a5:de:df:7d:e3:fa:c2:d6:2a:33:99:34:
         ab:77:dc:50:1d:e4:be:17:12:be:ff:de:ee:e2:3f:14:fe:5f:
         cb:9b:df:df:84:a7:98:3b:88:0c:32:4e:fe:69:18:bb:2b:02:
         57:b1:98:2c:e6:52:6f:b0:f2:ac:ca:02:82:18:7c:54:f2:ed:
         21:21:b1:a0:eb:a2:fa:87:9b:7a:e8:ba:67:9b:e1:0b:70:33:
         da:a7:98:8b:f4:5e:e3:79:eb:ba:69:de:5c:66:31:0d:a1:c5:
         40:d7:73:63:ac:13:f1:d0:ce:62:e0:d2:e3:f1:af:c3:e9:79:
         6e:b8:49:67:dc:81:a7:14:87:fb:28:1b:b8:1e:4d:19:cb:af:
         32:fa:62:e7:ce:94:73:5b:50:bb:9a:e3:e1:85:b0:3d:23:c6:
         ce:61:8b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:23 2026 by rpki-client