Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/47C08AE07D9511F0B4BCCCF0DAE4EC9C.roa
File:                     47C08AE07D9511F0B4BCCCF0DAE4EC9C.roa (raw, json)
Hash identifier:          sKMe+AxAJHsenm7cBb3eWqncf7Hc1tJ3lQXylywoRlQ=
Subject key identifier:   DF:3F:29:6B:9F:E4:95:35:A9:C5:56:5C:19:B2:94:38:EF:43:EB:93
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0D09
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/47C08AE07D9511F0B4BCCCF0DAE4EC9C.roa
Signing time:             Wed 20 Aug 2025 07:14:16 +0000
ROA not before:           Wed 20 Aug 2025 07:14:11 +0000
ROA not after:            Thu 20 Aug 2026 07:14:11 +0000
asID:                     398704
IP address blocks:        102.135.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3337 (0xd09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Aug 20 07:14:11 2025 GMT
            Not After : Aug 20 07:14:11 2026 GMT
        Subject: CN=68a575c8-d7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:06:8b:25:38:b6:34:82:b9:3e:21:42:95:64:
                    c8:4d:f2:ce:e3:68:81:a6:ed:68:3d:af:26:d4:bb:
                    27:ab:a1:38:0f:3f:ac:f4:92:00:b8:45:1d:65:80:
                    41:30:4a:23:ec:e2:36:87:32:96:cd:13:e2:27:e9:
                    03:e5:d5:e4:e1:2b:bf:24:70:eb:d8:1d:6b:f3:33:
                    e4:9d:f4:2e:fc:3c:ff:4c:04:61:02:b3:24:9f:bf:
                    a1:45:ba:39:08:45:b1:0e:1f:60:48:c8:d9:97:93:
                    66:2d:2a:89:af:27:04:98:3b:79:87:d6:92:45:22:
                    8c:ce:32:5a:90:c9:76:2e:cb:26:97:ef:47:13:ca:
                    5d:7d:d8:b0:2a:b1:f5:48:dd:d6:e1:3e:1e:6a:61:
                    0a:71:04:c1:44:37:60:1d:6e:ff:41:77:4e:11:2d:
                    3b:9f:7b:0f:83:13:d7:24:db:0f:e2:03:23:78:bc:
                    32:ab:45:25:87:e1:e0:b6:a2:68:12:ab:72:b7:ff:
                    f5:d8:ca:b6:a5:42:6b:11:bc:2f:fc:7a:1e:df:19:
                    c4:ed:1c:98:76:b9:46:4a:d4:1d:d1:55:85:44:cc:
                    44:07:e7:8a:4d:94:b4:f7:f2:19:49:dc:ed:bb:4a:
                    3d:58:5c:7f:67:81:76:5e:86:ac:d7:ce:69:12:b4:
                    97:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3F:29:6B:9F:E4:95:35:A9:C5:56:5C:19:B2:94:38:EF:43:EB:93
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/47C08AE07D9511F0B4BCCCF0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:02:f1:b3:fe:84:10:89:70:25:72:1f:87:ea:3f:79:f5:d6:
         94:30:3b:85:b9:8a:bb:e0:0b:0c:dd:77:1a:e5:6d:dd:c7:57:
         5e:b8:39:ac:57:61:76:5e:13:26:2e:da:36:f9:39:4a:e7:35:
         63:bd:65:b1:fd:8d:1d:38:3c:89:05:23:a3:5e:b5:9b:35:f7:
         41:f5:e8:60:ce:bf:1c:a1:33:d4:7a:ef:bf:f2:b6:af:44:61:
         6c:f8:78:62:c2:11:47:b7:6a:e6:d7:02:24:03:d4:ee:82:9a:
         c3:11:1f:b6:f2:7c:ec:33:e6:6a:52:bf:f3:04:b5:39:ae:1d:
         36:8c:be:59:72:e1:12:9a:41:6a:b3:1c:99:7a:10:37:7a:ca:
         47:b6:64:8e:e7:60:b9:6d:cd:13:35:0b:a3:35:f9:25:7f:b1:
         bc:20:82:68:7f:55:37:a8:98:0a:e3:cb:c4:b7:bd:ad:49:94:
         e5:d4:26:9e:2e:45:81:42:7b:db:27:4b:80:e3:1d:27:dd:da:
         28:4f:a9:2a:b6:6e:50:29:8e:05:19:30:af:00:37:c6:db:26:
         76:e1:29:e6:68:09:0a:90:20:c1:32:75:d8:71:9c:8d:49:cd:
         6d:67:c3:20:cf:1e:df:ff:66:cf:cf:9d:80:e0:dc:a6:9e:74:
         96:e1:12:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:52:26 2025 by rpki-client