Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4C184C40479D11F1A9FD30D8CE1D38B0.roa
File:                     4C184C40479D11F1A9FD30D8CE1D38B0.roa (raw, json)
Hash identifier:          TdXv//vMxnObGK5tfT1/A3URua3P99LFmAK49ecfOr4=
Subject key identifier:   62:E6:EC:C2:ED:75:17:24:B6:BB:7A:B7:26:BD:A3:26:B4:DB:66:F8
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1116
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4C184C40479D11F1A9FD30D8CE1D38B0.roa
Signing time:             Mon 04 May 2026 09:40:34 +0000
ROA not before:           Mon 04 May 2026 09:40:29 +0000
ROA not after:            Wed 05 May 2027 09:40:29 +0000
asID:                     55154
IP address blocks:        102.135.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 10:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4374 (0x1116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May  4 09:40:29 2026 GMT
            Not After : May  5 09:40:29 2027 GMT
        Subject: CN=69f86992-a8fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:92:35:ed:df:ff:b5:bb:fe:cb:ae:02:a8:14:
                    36:a1:88:e2:e9:08:32:5a:63:24:d1:31:e6:e9:f7:
                    c2:1b:2a:be:dd:7c:e6:23:40:e8:ae:a7:60:2b:ff:
                    d0:27:0e:1b:a2:e1:0c:f0:63:95:87:63:b4:f7:56:
                    d9:6d:f1:5a:cb:75:29:87:77:13:df:d8:e4:96:6a:
                    9a:e1:39:71:0f:0c:0c:1e:36:cf:06:78:dc:0f:56:
                    08:b6:27:35:85:4a:70:07:9f:fa:13:e0:1f:4a:ed:
                    0f:1d:80:36:7d:64:14:30:10:99:5c:82:1b:28:5b:
                    3c:08:7b:d4:8b:58:7a:96:f3:26:33:2d:2f:15:86:
                    5f:44:1a:a5:bc:a0:e7:66:df:5f:0b:1b:1b:c6:b0:
                    43:2b:98:3d:d8:f8:4a:e3:b6:a9:c7:32:95:19:d1:
                    12:c6:7b:31:79:53:40:27:b7:2f:a3:44:7e:cf:da:
                    29:65:85:a2:09:22:77:ad:ff:04:3f:fd:24:0a:ec:
                    4b:4c:87:66:cc:f8:ee:42:58:04:1f:21:93:02:1f:
                    40:69:cc:ae:1a:bd:0c:5f:0e:47:46:b0:d0:ae:ba:
                    11:b6:23:b1:e3:d0:44:28:7b:47:1f:e0:47:81:36:
                    74:e6:4f:08:b0:af:db:d6:38:89:08:13:3d:c8:3e:
                    dd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E6:EC:C2:ED:75:17:24:B6:BB:7A:B7:26:BD:A3:26:B4:DB:66:F8
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4C184C40479D11F1A9FD30D8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:41:15:b9:c6:a5:f9:0c:95:0f:ab:24:74:dd:5d:ce:59:4d:
         17:92:1c:25:6f:a8:02:2c:af:0e:1f:ec:45:a1:8c:1e:e6:3e:
         02:c4:4e:83:4a:ba:3d:85:3f:9e:27:13:10:e3:1e:55:16:a9:
         02:64:cc:3c:9b:8c:1c:57:36:49:d0:cb:0d:ce:7a:67:0b:db:
         5d:44:56:d7:8f:92:22:8a:30:89:f0:d7:85:6e:07:72:48:31:
         4b:a3:01:d5:97:e7:b0:6c:5b:70:04:3d:39:50:80:c5:ce:9d:
         6f:df:33:7b:f1:ff:61:52:af:e8:50:b4:5e:58:5a:b0:71:78:
         cc:75:19:10:9f:3d:f4:6d:c4:ae:67:a8:13:a9:75:61:5e:6c:
         c6:67:ea:eb:cb:99:25:03:5e:f1:67:bf:c3:b6:60:85:da:a3:
         31:c3:b3:94:64:d3:f8:9c:9a:d7:32:a9:39:07:c7:5a:83:55:
         a5:86:36:7f:24:47:4d:76:ed:b5:4e:75:e8:4b:f1:34:1f:d3:
         f5:bc:00:c6:19:86:76:1e:aa:ff:72:4e:73:f5:28:cc:af:e7:
         ce:5c:ad:22:9f:70:86:1e:ea:22:73:56:49:ef:55:c5:03:8e:
         76:27:4b:af:b7:76:f9:ea:63:d6:99:2e:66:07:e4:a5:ab:3e:
         69:56:da:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:28 2026 by rpki-client