Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/586D0292479D11F1A82737D8CE1D38B0.roa
File:                     586D0292479D11F1A82737D8CE1D38B0.roa (raw, json)
Hash identifier:          m71QVKYEuzkTMoaL9yu62v9QpSNBuroXc30onP9e3ZM=
Subject key identifier:   DB:CF:1E:16:53:1D:1B:90:FF:04:C6:FC:32:A8:00:FE:7D:B4:EB:72
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1118
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/586D0292479D11F1A82737D8CE1D38B0.roa
Signing time:             Mon 04 May 2026 09:40:55 +0000
ROA not before:           Mon 04 May 2026 09:40:50 +0000
ROA not after:            Wed 05 May 2027 09:40:50 +0000
asID:                     55154
IP address blocks:        102.135.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4376 (0x1118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May  4 09:40:50 2026 GMT
            Not After : May  5 09:40:50 2027 GMT
        Subject: CN=69f869a7-8a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2a:ff:c4:07:2d:16:a8:ed:34:aa:84:c9:7b:
                    5b:67:a4:3e:64:28:97:51:f8:75:5a:95:b0:78:e1:
                    fb:39:8c:54:f7:30:36:dd:be:48:d1:eb:0b:c4:12:
                    c0:76:1b:d3:b3:99:8e:5a:fe:8c:9c:ec:4a:3b:70:
                    0e:78:16:70:18:7e:d5:8a:6c:23:9f:74:e9:99:42:
                    c5:be:d5:6f:9a:56:07:5e:3c:d7:67:d2:cf:a8:ee:
                    03:de:5a:c2:4c:32:1d:50:b9:f2:c2:9d:e8:bb:fc:
                    d9:ef:32:67:b4:96:70:66:30:b6:98:6c:dc:13:b1:
                    d7:1f:4c:97:0c:0d:28:90:47:52:6f:4b:07:3a:a0:
                    85:25:0c:62:3e:30:92:74:2e:4c:98:ee:e0:f4:de:
                    8b:6c:71:28:f3:41:36:f5:ff:49:22:63:12:2d:e3:
                    e0:bc:21:32:a2:26:da:4e:86:26:e6:46:d7:4d:2e:
                    8c:78:26:01:82:18:43:19:bb:3d:f1:49:94:a3:29:
                    54:cd:78:ac:42:4f:6f:0c:08:97:c5:e5:95:50:45:
                    16:be:5c:43:fe:2a:7c:a1:6f:82:75:5f:ad:a9:1f:
                    56:09:3c:4f:ed:78:cb:cd:bb:d2:cf:50:2c:6f:c6:
                    2d:6d:4f:36:ba:86:25:21:c2:53:d9:18:03:cf:4a:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CF:1E:16:53:1D:1B:90:FF:04:C6:FC:32:A8:00:FE:7D:B4:EB:72
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/586D0292479D11F1A82737D8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:bb:79:99:05:dc:a1:b9:70:72:79:be:a4:47:49:0b:52:27:
         09:c4:fc:a6:3e:3d:1b:70:04:5c:74:23:52:72:11:6e:3b:13:
         d4:ba:76:d9:df:13:46:8f:32:5b:e6:14:19:ba:4e:ca:df:85:
         cd:50:b2:01:97:81:c0:25:25:f0:b8:73:8f:d2:69:6c:57:6d:
         00:50:8e:f0:f6:56:9c:62:4e:1b:58:75:bc:ae:28:a3:1c:40:
         3e:36:5a:3d:67:04:99:e7:d2:34:2a:21:20:7a:2f:1b:da:b0:
         af:d8:f3:66:ca:9a:f4:ea:27:07:c3:60:62:70:df:61:ff:c8:
         40:6e:4e:ba:bd:48:8e:2e:8c:e3:1c:91:ef:11:8d:95:5c:f0:
         70:fc:b5:7f:f6:52:e4:7d:20:db:8c:80:df:c7:2a:04:a3:f5:
         52:a7:7a:5f:9d:75:63:80:b1:2c:b6:02:4a:5c:61:0c:9b:99:
         55:bb:f8:b4:3d:28:ab:40:28:ce:cc:0d:e1:f0:e5:a3:03:85:
         d4:05:85:f0:dd:51:ee:bb:61:c8:43:20:30:54:41:da:65:38:
         de:ab:e8:71:c1:3f:24:7e:7d:a3:be:0f:0a:bf:f3:ce:02:d3:
         74:51:36:5c:fa:f3:8e:0f:98:3a:94:17:e8:85:d4:1d:2a:ea:
         5c:24:6a:c3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICERgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNjA1MDQwOTQwNTBaFw0yNzA1MDUwOTQwNTBaMBgxFjAU
BgNVBAMTDTY5Zjg2OWE3LThhNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDgKv/EBy0WqO00qoTJe1tnpD5kKJdR+HValbB44fs5jFT3MDbdvkjR6wvE
EsB2G9OzmY5a/oyc7Eo7cA54FnAYftWKbCOfdOmZQsW+1W+aVgdePNdn0s+o7gPe
WsJMMh1QufLCnei7/NnvMme0lnBmMLaYbNwTsdcfTJcMDSiQR1JvSwc6oIUlDGI+
MJJ0LkyY7uD03otscSjzQTb1/0kiYxIt4+C8ITKiJtpOhibmRtdNLox4JgGCGEMZ
uz3xSZSjKVTNeKxCT28MCJfF5ZVQRRa+XEP+Knyhb4J1X62pH1YJPE/teMvNu9LP
UCxvxi1tTza6hiUhwlPZGAPPSqLxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU288e
FlMdG5D/BMb8MqgA/n2063IwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzU4NkQwMjkyNDc5RDExRjFBODI3MzdEOENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh24wDQYJKoZIhvcNAQEL
BQADggEBAFm7eZkF3KG5cHJ5vqRHSQtSJwnE/KY+PRtwBFx0I1JyEW47E9S6dtnf
E0aPMlvmFBm6Tsrfhc1QsgGXgcAlJfC4c4/SaWxXbQBQjvD2VpxiThtYdbyuKKMc
QD42Wj1nBJnn0jQqISB6LxvasK/Y82bKmvTqJwfDYGJw32H/yEBuTrq9SI4ujOMc
ke8RjZVc8HD8tX/2UuR9INuMgN/HKgSj9VKnel+ddWOAsSy2AkpcYQybmVW7+LQ9
KKtAKM7MDeHw5aMDhdQFhfDdUe67YchDIDBUQdplON6r6HHBPyR+faO+Dwq/884C
03RRNlz6844PmDqUF+iF1B0q6lwkasM=
-----END CERTIFICATE-----
Generated at Wed May 13 07:39:30 2026 by rpki-client