Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5F9772DAAB1E11F08EF5E889DAE4EC9C.roa
File:                     5F9772DAAB1E11F08EF5E889DAE4EC9C.roa (raw, json)
Hash identifier:          Ip0v36Dho5AyEJUghSdQEL5O4Td0P31qvlY1LpG0rbU=
Subject key identifier:   58:04:94:08:8A:23:CA:63:E6:28:1D:9E:19:81:56:2C:CD:F4:39:0B
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0EF7
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5F9772DAAB1E11F08EF5E889DAE4EC9C.roa
Signing time:             Fri 17 Oct 2025 05:59:00 +0000
ROA not before:           Fri 17 Oct 2025 05:58:54 +0000
ROA not after:            Fri 16 Oct 2026 05:58:54 +0000
asID:                     208185
IP address blocks:        102.135.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 02:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3831 (0xef7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Oct 17 05:58:54 2025 GMT
            Not After : Oct 16 05:58:54 2026 GMT
        Subject: CN=68f1db24-d48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:09:84:1a:c0:9c:05:ae:3f:ab:65:4d:99:
                    eb:37:9f:18:fe:6c:a7:9e:c7:63:94:ca:88:61:13:
                    f3:ac:40:bc:7a:b1:ba:82:e1:98:1a:f0:fb:b9:78:
                    1b:7c:55:0f:47:73:ad:7a:65:56:ae:3d:a0:83:9b:
                    35:28:4a:62:07:ad:41:f8:77:9f:4b:88:dd:c5:c8:
                    b1:7d:b3:e9:e2:ae:bf:56:d4:1e:16:4e:4c:83:cf:
                    84:1a:95:a1:2c:94:24:3a:9e:46:67:6b:09:2f:5d:
                    fa:72:94:40:a1:5b:84:fc:57:d2:14:5f:55:42:3a:
                    df:bc:2f:e7:7d:c3:4a:59:1d:17:14:53:99:e6:fe:
                    87:3c:ce:a1:fc:0f:4a:32:79:0c:d6:4a:e5:9c:16:
                    76:72:bc:c0:4d:27:32:89:d6:b0:07:6a:39:7a:92:
                    7d:25:b3:0a:94:b4:68:f2:4e:0d:09:c8:16:e5:0f:
                    68:52:88:bd:6e:56:6b:52:1f:0e:f6:af:db:ba:79:
                    48:bc:fd:29:15:71:cc:b6:cd:da:35:50:d4:50:a2:
                    6a:26:0a:f5:20:89:55:59:98:93:2a:7e:3b:a6:4c:
                    d6:d2:67:2a:e5:c5:09:16:56:22:c9:ea:74:cd:6c:
                    de:77:6b:3a:0b:9d:59:fb:9c:11:f9:dc:f2:ec:e2:
                    4c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:04:94:08:8A:23:CA:63:E6:28:1D:9E:19:81:56:2C:CD:F4:39:0B
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5F9772DAAB1E11F08EF5E889DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:d1:7f:b1:1b:b7:36:ad:de:47:a3:cf:ae:88:f2:3a:0e:e3:
         74:93:5f:82:2a:cf:a1:31:09:98:a2:a4:05:40:5c:3e:f5:b2:
         5a:9b:49:de:c6:9a:8e:f9:a0:40:7b:f6:b8:e0:ed:fb:75:7d:
         0b:56:6d:e6:f6:9f:b1:d1:11:13:b5:69:ab:25:d0:ba:e0:06:
         b5:07:4d:e9:b6:bb:a1:43:00:83:35:ec:50:47:c9:7c:83:ce:
         8d:4b:ac:bd:60:5b:49:95:4d:df:b1:b8:30:35:e0:d6:0b:1e:
         11:bc:ed:5c:fc:93:f0:64:40:8d:c7:88:ac:cb:c7:89:b1:d2:
         28:ac:dc:b9:25:68:11:79:49:5c:99:c8:5e:87:92:4c:20:5f:
         3c:fc:73:58:33:b3:ce:64:52:16:d8:54:ff:e9:f9:a7:ae:e6:
         d2:e2:54:77:c8:cf:40:c8:7a:37:bb:0f:14:44:ca:eb:fb:5d:
         48:ed:d8:31:aa:1a:6c:c3:34:f1:4d:61:16:f4:83:27:bd:cf:
         18:bb:0b:39:e4:43:18:a3:d3:f8:e3:d4:ee:10:2f:79:4f:d5:
         0a:ef:c0:78:b4:4a:68:53:4f:fb:13:cf:cc:4f:94:44:31:9f:
         09:03:76:1d:43:cd:25:5f:6a:58:61:ff:4f:09:77:7a:8a:e6:
         17:6e:e4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:32 2025 by rpki-client