Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/65056A9E479D11F183EDFED9CE1D38B0.roa
File:                     65056A9E479D11F183EDFED9CE1D38B0.roa (raw, json)
Hash identifier:          DzrvLxTfS90powfM1n2LkKoh88SQveO/O8cr9avyx6g=
Subject key identifier:   FE:E1:05:4A:27:61:C7:EE:FB:35:94:56:42:9F:51:43:1C:F1:0F:00
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       111A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/65056A9E479D11F183EDFED9CE1D38B0.roa
Signing time:             Mon 04 May 2026 09:41:16 +0000
ROA not before:           Mon 04 May 2026 09:41:11 +0000
ROA not after:            Wed 05 May 2027 09:41:11 +0000
asID:                     55154
IP address blocks:        102.135.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 10:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4378 (0x111a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May  4 09:41:11 2026 GMT
            Not After : May  5 09:41:11 2027 GMT
        Subject: CN=69f869bc-854e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:34:f3:22:33:e0:92:c7:99:22:ed:ee:93:
                    5b:ac:4a:20:66:e0:ea:89:ed:38:03:5f:49:6c:31:
                    ff:93:11:fe:05:33:ad:42:8b:e6:38:2d:66:0e:7f:
                    a4:fb:96:20:80:9d:1b:b0:f7:1e:7a:4a:77:dc:07:
                    b9:03:a3:3f:83:66:a3:88:4b:6f:f4:fb:21:1c:fd:
                    71:19:a6:ea:84:a4:57:8b:57:98:a9:98:e5:33:89:
                    92:5e:4a:5d:29:b3:95:d8:2e:9a:90:6b:12:7b:f4:
                    ca:0f:0e:2f:d8:cb:30:68:55:f8:53:08:49:70:c9:
                    f9:c3:89:52:e6:e9:5d:36:23:31:44:24:c5:0a:3c:
                    8f:da:49:9e:fa:2e:6f:89:8a:ff:9c:0a:94:34:72:
                    d3:dc:67:23:a4:df:3a:0b:e6:53:3d:d6:5c:50:46:
                    90:f0:2c:3f:9e:ee:c1:7f:82:c4:69:16:17:ab:e3:
                    10:18:69:7d:3f:59:ae:22:fe:ae:dc:ed:91:e5:57:
                    0d:86:a0:9e:47:84:ce:62:29:12:5d:31:1b:5d:31:
                    69:e6:af:2b:e0:d6:62:15:07:dc:75:ee:6e:ec:31:
                    a8:31:8f:2b:ca:74:a6:f7:45:c6:7b:7c:5b:04:62:
                    64:6d:39:98:ce:cb:b5:90:79:b1:8f:e6:41:75:d0:
                    12:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E1:05:4A:27:61:C7:EE:FB:35:94:56:42:9F:51:43:1C:F1:0F:00
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/65056A9E479D11F183EDFED9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:4c:c4:93:a9:4c:6d:56:ea:43:64:74:74:54:b6:24:27:47:
         1b:f4:95:b9:d4:80:ce:6f:01:3e:02:83:d9:12:97:c6:07:b8:
         61:76:a3:ac:7d:8d:52:14:ac:40:6f:d1:75:c0:17:c4:8b:99:
         70:b2:02:fa:2d:c7:a8:c2:0c:60:59:0f:2f:66:8f:fb:10:40:
         46:96:5a:fd:32:69:b1:8b:b3:84:df:87:89:d8:c1:60:94:b3:
         f5:e0:4c:ff:1f:1c:ea:d3:e8:05:38:27:fa:38:47:b2:81:04:
         b9:e0:d2:2e:fb:df:45:d0:95:9c:87:ec:0f:a3:35:25:02:c3:
         06:d1:d3:09:b8:86:c9:82:ef:d0:fd:8d:d2:00:66:34:f6:0d:
         e4:aa:30:7c:af:e7:5d:50:01:5b:c8:b6:54:d2:02:64:a8:78:
         53:a4:42:79:93:53:e5:a7:80:2a:4c:0c:08:a2:d8:62:84:07:
         fa:22:c0:1e:a9:b6:63:a5:ab:96:91:21:a2:bd:f4:65:62:0f:
         b5:fb:b7:23:88:64:12:01:df:14:d0:65:e6:19:01:73:fc:bd:
         e9:e1:08:ff:fc:c7:a9:84:e9:9f:05:79:87:e8:56:b8:2d:58:
         59:1b:0b:95:c4:dc:0c:31:ad:ec:67:46:ef:70:f6:7e:c5:2a:
         37:ff:d8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:26 2026 by rpki-client