Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/66210B028F9E11F0B6F336A2DAE4EC9C.roa
File:                     66210B028F9E11F0B6F336A2DAE4EC9C.roa (raw, json)
Hash identifier:          X0Wimyntw3pdExOiNGtQhKoPGLKaRPhGU8L/WAwf1Vk=
Subject key identifier:   9A:7C:78:BE:24:D3:D9:70:CD:63:77:6A:2C:53:BB:F2:1A:A2:54:69
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0E3D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/66210B028F9E11F0B6F336A2DAE4EC9C.roa
Signing time:             Fri 12 Sep 2025 06:04:53 +0000
ROA not before:           Fri 12 Sep 2025 06:04:48 +0000
ROA not after:            Fri 11 Sep 2026 06:04:48 +0000
asID:                     214693
IP address blocks:        102.135.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3645 (0xe3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Sep 12 06:04:48 2025 GMT
            Not After : Sep 11 06:04:48 2026 GMT
        Subject: CN=68c3b805-6018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:57:54:88:f6:22:99:27:f6:1f:80:39:ce:
                    43:f4:3a:24:c2:f5:fb:7c:15:84:e9:d5:db:d3:64:
                    e1:89:83:83:21:07:1c:56:cb:2e:17:43:1c:67:1d:
                    0b:27:77:7c:e5:ea:a5:90:5b:ee:e3:d6:b5:a6:41:
                    c1:3a:3e:72:25:7e:17:6e:ab:49:e7:4e:40:d2:56:
                    a4:17:26:ed:8c:99:9f:99:fc:ef:52:e8:4b:83:e0:
                    24:52:de:98:6e:40:ec:b2:ea:10:11:af:cd:d6:80:
                    52:82:7b:8c:df:70:ee:b9:19:53:d9:4b:d9:33:ec:
                    be:11:df:de:d1:28:46:86:cf:e2:1c:b8:f9:ad:7b:
                    48:bf:28:6c:81:b6:c4:10:b0:42:13:8c:e0:7b:d7:
                    11:89:cf:41:a6:17:cc:e3:74:50:35:fa:b3:1a:80:
                    7e:2b:05:aa:71:b9:30:9a:bc:9d:dc:30:99:7e:90:
                    77:e9:d9:5a:fb:6d:04:24:8f:7c:a5:a6:0c:cf:e2:
                    c7:22:d9:3c:ba:81:c2:c0:c9:83:db:b4:7c:57:6d:
                    23:1d:48:f5:10:19:f5:84:c9:1c:b4:a0:77:e7:0a:
                    c4:0d:45:be:21:85:09:70:4b:30:c1:61:f9:64:d0:
                    71:64:6b:e2:45:62:d2:45:9a:85:72:1a:0e:8b:5b:
                    ff:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7C:78:BE:24:D3:D9:70:CD:63:77:6A:2C:53:BB:F2:1A:A2:54:69
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/66210B028F9E11F0B6F336A2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:88:6f:7d:88:65:c6:76:4e:77:7b:75:94:ae:fd:97:8a:8e:
         34:36:77:31:96:3c:f3:37:8d:f7:5c:fc:85:58:2b:5f:2b:59:
         c6:17:df:f3:02:85:c7:e3:4e:42:c9:9f:7d:3d:93:c5:e3:56:
         a8:e3:a3:c2:55:f3:ac:27:25:65:24:95:b2:18:1a:dc:04:31:
         3b:27:d4:fe:fd:2e:f4:11:dd:d7:ad:15:98:15:ec:f3:69:ea:
         9c:aa:68:4b:b8:fd:44:ca:2d:18:c9:8e:42:54:43:7c:ad:59:
         1e:17:f4:70:1d:e5:fd:98:bd:b4:e0:0e:48:ca:41:41:a6:a1:
         3e:88:f3:02:a4:b8:7b:77:53:4a:d4:a5:88:7a:e0:e4:e4:79:
         03:35:be:b6:b9:94:d3:6d:7b:63:51:d2:84:8b:e5:1c:a3:9c:
         5f:ef:1b:0b:5b:65:50:83:9a:11:30:eb:2c:be:12:d9:a9:5e:
         d6:0e:f7:29:f8:53:b3:8e:15:d3:e3:d9:0d:8a:cf:fa:6c:b1:
         a9:e7:0c:c8:da:01:c4:95:e2:88:7d:76:c3:79:77:97:46:f5:
         0c:ea:19:ed:50:be:28:0f:0c:f3:9c:ca:20:e2:ef:07:2d:a9:
         0b:11:df:e6:1d:d0:e8:fd:12:d7:8a:e9:8c:af:d5:2b:ae:e7:
         87:6a:ce:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:13 2025 by rpki-client