Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7483A0BC4B4A11F09BC8187BDAE4EC9C.roa
File:                     7483A0BC4B4A11F09BC8187BDAE4EC9C.roa (raw, json)
Hash identifier:          qU7uEgXf0CjSJtoph1l5p5L81V96eV7A9G75x/YBtx0=
Subject key identifier:   3A:1F:0C:CC:B0:AC:3A:9E:04:5A:8B:25:67:F4:25:12:75:AA:17:24
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0B82
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7483A0BC4B4A11F09BC8187BDAE4EC9C.roa
Signing time:             Tue 17 Jun 2025 07:12:41 +0000
ROA not before:           Tue 17 Jun 2025 07:12:35 +0000
ROA not after:            Tue 16 Jun 2026 07:12:35 +0000
asID:                     29802
IP address blocks:        102.135.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Jul 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2946 (0xb82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Jun 17 07:12:35 2025 GMT
            Not After : Jun 16 07:12:35 2026 GMT
        Subject: CN=68511569-d0c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:08:4b:53:09:06:2e:97:fb:9b:7f:05:9a:f2:
                    44:24:15:e1:18:0c:82:62:7f:97:f7:26:eb:f6:14:
                    ec:8c:18:8c:c6:01:9d:42:1b:94:a6:c7:5b:dc:ac:
                    3e:f8:1f:c7:84:89:e8:e3:ca:d2:ab:79:d8:59:f0:
                    49:99:c2:0a:a5:e3:a0:a9:4d:60:5e:d6:8a:fe:9a:
                    0b:c4:09:e5:49:10:ba:fd:f1:cc:d8:af:7b:27:05:
                    4f:57:10:c8:3b:c9:1d:c1:d2:9f:86:3e:43:4e:1d:
                    81:d1:58:d3:17:8c:e7:07:ea:58:8b:7e:bd:18:ea:
                    d4:52:7a:61:fe:75:82:8c:ee:e7:ad:b0:7e:c5:73:
                    84:41:ce:05:02:21:00:e1:c4:cd:33:ec:90:d7:ab:
                    e9:30:45:ce:7c:6c:f4:2e:88:76:84:1f:7b:1f:b4:
                    0d:4b:f7:15:5c:68:01:88:94:10:55:46:78:53:3f:
                    da:94:62:e8:15:74:ce:7b:ce:5b:fc:89:2e:15:2f:
                    f8:e0:5f:0a:3c:63:13:db:eb:33:a9:af:09:37:ed:
                    67:62:6f:83:62:48:1d:28:16:0c:e0:d4:da:2f:df:
                    78:c7:3d:78:5d:76:57:05:e1:00:32:9a:8a:1a:1e:
                    c8:8b:2e:a2:79:fd:14:28:c0:78:31:c5:ff:80:9c:
                    d9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1F:0C:CC:B0:AC:3A:9E:04:5A:8B:25:67:F4:25:12:75:AA:17:24
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7483A0BC4B4A11F09BC8187BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:dd:ad:ab:45:13:96:02:7c:c5:ff:63:18:ac:97:8e:89:8e:
         87:2a:29:8a:b0:53:1e:c0:0d:d6:76:24:37:93:ca:0a:e5:b8:
         49:dc:f7:37:de:cd:27:31:45:6f:4a:fb:46:e7:47:40:5d:81:
         dc:56:6c:22:e0:98:a7:24:c8:a7:f6:00:27:b7:d4:85:c9:04:
         f3:59:b8:89:0a:db:62:b9:b8:06:fa:6d:a7:28:a0:93:e1:d4:
         98:65:fb:e5:36:df:ae:53:a0:d7:fa:9e:2b:67:ed:0f:43:ba:
         8a:fa:25:c4:87:cc:a7:a0:ae:7c:c3:07:16:bc:2a:fb:18:2a:
         68:25:5c:37:f3:24:2e:85:20:22:9d:bc:52:ba:25:57:58:69:
         f0:49:90:ab:82:6e:a9:fc:1c:f0:1a:73:9a:68:7c:00:ad:19:
         16:fd:0d:18:02:95:ba:3f:7a:76:93:f2:2b:4f:8d:73:33:03:
         83:d4:fe:8a:01:de:b0:b1:c8:0a:58:29:46:06:79:10:00:42:
         75:ec:a4:24:ef:bf:fb:53:1e:20:fc:af:66:92:24:df:6b:48:
         5c:f9:5f:5c:65:ca:60:a3:37:07:86:30:b2:6e:d2:70:d7:20:
         d5:4b:8f:49:c1:c5:e6:25:7b:58:3b:f7:bb:3d:ee:29:af:6e:
         87:c3:e7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:20:19 2025 by rpki-client