Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/99F834D2B73411F18D2E35C2CE1D38B0.roa
File:                     99F834D2B73411F18D2E35C2CE1D38B0.roa (raw, json)
Hash identifier:          RNSIwpg4FN5Kv4FRH1yAei4K/hsCr1LwEHYMpWyjNvA=
Subject key identifier:   25:02:C1:01:B5:FA:B2:14:03:0F:F9:F5:D8:91:21:4E:8F:09:3B:74
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       12DC
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/99F834D2B73411F18D2E35C2CE1D38B0.roa
Signing time:             Wed 23 Sep 2026 09:53:18 +0000
ROA not before:           Wed 23 Sep 2026 09:53:14 +0000
ROA not after:            Thu 30 Sep 2027 09:53:14 +0000
asID:                     36680
IP address blocks:        196.251.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 09:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4828 (0x12dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Sep 23 09:53:14 2026 GMT
            Not After : Sep 30 09:53:14 2027 GMT
        Subject: CN=6ab3a18e-20c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:7a:e6:82:86:e8:af:3a:2a:3d:f4:ab:69:
                    0c:2d:8e:50:04:32:69:08:ad:fb:7a:d4:07:23:91:
                    fd:0a:c5:3c:c2:b6:8b:f0:c9:f7:4a:8d:7b:e0:a1:
                    a9:80:c2:c6:d9:7c:c7:68:a8:bc:c9:6b:a7:49:7d:
                    8e:12:ea:0e:36:2e:e5:e7:8b:d3:5a:43:d2:9c:1e:
                    1f:dd:07:92:e4:76:97:36:1f:5c:cc:dd:07:e3:67:
                    5b:38:4a:0d:82:66:2f:a8:e9:e3:11:9a:96:1c:de:
                    1f:75:1e:c5:f8:10:61:34:0d:cc:64:d5:64:be:14:
                    07:f1:da:1a:e1:7e:ec:d0:18:46:6d:f0:03:2b:52:
                    9b:db:1c:f2:ae:9b:ab:36:c4:8c:97:c5:9c:30:79:
                    eb:55:96:6b:e9:72:42:8d:03:6a:c6:cf:be:56:ae:
                    01:dc:d2:c1:d9:4e:49:5d:0b:e4:e2:b9:35:a7:a6:
                    39:b8:76:a5:51:dc:13:fa:eb:01:b5:19:e2:34:ee:
                    9a:68:a4:70:b4:ff:67:02:57:a5:b3:31:29:7a:10:
                    a0:ea:9b:fa:32:4a:e8:09:ee:52:43:7c:f1:c3:48:
                    77:a8:95:47:d7:5f:b2:d7:41:11:5c:a2:75:04:e0:
                    24:ed:c5:30:b8:cc:30:26:6f:06:ae:28:e9:a2:57:
                    e3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:02:C1:01:B5:FA:B2:14:03:0F:F9:F5:D8:91:21:4E:8F:09:3B:74
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/99F834D2B73411F18D2E35C2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:3d:77:28:6a:f9:79:95:6e:df:cc:cc:28:1b:df:6d:e6:25:
         1a:39:54:29:78:3b:3e:4f:1b:2d:20:58:43:5f:2d:51:48:65:
         68:e6:ea:c9:90:26:ef:cf:1a:9a:dc:81:9c:43:41:55:2c:d3:
         83:ee:db:40:80:81:dd:e8:fc:c8:16:be:46:e5:89:b6:6d:d4:
         cd:ad:b4:ac:6a:43:2d:23:10:e7:3e:df:15:26:63:16:8e:7c:
         3d:53:6e:d5:9a:8e:6e:75:61:75:9a:74:7e:44:52:f2:fd:c8:
         7b:e5:85:13:b7:be:f4:59:70:02:f9:03:f6:9f:0c:af:65:6c:
         bf:af:22:c6:3e:12:68:e4:ca:4f:46:76:19:09:2b:6f:b7:19:
         c0:56:84:97:e0:b9:d2:32:c2:e2:b0:6b:0e:32:63:27:f5:02:
         54:69:dd:b9:bb:ad:35:ea:09:83:25:94:f2:10:15:9f:58:3e:
         de:87:6c:71:a8:20:de:8b:b7:e3:70:49:38:3b:3a:64:d9:23:
         87:77:17:e1:16:3f:9f:06:15:ec:de:f3:9e:98:59:b2:f9:f7:
         25:ab:66:f5:f8:b9:7a:c8:65:6a:13:f9:0e:16:59:fd:a2:65:
         48:0c:0c:24:4d:9a:31:99:d6:18:a1:5d:cb:a7:ad:53:1e:62:
         9e:e6:ab:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----