Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AA11C86447A011F1870FB6ECCE1D38B0.roa
File:                     AA11C86447A011F1870FB6ECCE1D38B0.roa (raw, json)
Hash identifier:          7FhASc9OkjjifpoxL+IHvEc+ZoGRf7FvUVcqhp6thRc=
Subject key identifier:   52:46:41:DB:7D:6E:EB:C1:A9:AA:74:34:0D:48:BF:B6:98:5C:AF:98
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       113A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AA11C86447A011F1870FB6ECCE1D38B0.roa
Signing time:             Mon 04 May 2026 10:04:40 +0000
ROA not before:           Mon 04 May 2026 10:04:36 +0000
ROA not after:            Wed 05 May 2027 10:04:36 +0000
asID:                     55154
IP address blocks:        196.251.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 10:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4410 (0x113a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May  4 10:04:36 2026 GMT
            Not After : May  5 10:04:36 2027 GMT
        Subject: CN=69f86f38-1a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:32:d5:1f:a5:60:88:94:1d:ab:fb:46:88:87:
                    f8:c8:97:7f:a6:41:4c:2f:0b:e8:17:f0:7c:30:9c:
                    40:85:ea:66:e4:31:d4:c3:f2:87:b4:19:11:6e:68:
                    79:65:b2:87:c1:ac:b5:19:2f:54:75:79:b6:7b:a9:
                    88:22:56:a5:3d:0d:62:9f:03:8c:20:64:bd:1a:5a:
                    c4:bb:c9:41:d5:3c:80:3b:61:af:18:2d:10:83:d3:
                    41:4b:42:4d:1d:55:79:81:a1:34:9e:1f:5a:82:c6:
                    3c:5f:83:a8:1c:71:b9:72:8a:f7:4e:1e:b9:90:59:
                    57:d2:0f:c2:46:34:0c:39:49:86:23:ce:48:65:7b:
                    f8:b9:b7:4e:fd:48:71:59:5d:0f:04:23:13:4e:0e:
                    4c:dd:19:bb:1a:7e:95:ee:d7:c6:8b:c9:c8:bf:dc:
                    59:5a:77:b2:5d:2d:9d:11:12:54:e3:f7:8d:9e:75:
                    00:3f:2d:ed:ae:49:72:1b:09:b9:fb:9d:72:4d:ad:
                    2f:15:da:24:fd:9c:53:c9:b0:af:7b:83:74:da:e7:
                    96:63:12:f0:50:6a:a4:bc:88:4a:7b:01:8e:47:17:
                    e8:56:48:6d:0f:63:62:4c:fb:bc:af:5e:4a:61:86:
                    7e:4f:a4:db:6b:a7:9c:ca:69:f8:1a:80:9e:3b:4e:
                    05:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:46:41:DB:7D:6E:EB:C1:A9:AA:74:34:0D:48:BF:B6:98:5C:AF:98
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AA11C86447A011F1870FB6ECCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:f8:00:60:43:1e:3a:02:56:c3:89:7e:c9:18:95:2b:e3:e0:
         39:27:40:a1:f9:c6:3c:0d:c4:1b:80:6a:4a:7a:17:93:71:0a:
         45:21:34:ab:a8:26:c0:0a:ea:bb:86:f3:23:c9:b5:4b:4b:e3:
         c1:61:54:17:d2:af:fc:bf:fd:3c:ae:cb:d5:b4:9c:04:7f:5d:
         f5:08:3f:56:ce:55:48:61:c8:c0:a5:5f:9c:dc:a9:f7:52:fd:
         20:b7:be:40:f5:dd:e8:03:91:9c:1b:93:50:17:9d:9e:84:17:
         fd:78:fa:09:26:90:63:b0:0c:aa:6a:cd:6f:f9:60:9d:9b:76:
         22:4d:0c:77:fc:42:9c:91:52:1f:3e:07:b2:91:a7:ec:15:44:
         26:3e:36:43:89:9b:e6:36:88:20:aa:b1:0a:64:02:d1:57:1f:
         88:e1:35:01:13:b2:39:b6:ee:40:77:b5:80:b2:a8:ce:ab:c8:
         4a:e8:f4:6b:25:bd:9c:45:79:b8:f8:ee:02:d8:24:fc:f3:aa:
         7b:30:23:51:c7:11:0b:be:69:be:ae:49:90:81:7a:cf:c3:cf:
         cb:c9:ae:d6:73:1c:23:e8:12:14:34:4f:29:af:82:23:a1:9c:
         57:9b:07:a7:3a:ea:af:ad:1f:f1:87:68:25:04:f1:c1:1f:ea:
         e7:18:3c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:25:49 2026 by rpki-client