Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B25AF5B6DAC311F19F0AB61ECF1D38B0.roa
File:                     B25AF5B6DAC311F19F0AB61ECF1D38B0.roa (raw, json)
Hash identifier:          zgBEzZAsZ7GGMrGAySuPAoK++18d9W19aOwptaZpBfY=
Subject key identifier:   78:3F:AB:1F:61:68:30:FC:55:AD:04:53:F1:D9:AB:DF:CB:45:0F:0B
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       1370
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B25AF5B6DAC311F19F0AB61ECF1D38B0.roa
Signing time:             Sat 07 Nov 2026 15:55:47 +0000
ROA not before:           Sat 07 Nov 2026 15:55:43 +0000
ROA not after:            Tue 30 Nov 2027 15:55:43 +0000
asID:                     205397
IP address blocks:        102.135.10.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4976 (0x1370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Nov  7 15:55:43 2026 GMT
            Not After : Nov 30 15:55:43 2027 GMT
        Subject: CN=6aef4a03-6063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:e3:60:86:c0:38:c6:63:33:51:f2:6b:b3:
                    45:82:19:a6:b7:1e:84:e2:85:48:31:ea:29:29:56:
                    9b:09:b6:88:a6:92:01:62:8e:b9:19:3f:b7:68:c4:
                    6e:0f:6f:67:ff:b2:2a:33:63:3a:a1:da:fa:da:a9:
                    17:e3:95:84:9d:86:c8:ae:93:0b:1e:e3:a3:71:89:
                    17:0b:a9:b3:9c:c0:fa:80:c4:a4:8b:92:07:e5:c2:
                    c8:f2:87:73:b2:58:1a:f9:a9:60:b4:4c:90:f5:df:
                    a4:b9:d6:61:6c:75:c1:34:a9:7d:d3:a9:71:3f:61:
                    ad:c8:09:bf:18:99:ec:cc:ba:16:50:15:27:7f:ac:
                    1a:ca:b3:84:5d:1e:cd:05:bc:4d:01:56:51:17:ac:
                    07:41:c4:5b:32:9e:eb:5c:42:4f:b8:1a:71:c5:f1:
                    00:76:19:ab:74:8f:fc:4e:e2:82:b0:47:67:56:8b:
                    56:4f:a9:03:95:3f:07:31:11:c6:e0:f6:60:06:c0:
                    88:2e:54:43:a4:f6:dd:24:5c:ea:bc:fa:fb:0e:b8:
                    d5:18:b3:fd:9a:ab:bf:25:31:8c:51:3f:5f:b2:bb:
                    92:24:6b:78:61:35:d9:db:1e:00:e7:3b:db:01:a4:
                    39:b3:bf:ad:f1:f2:c8:13:ff:8f:55:69:3d:74:c3:
                    a9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3F:AB:1F:61:68:30:FC:55:AD:04:53:F1:D9:AB:DF:CB:45:0F:0B
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B25AF5B6DAC311F19F0AB61ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:b4:81:83:f8:d0:87:cd:bc:0d:c2:f2:7a:7d:95:30:30:9f:
         7b:3d:81:67:92:78:e0:58:bf:a6:c6:a0:5d:a6:9b:cb:5f:4b:
         73:a5:9a:4b:fc:3c:5d:58:98:fe:82:7b:c8:f8:64:4c:2c:7a:
         a4:8b:5e:00:64:1f:41:50:04:0a:22:56:3c:05:32:72:1b:a1:
         68:bc:c8:6d:1d:71:63:4d:87:51:72:a6:cf:76:d7:4a:29:40:
         22:a7:93:a5:0b:ec:d0:71:42:2c:e3:b6:23:ef:87:ad:05:46:
         20:18:9a:18:d7:6a:95:86:b9:06:8e:0b:e3:63:98:bd:02:6f:
         44:da:9f:5c:f2:8d:03:38:23:9e:f6:5c:7d:ff:e2:a7:b3:c3:
         90:9b:2a:77:3d:5c:e4:bc:54:ed:ff:d5:95:48:a1:77:54:18:
         2e:d4:cc:e3:87:e5:d6:98:a4:02:59:e9:de:ea:d2:07:f8:0e:
         2f:1d:35:8f:9e:b6:03:2d:7d:df:ce:df:e8:27:cc:59:5f:36:
         47:05:71:61:68:1c:07:68:04:f7:3a:b4:85:dd:36:60:d3:28:
         a8:3d:eb:f9:3d:1b:03:c2:d4:d6:77:95:21:d4:27:5c:b0:fc:
         5a:ea:2f:5a:ce:78:aa:50:55:62:e9:47:97:8a:f4:bb:24:41:
         74:33:36:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----