Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B4441FBE8F1611F0A01976ACDAE4EC9C.roa
File:                     B4441FBE8F1611F0A01976ACDAE4EC9C.roa (raw, json)
Hash identifier:          k5GkJhUUBeo5nagFyMguFYSjoz6yhRNonAgNr14rzno=
Subject key identifier:   7F:33:78:7E:6A:7F:19:CF:EB:B7:DB:EF:29:68:B9:CC:64:F9:6A:C7
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0E39
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B4441FBE8F1611F0A01976ACDAE4EC9C.roa
Signing time:             Thu 11 Sep 2025 13:53:33 +0000
ROA not before:           Thu 11 Sep 2025 13:53:28 +0000
ROA not after:            Fri 11 Sep 2026 13:53:28 +0000
asID:                     205220
IP address blocks:        102.135.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 02:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3641 (0xe39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Sep 11 13:53:28 2025 GMT
            Not After : Sep 11 13:53:28 2026 GMT
        Subject: CN=68c2d45d-5a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f2:e4:ee:fb:30:df:62:52:a9:8c:ab:22:39:
                    ab:86:7b:6b:92:f6:70:76:3c:35:05:cb:9d:eb:30:
                    75:af:8a:75:68:53:bb:c8:14:a2:21:af:f9:6a:0b:
                    f7:47:d1:42:5a:b0:8e:34:32:6c:71:64:c3:f9:73:
                    6e:2a:2d:cd:f4:44:8f:62:1d:97:a6:32:2d:71:3d:
                    f7:bb:82:13:27:c6:46:3f:24:b7:4a:90:49:4d:7d:
                    b3:cc:07:84:d9:cd:c1:19:05:dd:30:7c:d7:73:21:
                    6e:1a:09:08:cd:5b:3e:8e:e6:3a:37:34:58:0a:9a:
                    84:87:1a:e4:7c:8d:20:00:25:96:11:36:bf:65:26:
                    c3:a8:f8:21:dc:60:5d:93:12:5e:6e:de:ca:ad:8f:
                    a5:90:c0:18:41:95:2e:01:26:65:6c:da:47:e6:f9:
                    46:e6:d7:e3:28:70:1c:94:6f:2e:61:72:1a:80:70:
                    2f:f1:6b:77:27:5e:79:84:78:d5:71:9b:8c:96:a3:
                    c8:08:38:91:f7:75:ec:2c:34:18:0b:c5:51:d3:e1:
                    23:38:50:f5:eb:27:3c:79:09:46:8c:55:f7:df:5f:
                    36:6c:f5:4d:e0:be:6a:10:85:5e:c3:79:70:d4:cb:
                    60:cf:6a:ad:16:63:15:9b:0f:17:2a:fd:87:3e:ad:
                    2e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:33:78:7E:6A:7F:19:CF:EB:B7:DB:EF:29:68:B9:CC:64:F9:6A:C7
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B4441FBE8F1611F0A01976ACDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:55:3b:f1:b1:ef:a5:b3:ab:7b:a5:d9:76:e2:b6:1c:2c:ea:
         aa:4a:35:d4:b8:7c:17:6d:28:33:48:4b:f9:3d:90:dc:8b:89:
         f3:8f:ce:0f:49:64:ed:cc:6f:9a:99:69:f8:af:3a:35:c8:f1:
         dc:93:0b:e1:f6:b2:70:38:8b:61:2e:3b:4b:a8:21:c7:f6:06:
         52:a7:0c:5b:d6:91:04:df:f3:b6:da:7b:0a:54:6d:f9:a2:3e:
         45:5a:9a:52:fb:5e:83:c2:42:a3:5b:76:67:82:12:09:33:b9:
         de:84:5c:2d:37:88:25:7e:55:67:61:84:d1:42:8b:5b:a9:08:
         0a:f4:fd:c3:28:00:99:dc:0d:e1:33:98:15:e5:e5:dd:85:ec:
         52:db:18:27:65:c4:ae:b3:6f:66:a8:34:5a:01:ea:e2:5b:3b:
         7d:4e:78:5c:33:80:b5:e7:2d:55:62:00:3e:ec:4e:5e:2e:01:
         54:f4:09:5d:d2:b0:41:66:55:bd:b9:0f:9c:ff:74:cd:73:ee:
         e7:9f:1d:0b:18:84:67:09:f0:9f:81:1a:4d:86:c9:8a:83:99:
         4e:b3:2a:5d:a3:49:86:1b:80:ff:3a:24:52:3c:59:e5:c5:f2:
         e2:66:8e:8f:ce:ff:a2:31:5d:bd:6e:87:d1:da:5b:13:4c:d1:
         e7:cc:e0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:53:13 2025 by rpki-client