Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B4AECB58479D11F1A8CFF0DBCE1D38B0.roa
File:                     B4AECB58479D11F1A8CFF0DBCE1D38B0.roa (raw, json)
Hash identifier:          CR0wmuySmamaZWVFniKWaERVjpfFYDtoRiFydR38J4w=
Subject key identifier:   92:83:40:F5:1E:C0:A0:53:22:90:07:24:5E:4C:2F:C0:E9:FE:CB:0B
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       111E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B4AECB58479D11F1A8CFF0DBCE1D38B0.roa
Signing time:             Mon 04 May 2026 09:43:29 +0000
ROA not before:           Mon 04 May 2026 09:43:25 +0000
ROA not after:            Wed 05 May 2027 09:43:25 +0000
asID:                     55154
IP address blocks:        102.135.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 10:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4382 (0x111e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May  4 09:43:25 2026 GMT
            Not After : May  5 09:43:25 2027 GMT
        Subject: CN=69f86a41-d8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:84:4f:ba:9c:a0:86:7d:f6:a3:5e:62:1e:21:
                    1a:5d:19:d4:86:e2:a0:b0:7a:03:41:98:5b:3b:00:
                    85:f7:75:2f:eb:44:c4:5f:17:0b:90:d7:fa:19:0b:
                    44:8e:3c:d7:36:1e:13:a5:7f:c1:1a:b3:7e:10:1c:
                    79:65:63:23:a8:c6:a5:f0:c4:d7:fc:0e:96:13:f8:
                    83:5d:7c:3f:39:9e:cc:4b:ec:22:87:6f:3c:e2:fd:
                    40:a4:79:ef:4d:ab:89:c3:f1:dc:46:82:8c:2a:c3:
                    11:07:9c:3b:83:f3:a5:34:02:d1:6a:d8:a2:f4:e9:
                    2f:08:7d:94:c2:9d:59:9e:e7:9c:d8:07:d0:1a:3e:
                    65:d0:20:9b:d6:55:33:ea:04:7a:90:e4:f2:88:ec:
                    64:f5:ca:cb:b6:df:1a:70:fe:68:93:6b:55:ab:22:
                    37:c5:d8:e0:3e:5a:17:2d:0e:79:f6:af:32:13:46:
                    87:39:29:54:f3:c3:1a:51:b0:9c:c3:bc:9f:99:b5:
                    07:86:b3:cb:92:f8:b8:d6:dc:31:92:16:47:e6:de:
                    3f:6b:21:e9:5f:7a:77:d7:60:08:4e:39:fe:16:5b:
                    42:bf:7b:5c:52:78:fe:e9:7f:1a:04:25:d4:8e:83:
                    0e:dc:a4:69:a5:e1:e3:fe:93:30:5d:aa:8e:0a:ef:
                    5b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:83:40:F5:1E:C0:A0:53:22:90:07:24:5E:4C:2F:C0:E9:FE:CB:0B
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B4AECB58479D11F1A8CFF0DBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:d3:12:48:b0:4c:33:e1:da:19:0d:10:14:61:64:49:92:1b:
         95:2f:4c:3c:77:fc:b4:b5:1e:f8:79:49:40:66:1c:82:0d:9b:
         a0:0f:9e:f8:b0:37:b1:53:14:42:ea:97:0e:b6:6b:a8:dc:7f:
         d2:29:23:a8:70:a5:3e:ac:02:0b:99:dd:d3:d2:01:a5:c9:ae:
         31:3f:bd:a8:53:f6:13:70:3e:0c:aa:d9:df:6e:13:81:0d:c5:
         ac:06:98:d0:e0:f8:f0:b6:4c:26:02:cb:90:a2:7a:f2:ed:44:
         96:9f:84:87:97:0d:0f:b7:2e:d1:39:a5:8f:ad:53:4f:d9:eb:
         6a:d6:ee:ae:2d:0f:f6:5d:a7:c0:21:20:67:e9:99:00:d7:01:
         e7:d3:d3:12:37:dd:f0:ca:dc:1e:72:22:d8:05:75:d1:27:62:
         03:b0:e1:89:09:5a:41:1b:a7:50:d2:ff:8c:79:25:e3:fa:31:
         fc:0a:05:00:1c:86:62:c0:ef:62:fc:19:3a:90:4e:8f:77:45:
         04:7e:39:50:b9:4e:86:3c:9a:12:65:57:ec:48:70:26:51:69:
         1b:35:fa:0e:3e:1e:b1:3a:3a:63:34:5b:01:f6:c8:7a:3a:2a:
         1e:4b:47:f6:0c:3c:7e:42:58:da:83:70:67:16:3a:5e:fc:93:
         fb:17:c9:e8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICER4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNjA1MDQwOTQzMjVaFw0yNzA1MDUwOTQzMjVaMBgxFjAU
BgNVBAMTDTY5Zjg2YTQxLWQ4YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLhE+6nKCGffajXmIeIRpdGdSG4qCwegNBmFs7AIX3dS/rRMRfFwuQ1/oZ
C0SOPNc2HhOlf8Eas34QHHllYyOoxqXwxNf8DpYT+INdfD85nsxL7CKHbzzi/UCk
ee9Nq4nD8dxGgowqwxEHnDuD86U0AtFq2KL06S8IfZTCnVme55zYB9AaPmXQIJvW
VTPqBHqQ5PKI7GT1ysu23xpw/miTa1WrIjfF2OA+WhctDnn2rzITRoc5KVTzwxpR
sJzDvJ+ZtQeGs8uS+LjW3DGSFkfm3j9rIelfenfXYAhOOf4WW0K/e1xSeP7pfxoE
JdSOgw7cpGml4eP+kzBdqo4K71u1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUkoNA
9R7AoFMikAckXkwvwOn+ywswHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0I0QUVDQjU4NDc5RDExRjFBOENGRjBEQkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhyAwDQYJKoZIhvcNAQEL
BQADggEBAL/TEkiwTDPh2hkNEBRhZEmSG5UvTDx3/LS1Hvh5SUBmHIINm6APnviw
N7FTFELqlw62a6jcf9IpI6hwpT6sAguZ3dPSAaXJrjE/vahT9hNwPgyq2d9uE4EN
xawGmNDg+PC2TCYCy5CievLtRJafhIeXDQ+3LtE5pY+tU0/Z62rW7q4tD/Zdp8Ah
IGfpmQDXAefT0xI33fDK3B5yItgFddEnYgOw4YkJWkEbp1DS/4x5JeP6MfwKBQAc
hmLA72L8GTqQTo93RQR+OVC5ToY8mhJlV+xIcCZRaRs1+g4+HrE6OmM0WwH2yHo6
Kh5LR/YMPH5CWNqDcGcWOl78k/sXyeg=
-----END CERTIFICATE-----
Generated at Wed May 13 03:59:02 2026 by rpki-client