Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BBB9CDA8533D11F0B6E315BFDAE4EC9C.roa
File:                     BBB9CDA8533D11F0B6E315BFDAE4EC9C.roa (raw, json)
Hash identifier:          s3s1n3L0J8G37GLNTbqw64HvK//0eXtihcQ2Njlpf/c=
Subject key identifier:   33:2C:46:FB:52:64:B0:5B:1B:2D:00:E8:63:EF:D3:C5:9F:EE:AD:24
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0C05
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BBB9CDA8533D11F0B6E315BFDAE4EC9C.roa
Signing time:             Fri 27 Jun 2025 10:01:46 +0000
ROA not before:           Fri 27 Jun 2025 10:01:39 +0000
ROA not after:            Wed 24 Jun 2026 10:01:39 +0000
asID:                     9304
IP address blocks:        196.251.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Jul 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3077 (0xc05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Jun 27 10:01:39 2025 GMT
            Not After : Jun 24 10:01:39 2026 GMT
        Subject: CN=685e6c0a-5601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f8:3f:68:22:96:d9:82:00:74:20:a0:a7:62:
                    04:ba:6b:d9:ed:a1:c7:dc:2a:58:3d:12:9a:4e:d5:
                    2c:2e:8e:9d:d8:6e:1e:77:dc:6d:c2:90:6f:b8:25:
                    01:48:97:22:a3:fe:a9:b3:56:8b:13:73:f5:c5:58:
                    1f:c5:7a:8b:5d:e7:7d:be:68:ed:fa:0b:24:17:14:
                    58:99:b0:ec:d8:f3:76:1c:fc:b8:33:33:e5:15:4d:
                    02:bc:6a:a0:d7:5e:6d:56:cf:a9:8b:2e:0f:b8:f7:
                    13:92:cb:93:0d:32:12:4e:d3:39:8a:40:67:6b:56:
                    ee:2a:90:7b:8c:cf:77:c3:5c:c2:47:8f:83:d2:d8:
                    84:9c:ca:6c:fa:a7:cc:93:b8:d6:3f:33:6d:2b:b4:
                    ac:74:e2:a6:b1:3a:7a:cc:94:29:d0:8f:9b:0f:29:
                    9e:0e:d0:33:f4:19:77:e4:03:22:48:93:b1:58:b4:
                    77:ed:c8:6c:78:bd:4e:0f:57:b1:10:36:25:4b:9c:
                    1f:32:99:4b:43:c6:6c:6a:cd:be:63:0a:4d:68:57:
                    d7:81:1c:7e:de:a5:74:88:78:7f:e4:17:14:0f:7d:
                    11:83:ed:ff:d3:a4:11:c7:36:8a:18:33:92:d3:13:
                    95:4f:2c:3d:0e:79:d2:ab:d7:8c:52:76:36:d9:de:
                    1b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2C:46:FB:52:64:B0:5B:1B:2D:00:E8:63:EF:D3:C5:9F:EE:AD:24
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BBB9CDA8533D11F0B6E315BFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:34:28:bc:65:d2:b8:bf:5d:43:84:0d:b3:49:0a:c5:1d:50:
         9c:2c:2a:c9:a6:cc:5c:95:f2:02:b5:82:9e:08:9f:06:f8:37:
         d2:18:4c:12:1d:ec:1d:0b:70:a0:04:49:ae:55:a8:15:b1:56:
         21:fa:16:e8:3f:40:b7:7b:c2:de:bd:e1:89:51:01:b2:99:4f:
         59:ad:ba:35:f0:b1:ea:bd:01:7c:fb:a3:34:49:9e:35:93:b9:
         4a:b8:03:e4:2c:7b:e9:aa:19:82:19:ee:ae:0f:a2:0a:51:cb:
         37:70:37:47:a4:ce:9e:c5:f1:ca:55:89:7f:5a:26:f3:82:ea:
         c4:63:bc:39:53:63:a9:e7:6b:51:06:c2:2a:82:a3:20:84:5e:
         c4:73:61:83:06:15:d3:e0:fd:cd:ce:80:a3:a6:63:2f:5f:35:
         48:a6:7d:97:85:11:e9:2d:fc:a6:46:5d:47:da:3c:ee:25:91:
         b0:95:05:3b:46:18:d2:9a:a2:8c:81:4f:b8:ec:d2:8e:84:82:
         b3:af:86:31:16:33:40:60:49:88:c8:ff:13:a1:e0:f7:df:e6:
         5c:95:61:f3:22:c7:53:02:aa:ae:37:6f:a1:05:55:fc:ad:df:
         b9:6c:b6:9f:cd:78:1a:64:a1:33:76:eb:53:f0:d5:6e:33:9a:
         4a:3c:33:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:27:17 2025 by rpki-client