Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BC5F0DC84B4911F0901D00F5DAE4EC9C.roa
File:                     BC5F0DC84B4911F0901D00F5DAE4EC9C.roa (raw, json)
Hash identifier:          cc3nM2+Zobw/H4EsHcwYJVbMiovs9x+o+dbRtcJWtCg=
Subject key identifier:   26:35:E5:61:53:AA:87:EB:32:56:BF:A8:1F:96:38:C5:AB:F3:5C:D3
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0B76
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BC5F0DC84B4911F0901D00F5DAE4EC9C.roa
Signing time:             Tue 17 Jun 2025 07:07:32 +0000
ROA not before:           Tue 17 Jun 2025 07:07:27 +0000
ROA not after:            Tue 16 Jun 2026 07:07:27 +0000
asID:                     29802
IP address blocks:        102.135.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 30 Jun 2025 02:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2934 (0xb76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Jun 17 07:07:27 2025 GMT
            Not After : Jun 16 07:07:27 2026 GMT
        Subject: CN=68511434-afe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b6:e0:08:e2:ee:ea:27:64:2d:f7:3d:65:b2:
                    ff:e9:4f:e2:13:01:08:45:45:b8:fb:2a:16:f8:c5:
                    0d:c2:1f:30:a6:b0:24:c7:55:c9:68:4a:85:83:89:
                    fd:b2:74:fd:a5:c0:7c:5a:33:c3:09:b9:33:aa:b7:
                    b6:ad:aa:3e:0f:f7:40:80:43:c2:95:87:a4:ab:0d:
                    e9:9d:38:75:e6:4d:df:aa:c7:48:87:38:6e:c8:dd:
                    c1:ba:c1:3d:4d:fd:ae:a3:95:b4:dc:c7:c2:9a:e8:
                    d8:ad:66:5b:46:e4:7e:24:eb:7c:e1:9a:6a:a3:f6:
                    5f:07:a8:09:16:a2:f8:20:d0:e5:45:c6:99:4f:47:
                    6a:84:50:ed:aa:b3:6e:39:d9:77:a2:47:d8:ee:75:
                    92:a6:5f:b6:48:41:62:e1:d7:ec:a0:46:a0:86:67:
                    7a:a3:c3:e1:96:c4:33:37:67:1c:0c:b5:1b:55:fb:
                    b8:e7:6d:41:c6:af:e8:03:e8:8a:06:15:dc:9a:c5:
                    0e:14:96:ce:58:7b:7d:45:fa:a7:86:f2:4d:6b:15:
                    e5:f0:a3:22:47:52:83:40:8a:7a:83:6b:a0:e3:72:
                    a6:56:6e:5f:19:54:c5:d2:ef:fa:14:b7:e6:87:ab:
                    54:8a:ea:1d:96:fc:91:ed:01:c4:7f:80:24:db:5b:
                    7f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:35:E5:61:53:AA:87:EB:32:56:BF:A8:1F:96:38:C5:AB:F3:5C:D3
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/BC5F0DC84B4911F0901D00F5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:5a:3e:69:43:9a:a8:d5:11:cd:7c:5f:6d:6d:61:1e:ee:31:
         f0:91:7a:d9:47:5e:fb:6d:76:0e:9f:40:5b:ac:f0:fb:70:bc:
         eb:c1:16:47:08:ee:a1:96:a6:46:b3:4a:41:6c:3a:d7:4a:c5:
         c0:12:3b:cb:90:bd:8c:92:d1:1a:cc:99:34:f0:c5:68:2b:f0:
         42:cc:46:51:28:98:45:dd:5a:33:c1:e2:a9:d6:7a:96:84:2d:
         95:ea:63:9f:33:45:9a:61:60:eb:8d:b2:77:f8:6c:5b:5b:17:
         b6:73:e2:8a:e8:10:9e:46:70:e7:ee:62:fb:af:2e:43:66:91:
         dd:13:fb:19:36:e2:2e:2f:28:03:80:db:9a:8c:e2:7a:b5:7c:
         62:01:1f:9e:a4:c8:86:7d:6b:a6:81:72:32:ec:8a:39:25:fd:
         e1:17:bc:dd:04:f3:0c:76:f1:78:99:02:99:62:20:3c:c1:4d:
         69:58:26:1d:f1:ec:32:9e:a6:4b:f6:ec:54:7e:b4:68:e0:f0:
         7c:9a:70:d2:15:d1:7e:77:e7:2e:8b:95:de:55:11:ac:aa:6a:
         5f:45:d6:09:7d:8b:c5:a7:dd:57:74:8f:37:b2:be:c8:a9:56:
         f2:65:f4:74:1e:b7:a5:54:c9:b8:d1:2f:87:f7:d6:2c:57:d9:
         27:94:90:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:31:15 2025 by rpki-client