Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C32AB9AA47A011F18BF40CEDCE1D38B0.roa
File:                     C32AB9AA47A011F18BF40CEDCE1D38B0.roa (raw, json)
Hash identifier:          U7Mk1/2Bp6dXXPRyW6sBg7RBd2WWdDjT3wMSN7lLTrQ=
Subject key identifier:   0D:94:00:A4:E9:0E:A1:13:83:82:AC:BA:17:95:AD:1B:45:43:EF:03
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       113E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C32AB9AA47A011F18BF40CEDCE1D38B0.roa
Signing time:             Mon 04 May 2026 10:05:22 +0000
ROA not before:           Mon 04 May 2026 10:05:18 +0000
ROA not after:            Wed 05 May 2027 10:05:18 +0000
asID:                     55154
IP address blocks:        196.251.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 10:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4414 (0x113e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May  4 10:05:18 2026 GMT
            Not After : May  5 10:05:18 2027 GMT
        Subject: CN=69f86f62-44c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:ed:a8:da:2f:e0:bc:38:70:74:12:e4:2a:
                    ae:0c:2f:ab:74:af:8b:20:a6:93:e2:8c:36:e7:8c:
                    aa:e9:ed:05:5c:5b:0d:c3:36:c4:8e:b4:89:63:81:
                    22:f7:8c:40:86:00:bb:2d:68:01:12:fc:1d:f9:b6:
                    b8:a7:5f:4e:35:95:5f:92:0f:8f:77:d9:d0:59:41:
                    9c:9d:f0:5e:b6:84:36:47:8e:80:e7:64:4b:ae:55:
                    47:be:5f:ae:39:5e:61:27:2d:78:1e:b4:5a:f7:79:
                    55:68:67:c4:3c:89:34:c1:d3:8d:eb:f9:61:8a:28:
                    94:32:85:cc:ba:98:f3:c6:5b:b9:92:bb:8e:c0:44:
                    68:e0:a9:73:f9:2a:1f:23:97:a2:bd:5a:6d:b3:ef:
                    89:58:c2:97:f7:f0:95:b1:7e:9e:26:ec:2b:e1:2a:
                    53:fd:b2:45:95:05:9d:d5:4e:00:df:56:76:81:36:
                    20:8e:09:e6:3b:57:73:27:31:24:89:2a:11:1d:99:
                    54:93:57:df:dd:de:c1:3b:3d:5b:f7:b4:cb:21:2e:
                    9a:65:c7:81:f4:04:97:ac:8d:c8:de:9a:c2:d0:87:
                    eb:12:ce:56:ff:e6:4f:80:a7:e2:03:26:eb:a3:a4:
                    de:d6:41:43:f2:2a:ce:39:38:d8:34:c4:cd:e8:a6:
                    1d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:94:00:A4:E9:0E:A1:13:83:82:AC:BA:17:95:AD:1B:45:43:EF:03
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C32AB9AA47A011F18BF40CEDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:da:65:16:59:df:3f:6b:94:ae:1a:a4:25:f7:dc:e7:3a:8b:
         a7:dd:a8:f3:be:ef:54:f8:64:f3:58:51:06:80:74:c0:74:e1:
         95:52:d3:e4:f2:93:6f:ea:22:3f:77:68:f7:b8:77:4b:b8:b0:
         67:47:c5:f6:60:6b:2f:be:08:7e:cd:82:99:b0:c1:23:30:df:
         6b:9e:f3:c6:b7:4e:d1:18:a8:2f:3b:7b:96:ac:49:c9:96:cc:
         87:8e:6c:b8:e1:97:f0:56:65:9a:fa:14:2d:a6:75:af:6c:8e:
         29:1c:ec:d0:1f:87:89:1a:76:27:e4:da:16:37:36:5d:29:8c:
         bf:a8:55:ab:02:27:14:27:7c:35:3a:a0:36:05:c3:e5:2e:79:
         65:c7:f0:58:35:46:8e:76:4b:25:e8:9d:87:da:97:24:0e:76:
         0a:43:8d:39:d8:a7:d8:cb:bb:24:85:94:11:06:ca:87:d1:15:
         7b:73:7c:b5:ca:2a:2c:60:a6:12:04:c8:17:a7:f2:33:54:7b:
         e0:44:57:ef:93:fe:5f:11:74:a3:9b:42:e6:4b:58:ee:bb:8c:
         bb:0b:08:32:9d:6f:e8:98:ec:87:26:5a:7d:56:45:a4:e9:3b:
         73:f1:4e:eb:c1:57:c4:f3:53:06:5e:56:6b:2b:18:39:ae:4c:
         52:d3:f7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:21 2026 by rpki-client