Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E189FA3E438E11F1B22DD9AFCE1D38B0.roa
File:                     E189FA3E438E11F1B22DD9AFCE1D38B0.roa (raw, json)
Hash identifier:          iuPzOdfRuIpSDz1cOacSDifB2zwn1H+ccV/gFlJXKAQ=
Subject key identifier:   9F:29:3C:4B:BF:98:86:2B:DD:A3:98:A6:88:E5:50:CB:49:69:1C:7C
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       10F9
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E189FA3E438E11F1B22DD9AFCE1D38B0.roa
Signing time:             Wed 29 Apr 2026 05:47:18 +0000
ROA not before:           Wed 29 Apr 2026 05:47:13 +0000
ROA not after:            Tue 27 Apr 2027 05:47:13 +0000
asID:                     55154
IP address blocks:        196.251.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4345 (0x10f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Apr 29 05:47:13 2026 GMT
            Not After : Apr 27 05:47:13 2027 GMT
        Subject: CN=69f19b65-0a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2c:2c:19:a6:2f:f9:46:21:f2:03:94:d9:35:
                    c9:fd:d9:11:75:cf:a1:28:2f:c0:b1:3d:55:6d:45:
                    e1:d2:b8:0a:46:31:53:fa:95:f1:58:17:10:47:8f:
                    da:98:8b:c3:b8:bc:0e:fb:91:47:cc:39:5e:a0:13:
                    de:a7:99:9b:3c:c8:ac:ee:9e:1e:1e:13:b4:50:56:
                    e1:97:54:51:5c:31:a0:5a:9c:e7:7a:71:af:76:59:
                    7e:90:35:28:7c:49:4f:0d:ed:1e:09:d7:65:2a:3f:
                    fb:59:64:59:99:43:6b:f2:cb:86:06:83:2a:65:b9:
                    5a:95:0d:a4:ae:4b:13:b7:ab:7b:3b:77:09:ed:78:
                    ae:1a:fa:82:c3:56:58:86:a2:91:cf:87:f1:c6:87:
                    af:c8:43:31:11:94:9b:29:7b:a0:89:3c:8f:89:54:
                    c1:b1:db:ff:8c:af:fe:18:79:02:db:c0:e5:99:a5:
                    7f:38:1c:58:59:ea:c5:d2:25:c2:dc:05:97:2a:8d:
                    33:06:76:d0:cb:de:d3:d1:b8:d1:45:1d:69:8f:d0:
                    56:5e:11:6b:83:69:01:c3:55:46:56:3c:a0:ef:91:
                    86:f9:15:33:d6:68:8a:20:0f:c1:83:5d:09:f2:5c:
                    c2:b6:fb:00:1c:a7:c5:86:a7:7d:39:bd:b3:95:ac:
                    23:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:29:3C:4B:BF:98:86:2B:DD:A3:98:A6:88:E5:50:CB:49:69:1C:7C
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E189FA3E438E11F1B22DD9AFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:00:8b:f9:73:c6:8b:1c:c2:87:8a:b5:98:f3:ba:ce:c5:2c:
         d5:01:df:da:e1:07:53:f1:ee:85:56:e4:46:bf:64:8d:6f:7c:
         d5:71:49:05:d7:e5:45:97:44:fc:7d:13:a4:64:a3:8a:49:ca:
         5f:f3:8e:a9:68:b7:db:53:e7:15:60:a0:bc:13:3b:5d:e8:74:
         a1:39:2d:de:5d:c4:bc:27:55:fb:c0:79:83:9a:76:e4:58:ea:
         d9:ef:6d:75:cc:22:76:ac:5b:3d:91:12:77:bd:5b:40:ab:de:
         d4:4e:65:13:6b:13:ee:a5:9c:95:e4:0d:f3:1b:a7:a0:ff:58:
         cf:d0:03:09:00:a2:e4:56:0b:f9:e6:9c:df:7d:15:bd:b0:17:
         58:05:c2:75:1b:42:41:0e:e0:74:3c:ba:60:b9:96:2c:ed:a5:
         a8:55:03:bb:f7:8e:5b:34:00:c4:5d:c1:76:d9:24:cf:6d:5f:
         df:d0:2c:ec:fb:9c:92:03:95:5f:ae:ed:74:c7:d4:d9:64:90:
         40:ef:1b:a1:90:a2:3c:3f:19:52:e1:9c:d3:3a:ce:72:a3:eb:
         90:47:50:b6:df:94:56:4b:91:d2:fa:8e:9b:63:06:cc:28:b7:
         3e:9d:27:91:10:7f:cb:63:26:1a:f3:9e:6c:1f:ef:f2:5f:50:
         67:41:54:80
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEPkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNjA0MjkwNTQ3MTNaFw0yNzA0MjcwNTQ3MTNaMBgxFjAU
BgNVBAMTDTY5ZjE5YjY1LTBhMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVLCwZpi/5RiHyA5TZNcn92RF1z6EoL8CxPVVtReHSuApGMVP6lfFYFxBH
j9qYi8O4vA77kUfMOV6gE96nmZs8yKzunh4eE7RQVuGXVFFcMaBanOd6ca92WX6Q
NSh8SU8N7R4J12UqP/tZZFmZQ2vyy4YGgypluVqVDaSuSxO3q3s7dwnteK4a+oLD
VliGopHPh/HGh6/IQzERlJspe6CJPI+JVMGx2/+Mr/4YeQLbwOWZpX84HFhZ6sXS
JcLcBZcqjTMGdtDL3tPRuNFFHWmP0FZeEWuDaQHDVUZWPKDvkYb5FTPWaIogD8GD
XQnyXMK2+wAcp8WGp305vbOVrCOpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUnyk8
S7+Yhivdo5imiOVQy0lpHHwwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0UxODlGQTNFNDM4RTExRjFCMjJERDlBRkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+2QwDQYJKoZIhvcNAQEL
BQADggEBANwAi/lzxoscwoeKtZjzus7FLNUB39rhB1Px7oVW5Ea/ZI1vfNVxSQXX
5UWXRPx9E6Rko4pJyl/zjqlot9tT5xVgoLwTO13odKE5Ld5dxLwnVfvAeYOaduRY
6tnvbXXMInasWz2REne9W0Cr3tROZRNrE+6lnJXkDfMbp6D/WM/QAwkAouRWC/nm
nN99Fb2wF1gFwnUbQkEO4HQ8umC5liztpahVA7v3jls0AMRdwXbZJM9tX9/QLOz7
nJIDlV+u7XTH1NlkkEDvG6GQojw/GVLhnNM6znKj65BHULbflFZLkdL6jptjBswo
tz6dJ5EQf8tjJhrznmwf7/JfUGdBVIA=
-----END CERTIFICATE-----
Generated at Wed May 13 05:38:09 2026 by rpki-client