Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E285754A533D11F0B7202CBFDAE4EC9C.roa
File:                     E285754A533D11F0B7202CBFDAE4EC9C.roa (raw, json)
Hash identifier:          S4tWit0GVMyY9BM3o0ed3wUcyCtFGmLwkrA/XLzA0Sg=
Subject key identifier:   0C:CA:96:D0:A9:F5:12:F1:35:FC:45:FF:41:A9:E4:5C:A4:76:88:A8
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0C07
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E285754A533D11F0B7202CBFDAE4EC9C.roa
Signing time:             Fri 27 Jun 2025 10:02:52 +0000
ROA not before:           Fri 27 Jun 2025 10:02:46 +0000
ROA not after:            Wed 24 Jun 2026 10:02:46 +0000
asID:                     9304
IP address blocks:        196.251.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Jul 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3079 (0xc07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Jun 27 10:02:46 2025 GMT
            Not After : Jun 24 10:02:46 2026 GMT
        Subject: CN=685e6c4c-066b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:53:f0:2b:58:5a:af:8d:e6:ce:3d:4f:3d:b2:
                    b5:61:70:3c:fc:12:59:89:16:6a:61:78:b2:9a:34:
                    03:85:d7:22:73:79:8e:0b:4f:55:2e:44:47:0f:f4:
                    e8:7e:64:a0:26:b4:21:90:a8:5b:34:fb:93:61:e5:
                    5b:91:2e:f9:e4:76:11:6b:72:ff:74:e3:c3:e3:0a:
                    bb:e8:6f:f9:00:50:31:eb:d4:5a:51:c0:dd:92:6c:
                    ef:6e:5d:c2:ba:3c:a3:ed:b5:b5:fe:f5:aa:9b:23:
                    af:71:96:dd:4d:53:71:e6:dd:c4:aa:77:a0:e9:36:
                    7b:a3:1f:f6:00:74:6f:fa:90:11:5f:49:7a:48:9b:
                    d7:c1:d4:99:41:fd:99:0a:ac:4c:53:58:ad:c3:9b:
                    9b:18:05:94:df:a0:cc:e7:8b:43:b2:06:8d:b5:70:
                    4c:c3:50:9f:ba:f0:4b:9b:47:83:18:73:67:6f:2e:
                    e9:7c:34:01:77:00:1b:76:c3:b3:82:6a:48:1b:a9:
                    bb:d1:f9:d3:ed:78:b1:90:41:d4:2c:c1:94:38:19:
                    82:68:ce:07:fe:8b:5a:f9:58:d3:ff:62:1f:fa:b6:
                    50:78:12:dc:2b:ae:2c:60:70:e3:1a:bc:16:46:7f:
                    a5:32:70:b2:de:9e:01:53:5c:24:87:b4:a6:c1:46:
                    64:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CA:96:D0:A9:F5:12:F1:35:FC:45:FF:41:A9:E4:5C:A4:76:88:A8
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E285754A533D11F0B7202CBFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:ea:4f:2c:88:ec:e3:86:51:cd:9f:18:78:f2:be:7e:cb:8b:
         c6:75:05:ad:d6:15:4c:f0:39:f3:61:d7:82:95:9c:4e:1f:cd:
         de:91:ee:14:73:cd:0e:27:8b:55:b3:35:b2:d4:78:24:ec:c4:
         30:d5:22:2a:d5:24:7b:e7:e0:0e:96:95:78:e0:d1:b0:90:02:
         81:b1:f1:7b:26:8e:dc:32:c3:5c:54:35:ba:d5:60:de:6f:d5:
         2e:7b:94:0d:30:d4:8e:a2:78:52:82:50:3e:bd:74:cd:95:48:
         39:55:40:ee:72:64:d4:9e:dc:c9:95:64:ff:43:52:cb:34:a5:
         1b:1c:ed:06:ea:70:79:5f:6f:c2:86:7b:13:9c:d7:09:82:76:
         5a:c7:fa:3d:53:76:f3:d4:27:a4:36:21:c6:15:b8:68:ad:9f:
         c0:49:ef:7e:63:8f:1c:01:75:a1:63:c2:0b:b4:d1:f5:05:01:
         7f:02:9b:92:5e:f0:fe:1e:9d:94:eb:11:a1:0e:de:f8:a9:36:
         8d:f7:63:04:33:7f:f9:6c:db:5e:8e:24:98:ac:7d:50:9e:23:
         83:e2:75:69:7b:b1:d6:cf:1a:c7:8b:f1:53:0b:00:75:ba:d9:
         21:ad:42:cf:29:97:6d:87:d9:e6:1d:6b:82:5b:05:d8:a9:9d:
         ad:07:e8:da
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDAcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA2MjcxMDAyNDZaFw0yNjA2MjQxMDAyNDZaMBgxFjAU
BgNVBAMTDTY4NWU2YzRjLTA2NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD7U/ArWFqvjebOPU89srVhcDz8ElmJFmpheLKaNAOF1yJzeY4LT1UuREcP
9Oh+ZKAmtCGQqFs0+5Nh5VuRLvnkdhFrcv9048PjCrvob/kAUDHr1FpRwN2SbO9u
XcK6PKPttbX+9aqbI69xlt1NU3Hm3cSqd6DpNnujH/YAdG/6kBFfSXpIm9fB1JlB
/ZkKrExTWK3Dm5sYBZTfoMzni0OyBo21cEzDUJ+68EubR4MYc2dvLul8NAF3ABt2
w7OCakgbqbvR+dPteLGQQdQswZQ4GYJozgf+i1r5WNP/Yh/6tlB4EtwrrixgcOMa
vBZGf6UycLLengFTXCSHtKbBRmQXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUDMqW
0Kn1EvE1/EX/QankXKR2iKgwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0UyODU3NTRBNTMzRDExRjBCNzIwMkNCRkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+2gwDQYJKoZIhvcNAQEL
BQADggEBAHvqTyyI7OOGUc2fGHjyvn7Li8Z1Ba3WFUzwOfNh14KVnE4fzd6R7hRz
zQ4ni1WzNbLUeCTsxDDVIirVJHvn4A6WlXjg0bCQAoGx8Xsmjtwyw1xUNbrVYN5v
1S57lA0w1I6ieFKCUD69dM2VSDlVQO5yZNSe3MmVZP9DUss0pRsc7QbqcHlfb8KG
exOc1wmCdlrH+j1TdvPUJ6Q2IcYVuGitn8BJ735jjxwBdaFjwgu00fUFAX8Cm5Je
8P4enZTrEaEO3vipNo33YwQzf/ls216OJJisfVCeI4PidWl7sdbPGseL8VMLAHW6
2SGtQs8pl22H2eYda4JbBdipna0H6No=
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:48:04 2025 by rpki-client