Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F2EFDD8E479911F1B8AC8AC4CE1D38B0.roa
File:                     F2EFDD8E479911F1B8AC8AC4CE1D38B0.roa (raw, json)
Hash identifier:          s9b/vlf7Jxw2lUTtGExvRmN4X1xL34cmvC1Qt+GXoPM=
Subject key identifier:   AE:9E:C1:8F:7D:F0:77:C1:52:D7:06:9F:26:31:5B:F5:7C:A5:F4:12
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       110A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F2EFDD8E479911F1B8AC8AC4CE1D38B0.roa
Signing time:             Mon 04 May 2026 09:16:36 +0000
ROA not before:           Mon 04 May 2026 09:16:31 +0000
ROA not after:            Wed 05 May 2027 09:16:31 +0000
asID:                     55154
IP address blocks:        196.251.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 10:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4362 (0x110a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May  4 09:16:31 2026 GMT
            Not After : May  5 09:16:31 2027 GMT
        Subject: CN=69f863f4-ca32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:ef:c6:3b:3b:f4:08:fd:a2:36:98:ec:57:
                    1c:ec:4d:d7:78:50:e8:d0:e9:7a:57:62:41:25:14:
                    59:a9:6f:7c:ae:c9:5e:56:56:48:d1:7a:1e:cd:12:
                    8f:e1:54:35:2d:78:5a:c4:87:c2:ce:4f:03:4c:8a:
                    5e:2e:fa:e1:38:92:3f:35:7e:30:95:70:17:ad:9d:
                    1b:8c:5a:44:15:d9:bd:c7:0a:b8:9a:1c:65:a7:c1:
                    07:26:1a:82:ae:65:2c:16:b7:99:7f:09:a4:84:ba:
                    b5:29:4a:25:54:28:de:70:b6:15:b5:69:2e:ae:49:
                    46:8d:35:00:a5:d3:7e:61:f2:c9:4f:74:e3:00:78:
                    a8:01:fe:ba:57:dc:75:59:51:dd:3e:0e:3c:a6:32:
                    01:a0:0e:f0:f7:23:5c:cc:93:ff:79:2e:53:6b:84:
                    91:66:f6:8a:18:88:93:97:b1:66:c4:21:1d:a2:e7:
                    b3:fd:22:92:b9:4c:cc:bc:a3:e3:5b:5c:5b:04:fb:
                    d0:40:cd:ee:94:7a:ac:99:87:2a:f9:e0:2d:7e:9c:
                    b5:53:50:a2:e3:04:b7:2c:57:61:2f:5d:0c:63:35:
                    01:69:41:a7:17:f6:00:c8:a6:cb:09:b1:36:ce:ac:
                    85:e8:86:f1:27:0e:43:81:5d:c9:ee:46:7d:69:7c:
                    81:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9E:C1:8F:7D:F0:77:C1:52:D7:06:9F:26:31:5B:F5:7C:A5:F4:12
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F2EFDD8E479911F1B8AC8AC4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:41:e5:b1:b2:7d:b8:a7:24:c9:6f:92:ae:92:0e:c6:5e:cf:
         25:0a:9a:43:b6:d4:2a:26:e6:69:fa:d2:c4:00:4c:3b:04:07:
         0e:20:e8:26:0f:49:07:23:63:db:5f:8d:60:d5:65:80:31:aa:
         57:6c:7c:4c:06:af:8a:3c:3a:c9:85:92:af:95:7d:2a:f1:4c:
         f1:d3:31:91:b2:14:04:af:a1:c9:6e:c5:b1:73:71:a6:0f:c0:
         43:8a:9b:06:c2:bd:63:91:ef:e7:5a:7b:ac:f5:f1:27:ec:1b:
         74:dc:fa:f0:00:9a:15:75:be:a1:4a:f0:4c:cf:9d:8a:4c:f9:
         b0:1f:72:9a:40:d5:db:f8:b9:3c:85:0a:6a:3b:be:e7:07:0d:
         48:a8:89:4b:bf:f9:94:c1:db:1c:ac:f7:bf:33:e8:65:5b:fa:
         33:34:bb:b4:aa:d1:81:65:12:ba:31:82:6c:f0:df:65:b9:dd:
         da:d1:bb:0b:69:07:ac:ac:11:84:72:e9:0e:59:3f:c1:5a:8a:
         ac:06:c5:23:95:da:e2:8e:8c:3e:68:18:11:8a:74:2a:75:80:
         72:d1:b6:31:ef:ad:0c:c0:f7:ff:39:ce:af:7f:cc:b8:3b:33:
         55:99:85:f6:31:7c:ac:91:3b:f0:92:12:79:9f:39:4a:6f:98:
         76:5c:9b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:13 2026 by rpki-client