Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FEB67FAA275711F0B677F8AEDAE4EC9C.roa
File:                     FEB67FAA275711F0B677F8AEDAE4EC9C.roa (raw, json)
Hash identifier:          qlB4II3kNx4dnq2pB1+7GhELmL6PJAdH3d2eOtjgP7g=
Subject key identifier:   0E:46:82:F3:CC:EA:91:31:00:DD:C4:0B:8B:8B:0D:05:0E:69:D8:D0
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       09B6
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FEB67FAA275711F0B677F8AEDAE4EC9C.roa
Signing time:             Fri 02 May 2025 13:18:54 +0000
ROA not before:           Fri 02 May 2025 13:18:49 +0000
ROA not after:            Tue 01 Dec 2026 13:18:49 +0000
asID:                     329007
IP address blocks:        102.135.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 May 2025 14:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2486 (0x9b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May  2 13:18:49 2025 GMT
            Not After : Dec  1 13:18:49 2026 GMT
        Subject: CN=6814c63e-85ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5a:fe:49:80:6f:14:ef:a0:22:f8:8e:c9:f4:
                    9b:b4:74:fa:c4:30:46:27:9b:af:07:68:4e:61:7f:
                    5d:19:f0:f5:71:1e:c3:f6:80:50:7f:84:9c:4a:42:
                    ba:73:71:62:20:82:ad:e2:61:cb:f8:f7:3f:6a:90:
                    24:28:b0:10:5f:17:58:38:98:31:e2:32:ee:8f:74:
                    5b:de:45:ac:61:7c:26:20:90:17:5f:f0:ac:20:9c:
                    a9:1e:41:38:0b:91:34:02:6b:6e:52:f1:bd:df:5f:
                    f7:e7:72:9a:dc:cf:25:ba:05:fd:88:53:f1:52:11:
                    5c:a4:83:cd:12:3c:8a:cc:01:59:0a:4e:b2:d2:20:
                    d7:f6:ee:cd:58:ef:96:8f:78:ec:bd:22:3f:1e:9f:
                    04:4c:b5:1e:3c:24:3c:47:bf:15:16:8c:20:cc:40:
                    84:f8:8b:09:5a:43:c0:c6:09:1f:af:af:03:74:38:
                    c0:fc:c7:ae:87:ad:88:54:df:1a:72:96:71:b0:a6:
                    cc:83:fb:06:52:fc:71:46:0e:6f:b8:4d:51:1f:d6:
                    61:3e:e1:40:6b:32:83:7b:69:a1:3a:47:3b:5d:2b:
                    4d:6f:a8:25:37:25:73:b4:f7:d0:ff:75:f2:00:a2:
                    38:58:93:58:b9:0e:cd:17:f8:84:62:b4:ce:08:bd:
                    0d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:46:82:F3:CC:EA:91:31:00:DD:C4:0B:8B:8B:0D:05:0E:69:D8:D0
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FEB67FAA275711F0B677F8AEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:08:9e:0f:84:08:29:4b:5f:f6:ad:70:77:13:77:78:b2:90:
         7a:45:2c:13:b2:25:57:00:ec:f4:2e:25:4c:ad:08:df:b9:70:
         a3:d0:59:03:58:83:56:02:95:91:09:e1:13:c0:af:cb:10:b1:
         2d:f2:08:8f:d2:16:f0:79:ae:70:72:61:28:6b:18:f9:2f:55:
         6b:e9:5e:dc:bd:1a:6e:2d:30:72:9c:a0:e3:90:15:73:df:af:
         71:b1:83:b4:da:a9:e2:35:a0:7e:01:17:01:35:28:3d:6c:35:
         e9:bd:d1:f7:2f:d4:07:90:de:8b:58:75:fb:95:ab:6c:fa:7e:
         68:76:2d:de:10:e7:6c:cb:35:76:13:88:c2:3e:28:99:41:07:
         f1:e0:ce:4f:34:b9:e7:71:00:fe:3e:2e:15:8a:c2:69:ec:b3:
         9e:84:5b:c6:67:64:ae:26:b7:1f:6c:c6:b2:b2:40:f3:91:cb:
         91:de:b8:3a:b5:a0:82:d8:f7:7e:8c:34:8f:e6:a0:f2:e8:d0:
         ec:80:80:e6:13:f6:46:ef:43:09:34:34:d1:14:8f:80:d4:6b:
         df:10:69:b2:c0:35:99:ac:fc:e7:44:df:60:63:26:4f:15:6b:
         04:07:d3:c9:e3:35:5d:a6:4a:08:91:34:61:dd:57:94:4f:b2:
         89:03:49:be
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCbYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA1MDIxMzE4NDlaFw0yNjEyMDExMzE4NDlaMBgxFjAU
BgNVBAMTDTY4MTRjNjNlLTg1ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqWv5JgG8U76Ai+I7J9Ju0dPrEMEYnm68HaE5hf10Z8PVxHsP2gFB/hJxK
QrpzcWIggq3iYcv49z9qkCQosBBfF1g4mDHiMu6PdFveRaxhfCYgkBdf8KwgnKke
QTgLkTQCa25S8b3fX/fncprczyW6Bf2IU/FSEVykg80SPIrMAVkKTrLSINf27s1Y
75aPeOy9Ij8enwRMtR48JDxHvxUWjCDMQIT4iwlaQ8DGCR+vrwN0OMD8x66HrYhU
3xpylnGwpsyD+wZS/HFGDm+4TVEf1mE+4UBrMoN7aaE6RztdK01vqCU3JXO099D/
dfIAojhYk1i5Ds0X+IRitM4IvQ1/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUDkaC
88zqkTEA3cQLi4sNBQ5p2NAwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0ZFQjY3RkFBMjc1NzExRjBCNjc3RjhBRURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhwIwDQYJKoZIhvcNAQEL
BQADggEBAM0Ing+ECClLX/atcHcTd3iykHpFLBOyJVcA7PQuJUytCN+5cKPQWQNY
g1YClZEJ4RPAr8sQsS3yCI/SFvB5rnByYShrGPkvVWvpXty9Gm4tMHKcoOOQFXPf
r3Gxg7TaqeI1oH4BFwE1KD1sNem90fcv1AeQ3otYdfuVq2z6fmh2Ld4Q52zLNXYT
iMI+KJlBB/Hgzk80uedxAP4+LhWKwmnss56EW8ZnZK4mtx9sxrKyQPORy5HeuDq1
oILY936MNI/moPLo0OyAgOYT9kbvQwk0NNEUj4DUa98QabLANZms/OdE32BjJk8V
awQH08njNV2mSgiRNGHdV5RPsokDSb4=
-----END CERTIFICATE-----
Generated at Fri May 9 02:46:18 2025 by rpki-client