Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/081A930E456E11F0BD9CAEBEDAE4EC9C.roa
File:                     081A930E456E11F0BD9CAEBEDAE4EC9C.roa (raw, json)
Hash identifier:          XXGaLMAhHz16bib/BjuTKT6XqpBiDmDip63X92IDisM=
Subject key identifier:   00:E6:EB:28:BC:CD:6B:5E:2A:E1:1C:9F:96:08:B7:5D:9F:5A:05:F5
Certificate issuer:       /CN=F363BEDEAF/serialNumber=E8F1B1249BE5C2AA56F39B75B04EBD01E4C69D13
Certificate serial:       0114
Authority key identifier: E8:F1:B1:24:9B:E5:C2:AA:56:F3:9B:75:B0:4E:BD:01:E4:C6:9D:13
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6PGxJJvlwqpW85t1sE69AeTGnRM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/081A930E456E11F0BD9CAEBEDAE4EC9C.roa
Signing time:             Mon 09 Jun 2025 20:12:14 +0000
ROA not before:           Mon 09 Jun 2025 20:12:08 +0000
ROA not after:            Tue 09 Jun 2026 20:12:08 +0000
asID:                     37515
IP address blocks:        196.201.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6PGxJJvlwqpW85t1sE69AeTGnRM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Jul 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BEDEAF, serialNumber=E8F1B1249BE5C2AA56F39B75B04EBD01E4C69D13
        Validity
            Not Before: Jun  9 20:12:08 2025 GMT
            Not After : Jun  9 20:12:08 2026 GMT
        Subject: CN=6847401e-24bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:73:21:10:f7:c6:11:8f:ee:80:70:8a:46:
                    30:d9:49:00:f7:15:fa:0b:dd:05:34:16:e5:b1:e4:
                    5e:e1:3a:dc:4b:d6:2b:cb:ab:60:58:76:fb:c0:d1:
                    21:47:14:68:74:27:fe:76:2d:fd:6c:28:ca:79:c3:
                    4e:cb:5e:39:9b:17:f5:e1:dc:4d:2c:3d:10:e7:8c:
                    fd:bb:9d:15:70:f5:15:f9:96:34:14:50:7d:82:8f:
                    7e:df:27:d3:fa:fb:7a:76:11:a6:e8:49:2b:bb:4a:
                    7b:c9:b7:4f:74:62:c4:9d:8c:0a:5f:e8:80:18:d7:
                    f8:f3:bb:0d:30:1c:8d:e2:88:1b:c5:55:77:5d:a4:
                    76:71:6b:8a:99:d4:7b:6b:0c:18:f9:4f:38:45:7a:
                    a0:25:e7:ab:82:8b:bd:1a:32:cf:a4:6a:7a:f2:11:
                    9c:e3:f6:f8:3b:4a:b5:d9:53:94:1a:fa:36:07:0b:
                    2c:ff:b4:9e:59:b7:cf:ee:ed:8b:15:54:d9:9c:9c:
                    e8:7e:17:a9:72:77:69:e5:c0:2a:98:fa:88:60:cf:
                    43:45:f0:03:b5:62:a3:ab:25:65:c0:8c:60:3e:f2:
                    b3:3a:c1:e3:18:6e:00:2b:2e:e3:62:31:18:ad:59:
                    e4:6f:01:64:21:0a:ae:db:41:19:c7:3a:15:a7:4d:
                    c8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E6:EB:28:BC:CD:6B:5E:2A:E1:1C:9F:96:08:B7:5D:9F:5A:05:F5
            X509v3 Authority Key Identifier:
                keyid:E8:F1:B1:24:9B:E5:C2:AA:56:F3:9B:75:B0:4E:BD:01:E4:C6:9D:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6PGxJJvlwqpW85t1sE69AeTGnRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/081A930E456E11F0BD9CAEBEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.201.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         95:ba:2c:af:ef:fe:fe:61:b2:df:22:d0:ec:bc:54:4a:7d:87:
         f1:58:98:7b:7f:32:a9:fd:2a:74:3a:8a:fe:4f:c6:1d:c9:18:
         90:54:29:d4:85:cd:dc:1f:c3:42:77:85:51:fb:06:89:ba:a8:
         0c:f0:9e:b5:bb:c4:55:2a:cc:25:1a:c5:2c:65:a1:76:b9:e1:
         99:3a:cd:ec:07:3d:c9:e5:f2:04:bb:5f:92:05:ed:bb:46:45:
         ad:41:b6:f8:80:f6:8f:bd:e4:f7:66:60:59:81:95:b6:c4:25:
         0d:48:69:35:9d:2d:8e:10:ee:56:7e:3b:52:23:e7:e9:31:88:
         6a:f6:6f:ae:4c:89:f7:f6:12:45:86:81:3b:2e:1e:7d:d5:77:
         31:11:74:e3:db:0c:64:92:15:f3:be:2e:51:e5:0f:cf:9d:36:
         e4:3d:92:9f:e5:5d:5d:e5:01:2a:d6:48:9e:db:28:55:f9:96:
         ab:7a:5c:6f:56:96:4f:4c:35:ea:94:ac:e5:e1:43:2b:18:26:
         ac:90:c6:fc:07:85:53:f5:35:fe:cc:b7:0e:0b:31:e0:8a:23:
         6c:64:8b:b9:0f:ce:6f:b5:29:04:89:bb:f7:91:69:55:6b:d3:
         04:34:a0:6b:9c:02:5e:b1:86:86:e4:3d:7d:43:ed:21:bd:bb:
         4e:a8:c9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 17 11:10:49 2025 by rpki-client