Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A8D01F8E19E111F0B59525C56DB8BCC6.roa
File:                     A8D01F8E19E111F0B59525C56DB8BCC6.roa (raw, json)
Hash identifier:          bodBe+HwN5g3OM+KWhAX0ucIDfCfwjMeO1oMycjAF1U=
Subject key identifier:   1F:94:AB:BC:7D:5E:E9:C9:75:BD:13:F2:D2:B8:68:23:FC:AC:76:F7
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0908
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A8D01F8E19E111F0B59525C56DB8BCC6.roa
Signing time:             Tue 15 Apr 2025 10:09:04 +0000
ROA not before:           Tue 15 Apr 2025 10:09:00 +0000
ROA not after:            Tue 01 Dec 2026 10:09:00 +0000
asID:                     18811
IP address blocks:        102.135.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2312 (0x908)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Apr 15 10:09:00 2025 GMT
            Not After : Dec  1 10:09:00 2026 GMT
        Subject: CN=67fe3040-e4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:90:0c:ad:0f:0d:0f:69:0e:50:9c:3e:fe:
                    02:c5:33:25:71:0b:d3:f0:15:38:3c:67:fb:a6:4d:
                    c1:50:2c:ed:38:47:9e:7f:47:da:7c:a4:e3:e1:14:
                    42:3b:e4:31:ec:5a:c4:ba:6b:85:2d:ee:5d:34:97:
                    e1:ed:dc:4d:71:48:e8:50:2f:3a:73:db:26:e6:aa:
                    48:d0:92:a7:db:93:61:c9:53:8f:74:23:3c:3c:47:
                    22:f0:13:59:56:8a:18:d5:1b:4f:a0:bd:db:c7:1e:
                    86:ce:d0:ab:2f:a9:cb:48:05:0e:53:4c:27:ec:1d:
                    0c:cd:d3:93:2c:57:2d:c4:48:26:44:99:29:8a:f5:
                    20:a3:12:af:f4:8a:b5:7c:f1:8a:2a:68:69:93:dc:
                    e0:b2:08:1b:57:c7:31:85:e8:e2:b3:ea:28:67:8d:
                    43:9a:fb:78:08:0c:87:d7:41:ec:c3:fd:5a:5a:63:
                    46:6e:7f:03:9a:cc:1c:2e:61:fd:6b:9d:ba:3a:5b:
                    23:b4:60:2f:24:07:87:2a:22:9e:ab:7c:7a:7f:a7:
                    d1:86:81:0b:2c:09:1d:6a:12:9b:2d:74:69:0a:1a:
                    22:49:53:be:d1:fa:5f:d7:27:15:c7:3f:38:1b:16:
                    e7:e9:99:09:d6:60:16:b8:f5:c0:3c:26:17:1c:aa:
                    70:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:94:AB:BC:7D:5E:E9:C9:75:BD:13:F2:D2:B8:68:23:FC:AC:76:F7
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A8D01F8E19E111F0B59525C56DB8BCC6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:51:fb:28:40:0f:86:67:fa:a6:a2:75:9b:88:77:c5:b0:44:
         40:c8:b8:13:e9:e0:e5:1b:94:21:04:8d:2e:43:ff:92:ab:7f:
         2d:42:2c:72:6c:2e:e4:b1:19:49:ec:67:ea:82:4d:e2:5e:7c:
         99:e1:98:be:8b:d4:57:92:4a:f0:5b:20:7c:5f:16:05:7d:a2:
         b0:0e:30:02:39:25:ff:84:6d:23:09:ad:ce:50:7a:0f:0b:04:
         6a:bd:66:23:35:86:03:41:80:13:cf:60:7e:f1:03:e5:48:4a:
         38:f8:ba:fc:ca:cd:5f:ee:9b:09:de:2c:ac:67:d7:9f:c3:a3:
         3e:d3:e8:9b:7e:16:2e:95:0e:8d:da:90:6e:60:47:55:36:1d:
         f1:bf:23:0a:08:0c:6f:13:4f:64:36:2a:95:dd:dc:bf:49:72:
         8e:fe:17:47:2a:10:62:7f:97:21:5c:7d:d9:28:6e:3a:a0:ba:
         3c:58:14:d5:16:f9:7c:b4:be:58:66:54:91:ce:cd:c6:67:4d:
         a1:63:7a:78:2f:c9:b9:3d:07:25:82:2c:b6:c3:83:9b:73:24:
         96:90:c5:a5:f0:ec:57:49:f4:e3:54:aa:77:df:8e:56:76:ef:
         36:de:3c:0f:84:72:47:68:6c:9e:c2:a1:06:a5:89:13:5b:c2:
         91:8b:5d:df
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCQgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTA0MTUxMDA5MDBaFw0yNjEyMDExMDA5MDBaMBgxFjAU
BgNVBAMTDTY3ZmUzMDQwLWU0ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHoZAMrQ8ND2kOUJw+/gLFMyVxC9PwFTg8Z/umTcFQLO04R55/R9p8pOPh
FEI75DHsWsS6a4Ut7l00l+Ht3E1xSOhQLzpz2ybmqkjQkqfbk2HJU490Izw8RyLw
E1lWihjVG0+gvdvHHobO0KsvqctIBQ5TTCfsHQzN05MsVy3ESCZEmSmK9SCjEq/0
irV88YoqaGmT3OCyCBtXxzGF6OKz6ihnjUOa+3gIDIfXQezD/VpaY0ZufwOazBwu
Yf1rnbo6WyO0YC8kB4cqIp6rfHp/p9GGgQssCR1qEpstdGkKGiJJU77R+l/XJxXH
PzgbFufpmQnWYBa49cA8JhccqnBjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUH5Sr
vH1e6cl1vRPy0rhoI/ysdvcwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0E4RDAxRjhFMTlFMTExRjBCNTk1MjVDNTZEQjhCQ0M2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh1owDQYJKoZIhvcNAQEL
BQADggEBADRR+yhAD4Zn+qaidZuId8WwREDIuBPp4OUblCEEjS5D/5Krfy1CLHJs
LuSxGUnsZ+qCTeJefJnhmL6L1FeSSvBbIHxfFgV9orAOMAI5Jf+EbSMJrc5Qeg8L
BGq9ZiM1hgNBgBPPYH7xA+VISjj4uvzKzV/umwneLKxn15/Doz7T6Jt+Fi6VDo3a
kG5gR1U2HfG/IwoIDG8TT2Q2KpXd3L9Jco7+F0cqEGJ/lyFcfdkobjqgujxYFNUW
+Xy0vlhmVJHOzcZnTaFjengvybk9ByWCLLbDg5tzJJaQxaXw7FdJ9ONUqnffjlZ2
7zbePA+EckdobJ7CoQaliRNbwpGLXd8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:07 2025 by rpki-client on console.sobornost.net