Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/8D13FD4E688F11F19A6E38B5CE1D38B0.roa
File:                     8D13FD4E688F11F19A6E38B5CE1D38B0.roa (raw, json)
Hash identifier:          HV3okNQJeKDypQ6sH85bp1rw0dQt2ta8U2V9ECt1gwk=
Subject key identifier:   B6:FD:FE:C6:2D:BA:35:89:7C:F3:2A:87:27:68:64:F8:7C:9C:97:82
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       0856
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/8D13FD4E688F11F19A6E38B5CE1D38B0.roa
Signing time:             Mon 15 Jun 2026 07:55:18 +0000
ROA not before:           Mon 15 Jun 2026 07:55:14 +0000
ROA not after:            Sun 15 Jun 2036 07:55:14 +0000
asID:                     327980
IP address blocks:        41.216.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 Jul 2026 00:08:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2134 (0x856)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Jun 15 07:55:14 2026 GMT
            Not After : Jun 15 07:55:14 2036 GMT
        Subject: CN=6a2fafe6-d741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:ce:f6:c4:39:7b:e9:72:9b:4e:21:bf:6a:
                    48:ee:32:2f:eb:16:d6:5c:37:d5:51:4c:d5:3a:5d:
                    bf:f6:60:76:0a:61:e2:7c:23:43:38:8c:35:bc:f1:
                    4e:c1:d2:2a:8c:ab:c7:27:ed:da:ff:32:78:cd:a4:
                    1d:53:71:70:59:f7:c3:9b:37:bc:87:2b:ca:c4:22:
                    3d:51:42:64:a6:9d:8d:ab:2f:cc:f0:17:01:90:d3:
                    9e:2b:e0:dc:1a:19:2e:9d:a8:21:fc:bb:ae:26:70:
                    97:d1:46:68:57:da:f6:ca:bb:e0:ff:13:1c:67:7d:
                    6a:33:84:6e:8a:70:a5:7a:50:cd:42:0d:77:03:ce:
                    b2:8b:f5:3d:9c:b9:ca:d2:ae:de:23:87:9b:ad:05:
                    76:46:db:b9:6b:15:e4:9b:03:f2:9e:8d:08:01:e4:
                    e5:db:4b:bb:31:db:77:09:8d:9e:93:25:47:0f:c2:
                    28:95:03:82:c9:69:b1:79:6b:43:c9:59:a0:db:4d:
                    ca:a1:18:4e:22:6f:9c:f9:6d:25:0e:7f:ab:e0:3b:
                    54:0d:fb:3c:4b:f3:5a:3e:90:09:02:bb:7a:f1:f3:
                    99:55:af:61:f1:56:0f:28:99:e4:e8:ec:4d:4d:04:
                    6a:16:c9:ae:7a:92:85:e5:cb:31:5c:bb:b4:b4:4d:
                    b3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FD:FE:C6:2D:BA:35:89:7C:F3:2A:87:27:68:64:F8:7C:9C:97:82
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/8D13FD4E688F11F19A6E38B5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:72:b2:32:04:b2:09:03:55:e0:62:ae:48:38:0b:08:3c:37:
         f6:f2:df:8e:ec:69:9d:4d:b1:2f:fa:b5:64:e1:6d:77:30:1a:
         2a:0f:3e:e4:9c:89:69:6b:08:67:2c:5b:b2:4f:3f:ac:d4:4d:
         a1:cc:65:26:6d:34:16:67:6c:b8:e6:26:9e:d3:0c:ce:35:20:
         0a:a7:72:80:e9:05:2c:29:20:e4:d9:01:cf:2a:6d:99:da:b6:
         bf:6a:57:57:96:ab:5b:6a:a6:a4:dd:5b:8e:1a:66:10:c4:0b:
         17:66:06:0b:99:9c:a8:dc:24:b7:ef:9e:92:39:0b:79:03:4a:
         ee:e2:ae:f1:8e:b1:00:98:b1:d0:fa:ce:5c:ca:0a:a6:ae:70:
         65:c6:cc:90:09:a0:54:54:70:87:98:9c:0a:ab:3f:5f:10:c0:
         80:d7:49:9f:10:df:cb:22:15:c9:84:c6:09:2a:96:97:5b:26:
         87:7a:9b:4b:54:df:fb:5d:6b:2b:70:cb:ca:0d:5d:07:b3:ee:
         7e:31:99:c0:8f:ac:ed:9d:59:ba:a8:56:9a:f3:38:ab:9a:8e:
         fb:2d:58:33:fa:4e:4d:3c:47:a4:c3:75:72:e8:d1:39:31:78:
         65:85:90:ca:5d:f8:54:fc:ab:c8:a5:03:9d:8b:9a:4c:28:1e:
         0e:0b:f9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:33:52 2026 by rpki-client