Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/362D26308F0A11F1B4045FB8CE1D38B0.roa
File:                     362D26308F0A11F1B4045FB8CE1D38B0.roa (raw, json)
Hash identifier:          kD5E6bSsUZ2DDG8n9orOIkkFFuM3fBWfcQRJBlF8WJg=
Subject key identifier:   5D:07:E9:99:CD:EC:E6:33:9C:0C:4E:C2:E3:52:CD:6F:73:96:C6:76
Certificate issuer:       /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial:       1004
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/362D26308F0A11F1B4045FB8CE1D38B0.roa
Signing time:             Mon 03 Aug 2026 07:09:05 +0000
ROA not before:           Mon 03 Aug 2026 07:09:01 +0000
ROA not after:            Wed 30 Apr 2031 07:09:01 +0000
asID:                     327750
IP address blocks:        2c0f:f368::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4100 (0x1004)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620ACFAF, serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
        Validity
            Not Before: Aug  3 07:09:01 2026 GMT
            Not After : Apr 30 07:09:01 2031 GMT
        Subject: CN=6a703e91-6fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:08:00:be:7a:56:e6:36:2c:51:0c:c1:3d:75:
                    85:54:e8:0a:94:70:ac:4b:0e:00:0e:6e:81:7c:49:
                    3d:3f:fa:d1:3a:37:a9:6e:1b:84:8c:d7:66:6d:58:
                    64:fb:bd:5d:01:e9:e3:35:cb:a7:42:6b:0a:9c:3f:
                    28:d6:d1:8f:54:60:e4:b3:07:cf:fc:24:f4:d1:0f:
                    88:ce:cb:25:a7:b4:68:c5:52:b0:d7:bd:81:b8:d5:
                    7b:71:15:8f:cf:31:98:20:fb:e0:36:70:7e:29:f9:
                    1d:90:9f:53:22:1b:68:73:78:8f:c5:a4:4b:bd:4a:
                    7e:ee:af:8b:5f:bb:aa:32:c4:cc:91:32:63:49:37:
                    a5:31:1c:7e:a8:5e:88:66:2b:7e:4b:cf:c3:9c:2f:
                    7a:da:a8:80:65:ad:15:b5:08:b5:4b:34:4f:fe:c6:
                    c5:83:ca:fd:57:3e:ea:a7:2f:c7:41:df:be:dd:6a:
                    60:da:59:72:c1:d2:ab:b0:c4:dd:cb:66:7d:de:6b:
                    6f:d1:77:f7:ee:6e:67:ca:e5:cc:a6:25:96:b7:cd:
                    d0:7a:fe:b5:5d:32:11:87:74:bb:3b:85:f1:c7:0f:
                    5b:fc:92:db:9c:f7:61:c6:fc:dc:c9:06:52:42:26:
                    27:66:9a:9f:19:4c:ce:e8:b1:5d:08:00:97:4f:26:
                    ba:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:07:E9:99:CD:EC:E6:33:9C:0C:4E:C2:E3:52:CD:6F:73:96:C6:76
            X509v3 Authority Key Identifier:
                keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/362D26308F0A11F1B4045FB8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f368::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:15:ba:bc:b7:39:1f:03:4b:70:dc:21:12:49:d0:b7:f1:cb:
         81:48:ac:fa:2a:16:16:0c:e8:46:3c:0c:8f:cf:3d:6f:68:3c:
         af:e5:fa:5d:f5:53:64:ca:e1:9b:9e:b8:da:71:ea:61:25:26:
         16:dd:9f:6e:83:f2:27:ee:02:5a:34:6a:59:4d:34:e8:c5:ce:
         2b:b5:4b:84:91:ef:d3:66:43:cc:27:ff:97:04:d5:6b:5e:9d:
         f0:6f:9e:81:56:1c:92:1d:05:7f:54:d8:2f:9a:65:04:e6:1f:
         73:4d:d8:e4:67:f3:73:82:63:76:22:eb:03:52:6c:39:d7:58:
         86:a6:32:52:e2:80:ec:0a:10:51:6e:ac:44:34:a3:f0:96:ba:
         a9:07:ab:90:69:7c:97:a0:3e:48:5f:99:97:25:c9:c3:34:f2:
         65:56:2a:11:16:e7:38:46:dd:be:20:c0:9d:b1:5c:26:52:20:
         87:25:13:a7:74:26:39:14:30:ae:0d:7d:f3:47:0c:1c:05:36:
         14:95:04:11:2f:d9:48:15:f9:5d:fd:6b:93:6a:1c:8b:99:12:
         e9:12:ab:35:8d:74:88:3f:6a:93:49:c7:09:6a:ed:5f:c2:cc:
         b8:29:de:cd:79:6c:02:c6:c2:78:ed:72:e4:4d:9c:57:99:14:
         55:01:18:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:00 2026 by rpki-client