Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/E515FA6E8B6D11F1A85176ABCE1D38B0.roa
File:                     E515FA6E8B6D11F1A85176ABCE1D38B0.roa (raw, json)
Hash identifier:          kybgrwqkh7P5iHV/1GZjSNx8J7YUz+idr2f7Ol8Enls=
Subject key identifier:   48:5D:ED:D0:5F:7F:4F:68:46:70:DC:30:BC:30:CD:94:F2:87:B6:9A
Certificate issuer:       /CN=F3623193AF/serialNumber=227B6B37E17EB0094C0304939B2FC588E1E66E99
Certificate serial:       096F
Authority key identifier: 22:7B:6B:37:E1:7E:B0:09:4C:03:04:93:9B:2F:C5:88:E1:E6:6E:99
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/E515FA6E8B6D11F1A85176ABCE1D38B0.roa
Signing time:             Wed 29 Jul 2026 16:52:34 +0000
ROA not before:           Wed 29 Jul 2026 16:52:30 +0000
ROA not after:            Mon 07 Sep 2048 16:52:30 +0000
asID:                     328358
IP address blocks:        102.134.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2415 (0x96f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623193AF, serialNumber=227B6B37E17EB0094C0304939B2FC588E1E66E99
        Validity
            Not Before: Jul 29 16:52:30 2026 GMT
            Not After : Sep  7 16:52:30 2048 GMT
        Subject: CN=6a6a2fd2-d73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:02:35:34:2b:6a:ac:c8:4d:7c:49:62:c0:
                    96:e5:37:a4:c4:14:51:a1:6d:16:2a:8d:10:5a:21:
                    ba:8b:f0:90:c4:18:87:94:3b:e8:cf:6e:90:83:36:
                    d8:8c:5e:47:2e:5b:45:08:96:33:18:de:da:a1:ff:
                    9d:e5:0e:24:c9:49:03:68:c6:9d:a2:f1:df:36:32:
                    b1:92:44:ec:90:0a:3a:41:5d:d4:27:1c:81:5c:4d:
                    20:eb:8f:e4:90:71:98:df:d3:22:de:45:23:ac:b1:
                    e4:95:c8:05:34:d9:d1:44:03:05:74:90:06:4a:c8:
                    01:56:b8:5f:2d:65:64:80:ba:36:db:af:94:8b:dd:
                    ee:2e:84:ce:16:7d:12:f0:23:59:a8:81:54:f4:dc:
                    3b:a2:b3:26:31:89:a4:1b:3a:f3:fe:68:d6:91:98:
                    2a:6a:66:28:4c:09:5e:25:10:f6:02:6a:20:f8:d2:
                    fe:fb:c6:34:47:bf:cb:3a:f1:49:80:e2:fc:5b:22:
                    c9:9e:d7:4f:ca:c9:54:79:a9:53:cd:b5:18:c5:61:
                    43:48:b7:e9:64:59:fd:b8:2c:12:c5:ab:51:2e:04:
                    28:ff:e2:09:20:27:11:1d:f0:49:a9:60:da:85:56:
                    67:17:46:69:48:15:f5:83:5c:26:05:b6:44:15:b8:
                    72:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5D:ED:D0:5F:7F:4F:68:46:70:DC:30:BC:30:CD:94:F2:87:B6:9A
            X509v3 Authority Key Identifier:
                keyid:22:7B:6B:37:E1:7E:B0:09:4C:03:04:93:9B:2F:C5:88:E1:E6:6E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/IntrN-F-sAlMAwSTmy_FiOHmbpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IntrN-F-sAlMAwSTmy_FiOHmbpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623193/C2BA301E62E011EAB00F3911F8AEA228/E515FA6E8B6D11F1A85176ABCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.134.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:16:a8:64:28:3e:6d:93:20:8a:de:e8:ed:67:79:ee:f6:25:
         ff:a4:af:91:7a:f5:3b:08:c6:e2:fe:85:46:af:a8:e3:15:94:
         a7:57:55:47:33:db:2e:81:c4:00:36:88:91:1f:dd:a6:df:85:
         2d:34:51:f3:94:64:15:6e:a4:97:6e:f8:20:a8:b5:ef:f7:06:
         1b:79:ca:a5:0d:ff:47:e3:bb:39:b6:d9:72:e6:55:0b:90:b3:
         a2:47:05:ff:52:aa:48:dc:b5:85:b1:0b:df:1e:59:a7:a7:34:
         89:56:7e:a5:20:36:f3:6a:3e:80:21:4e:35:b6:5b:bb:0f:79:
         04:b0:67:e5:09:94:d8:be:c5:e5:b9:91:46:89:6d:87:24:ec:
         be:92:c9:33:f3:e0:43:58:16:ca:6b:17:63:22:0f:97:61:81:
         82:2d:82:e0:9e:4b:15:aa:36:f8:75:8f:2d:8a:a2:5f:5d:c9:
         6a:09:f2:ef:c9:aa:fc:1c:fc:cf:ba:32:ee:be:0b:6c:23:6d:
         09:a2:27:0a:a1:8a:ae:ab:88:fd:09:9c:7d:5a:b4:cf:7b:3a:
         8e:fc:58:7a:8c:3e:32:a9:80:87:ae:95:4f:f8:59:33:42:c8:
         b9:0d:e8:a0:cd:4e:e9:98:9d:60:4f:10:38:3e:95:69:ba:6b:
         3e:98:b1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:28:00 2026 by rpki-client