Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/05C23B208C9911F18B7848D8CE1D38B0.roa
File:                     05C23B208C9911F18B7848D8CE1D38B0.roa (raw, json)
Hash identifier:          UBe/FinZwlLfNd1I4Bm1Xqdo/RNekj20lzTVHaiEBsk=
Subject key identifier:   0F:D6:41:92:3E:CD:71:58:48:50:0E:5E:5E:94:22:BB:DF:BE:67:A9
Certificate issuer:       /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial:       08F2
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/05C23B208C9911F18B7848D8CE1D38B0.roa
Signing time:             Fri 31 Jul 2026 04:33:48 +0000
ROA not before:           Fri 31 Jul 2026 04:33:44 +0000
ROA not after:            Sun 10 Aug 2031 04:33:44 +0000
asID:                     37468
IP address blocks:        102.130.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 11 Aug 2026 00:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2290 (0x8f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626C5BAF, serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
        Validity
            Not Before: Jul 31 04:33:44 2026 GMT
            Not After : Aug 10 04:33:44 2031 GMT
        Subject: CN=6a6c25ac-54c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:0d:99:35:7c:57:a7:cb:1e:e2:29:da:6a:
                    f9:8f:5d:c6:05:5e:b7:8a:08:61:74:e4:08:74:96:
                    fe:58:8f:9b:6d:38:67:79:81:9b:23:b7:56:96:8f:
                    cd:ec:68:d6:cf:84:e2:bb:fe:b5:4a:19:01:99:7d:
                    0b:93:be:49:67:8a:11:d5:c7:cd:a1:8e:61:1d:75:
                    3b:21:f7:ad:78:1b:96:63:27:c0:52:8f:de:4a:f6:
                    a7:47:21:fb:a9:86:fb:30:c1:0e:b2:9b:ae:22:20:
                    a7:ee:f1:6a:c9:74:d0:8c:72:d0:8a:83:aa:73:fd:
                    36:0b:33:ce:fc:45:6d:28:d9:1e:fe:52:09:11:0f:
                    54:cd:d3:06:3f:d3:67:a2:d6:8d:ae:c2:bc:6c:47:
                    43:3d:85:6a:14:e1:6c:62:7d:16:01:7c:98:49:6b:
                    ee:df:7b:14:5e:11:db:07:81:77:61:3e:93:8b:71:
                    3a:f5:00:08:88:64:73:8b:ba:72:e7:b9:d1:db:ac:
                    ae:e1:78:59:d7:fd:f4:25:bd:ef:0b:6d:18:29:ae:
                    d9:d0:db:2e:a5:ff:c9:a7:65:1c:d5:6b:57:78:db:
                    46:46:98:66:f8:31:74:10:ba:4e:f9:93:77:5b:bf:
                    e0:10:1e:ae:9f:66:3d:9a:a1:0c:13:2c:78:dd:5d:
                    0d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D6:41:92:3E:CD:71:58:48:50:0E:5E:5E:94:22:BB:DF:BE:67:A9
            X509v3 Authority Key Identifier:
                keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/05C23B208C9911F18B7848D8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.130.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5b:a0:f4:9e:1a:4b:2d:57:34:70:56:b7:08:33:13:c3:0e:a5:
         59:3a:40:5a:5f:13:c4:0a:03:28:d5:d3:f7:43:ad:35:48:c8:
         99:64:a1:39:65:98:58:79:9e:2d:83:e3:00:2c:19:2a:9d:21:
         5b:85:7b:a8:4f:88:d4:0b:9c:11:d3:a1:dc:03:5a:d5:54:50:
         81:aa:f0:40:5b:1c:f3:c0:ce:3c:57:6a:1d:5f:59:69:5a:54:
         ae:67:ec:24:6c:12:31:43:8e:3b:b2:dd:f9:24:09:90:74:dc:
         67:9d:a9:5a:6b:19:c2:fe:75:8f:e1:7e:30:55:ae:82:09:92:
         cf:e4:e3:34:3f:62:98:40:69:b6:a8:12:28:64:d7:c6:ac:16:
         6b:f4:82:45:64:0c:90:d7:5b:75:4f:39:7e:92:f6:2f:91:a7:
         b2:bf:f8:1f:dc:02:e3:96:8f:83:2b:dd:a4:01:60:8a:66:fa:
         6d:9f:30:80:7e:51:8a:dc:fa:45:cf:39:7c:d1:74:9a:cc:90:
         6d:b4:7f:52:55:d7:fd:70:a9:fa:fa:af:a0:8d:78:64:b8:a7:
         90:f5:68:0a:a1:3c:b5:45:53:4b:24:4b:1f:73:53:02:8f:b3:
         78:84:06:30:ec:91:8d:27:39:1c:4a:a1:a7:5f:72:97:45:fb:
         4f:66:88:3b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCPIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjZDNUJBRjExMC8GA1UEBRMoMkNERjU4MEUzNzY3NTVCMUY4QzY4ODA4NDIxMjZE
RDYzREQ3NEVFNzAeFw0yNjA3MzEwNDMzNDRaFw0zMTA4MTAwNDMzNDRaMBgxFjAU
BgNVBAMTDTZhNmMyNWFjLTU0YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBUA2ZNXxXp8se4inaavmPXcYFXreKCGF05Ah0lv5Yj5ttOGd5gZsjt1aW
j83saNbPhOK7/rVKGQGZfQuTvklnihHVx82hjmEddTsh9614G5ZjJ8BSj95K9qdH
IfuphvswwQ6ym64iIKfu8WrJdNCMctCKg6pz/TYLM878RW0o2R7+UgkRD1TN0wY/
02ei1o2uwrxsR0M9hWoU4WxifRYBfJhJa+7fexReEdsHgXdhPpOLcTr1AAiIZHOL
unLnudHbrK7heFnX/fQlve8LbRgprtnQ2y6l/8mnZRzVa1d420ZGmGb4MXQQuk75
k3dbv+AQHq6fZj2aoQwTLHjdXQ23AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUD9ZB
kj7NcVhIUA5eXpQiu9++Z6kwHwYDVR0jBBgwFoAULN9YDjdnVbH4xogIQhJt1j3X
TucwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI2QzVCL0VFNkFEQ0MyQ0RGNzExRUFBNUFFRDI0NEY4QUVBMjI4L0xOOVlE
amRuVmJINHhvZ0lRaEp0MWozWFR1Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xOOVlEamRuVmJINHhvZ0lRaEp0MWozWFR1Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjI2QzVCL0VFNkFEQ0MyQ0RGNzExRUFBNUFFRDI0NEY4
QUVBMjI4LzA1QzIzQjIwOEM5OTExRjE4Qjc4NDhEOENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANmgkAwDQYJKoZIhvcNAQEL
BQADggEBAFug9J4aSy1XNHBWtwgzE8MOpVk6QFpfE8QKAyjV0/dDrTVIyJlkoTll
mFh5ni2D4wAsGSqdIVuFe6hPiNQLnBHTodwDWtVUUIGq8EBbHPPAzjxXah1fWWla
VK5n7CRsEjFDjjuy3fkkCZB03GedqVprGcL+dY/hfjBVroIJks/k4zQ/YphAabao
Eihk18asFmv0gkVkDJDXW3VPOX6S9i+Rp7K/+B/cAuOWj4Mr3aQBYIpm+m2fMIB+
UYrc+kXPOXzRdJrMkG20f1JV1/1wqfr6r6CNeGS4p5D1aAqhPLVFU0skSx9zUwKP
s3iEBjDskY0nORxKoadfcpdF+09miDs=
-----END CERTIFICATE-----
Generated at Sun Aug 9 16:46:16 2026 by rpki-client