Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/9799CAE68C9811F1BA0F14D6CE1D38B0.roa
File:                     9799CAE68C9811F1BA0F14D6CE1D38B0.roa (raw, json)
Hash identifier:          TCzfsB8L6naHhIMK6FDSVqSB8/tnKisssUeS0Sja/pM=
Subject key identifier:   2D:D6:A4:5B:73:84:07:63:D8:B3:EB:93:60:C0:C7:B9:4B:BC:31:17
Certificate issuer:       /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial:       08F0
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/9799CAE68C9811F1BA0F14D6CE1D38B0.roa
Signing time:             Fri 31 Jul 2026 04:30:43 +0000
ROA not before:           Fri 31 Jul 2026 04:30:39 +0000
ROA not after:            Sun 10 Aug 2031 04:30:39 +0000
asID:                     37468
IP address blocks:        102.219.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 11 Aug 2026 00:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2288 (0x8f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626C5BAF, serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
        Validity
            Not Before: Jul 31 04:30:39 2026 GMT
            Not After : Aug 10 04:30:39 2031 GMT
        Subject: CN=6a6c24f3-b5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e1:9d:e2:80:08:5e:e0:d5:b5:08:5f:40:eb:
                    9e:18:57:8c:49:79:db:44:22:8f:37:7b:21:25:b0:
                    7f:60:a0:75:d5:58:c7:9c:2c:6b:50:77:82:64:2c:
                    0f:22:39:01:f8:b4:59:62:b9:97:29:32:f6:24:7d:
                    b3:b1:02:2e:05:54:80:73:7d:59:92:44:06:7d:15:
                    ef:cd:a2:62:11:ef:bd:f6:92:58:b2:2f:86:18:9f:
                    73:9e:a0:05:ac:a0:b7:cc:95:ae:8f:92:e0:30:43:
                    90:3b:ad:16:8a:e6:53:58:35:30:ba:0a:da:f5:29:
                    c9:45:ce:cb:66:9a:c2:4b:4e:c3:0c:6a:ce:5a:05:
                    b4:7f:fb:ff:83:e1:a1:3e:40:e6:1e:8e:83:34:4b:
                    c9:d2:97:56:67:9f:de:17:6b:ad:81:90:95:5d:44:
                    6b:ae:db:44:2d:bc:42:2d:44:2e:14:9e:33:6e:05:
                    6c:3c:71:2e:c2:67:59:36:dd:29:26:ec:d8:1b:4f:
                    0c:59:d9:6c:ee:4e:c7:c7:c1:47:92:c2:a4:b7:66:
                    9f:ae:8d:de:3f:b4:02:05:7b:85:85:71:e6:eb:3b:
                    0e:54:76:0f:2b:22:88:61:d2:f6:08:9b:2e:0d:39:
                    d7:de:1b:35:b3:05:6a:f9:ba:67:75:0d:97:03:d2:
                    59:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D6:A4:5B:73:84:07:63:D8:B3:EB:93:60:C0:C7:B9:4B:BC:31:17
            X509v3 Authority Key Identifier:
                keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/9799CAE68C9811F1BA0F14D6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:6e:bd:9e:70:0f:cb:89:56:bf:78:eb:c7:5a:8e:80:33:95:
         f5:e1:2f:71:e9:7e:e1:cc:b8:fa:cb:bd:8a:9e:44:46:71:c3:
         9e:d5:b0:ee:d3:d5:3f:51:b8:bc:4e:a5:26:fe:07:4a:2c:cb:
         75:dc:ea:2a:89:a5:d1:48:f4:0a:7b:28:5b:ea:16:ef:70:ea:
         3c:b9:d3:13:4f:80:dc:7c:4d:90:6a:bf:18:c5:70:8a:a4:20:
         8d:83:ff:5e:7a:2b:1b:2c:e9:81:1e:92:bb:f4:4c:6c:30:bd:
         8c:48:95:f4:e8:ce:c5:cc:a9:e6:c6:88:94:2d:f2:c1:ed:38:
         37:41:57:23:10:cc:c5:e8:5d:6f:51:dc:0a:6d:e0:2a:0c:ce:
         39:26:e7:74:06:ab:ab:9d:28:a1:91:b0:b2:e3:88:6f:48:d1:
         0f:e8:65:1a:d8:ff:ed:49:64:c8:44:d7:51:4a:d0:ad:76:33:
         4d:a8:c1:43:14:a9:9e:a6:3b:a0:43:f6:b4:2e:4b:44:4b:ae:
         b6:93:71:b4:9d:5a:87:96:52:d6:bc:71:a9:2a:90:8f:db:64:
         2a:3c:a2:5d:9d:cc:91:51:7d:0e:ff:99:64:e8:a1:c9:85:28:
         42:6f:1b:2f:8a:8b:c3:7d:19:a1:e0:0b:6d:21:00:4a:e0:f0:
         c1:ab:53:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 16:46:52 2026 by rpki-client