Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/2460197E8F1611F1AB8ACDFDCE1D38B0.roa
File:                     2460197E8F1611F1AB8ACDFDCE1D38B0.roa (raw, json)
Hash identifier:          ilZDIa5C0BHYtgaJXcgc0lQnmDB9QvKYDZ1fGWV7IMM=
Subject key identifier:   09:30:4B:F0:CF:C0:B5:44:94:41:5F:4B:80:B0:7A:31:63:2A:DA:34
Certificate issuer:       /CN=F362A2E1AF/serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Certificate serial:       0616
Authority key identifier: E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/2460197E8F1611F1AB8ACDFDCE1D38B0.roa
Signing time:             Mon 03 Aug 2026 08:34:29 +0000
ROA not before:           Mon 03 Aug 2026 08:34:25 +0000
ROA not after:            Mon 28 Jun 2032 08:34:25 +0000
asID:                     328925
IP address blocks:        102.218.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1558 (0x616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362A2E1AF, serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
        Validity
            Not Before: Aug  3 08:34:25 2026 GMT
            Not After : Jun 28 08:34:25 2032 GMT
        Subject: CN=6a705295-9819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5f:3a:0e:a3:4c:61:87:d5:f5:b8:75:e3:e2:
                    e9:e8:68:a1:4a:43:cc:b1:76:eb:eb:d1:3a:a9:79:
                    b1:a5:73:ec:23:3c:53:d5:66:91:85:15:54:57:2b:
                    a3:93:6b:57:db:3a:3b:41:91:ef:c7:15:c5:2b:59:
                    72:80:46:c3:f3:f7:96:a2:00:fc:f8:8e:33:ab:63:
                    fd:0f:33:db:5f:80:45:dd:ba:d2:2b:cf:f0:3a:35:
                    76:92:58:2d:f2:33:6f:12:c4:c7:e5:cf:d2:44:03:
                    b2:5d:ca:a0:e9:ac:d6:55:e3:ab:d3:e4:5c:19:6b:
                    44:86:1b:03:e7:4d:76:28:1f:50:16:db:64:72:6d:
                    80:b1:87:76:96:47:3e:81:6a:ab:ac:af:42:3d:ad:
                    55:48:81:31:8d:5e:01:15:66:e6:c9:77:8d:f9:b7:
                    87:44:b9:e3:4e:32:07:e0:57:66:28:43:e7:9f:aa:
                    ea:ff:97:2b:18:c0:51:c2:60:6d:7c:79:2f:8a:04:
                    f6:86:cc:79:c2:6c:d6:ce:52:77:06:52:a6:f4:4c:
                    da:1c:ec:80:b2:18:92:aa:26:fc:9e:6d:2c:33:40:
                    3b:5b:89:d2:ba:e1:1e:a2:bc:9c:6f:94:82:30:0a:
                    7b:56:d3:e8:00:57:94:5c:97:f6:03:59:c6:fb:17:
                    47:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:30:4B:F0:CF:C0:B5:44:94:41:5F:4B:80:B0:7A:31:63:2A:DA:34
            X509v3 Authority Key Identifier:
                keyid:E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/2460197E8F1611F1AB8ACDFDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:4d:fb:b6:0e:c2:9e:36:1a:ac:c3:a2:db:d5:64:a8:be:e8:
         7d:47:1a:35:8d:5b:60:dd:6b:8f:9e:dc:93:79:12:19:d9:57:
         5e:a9:b7:a7:ed:fd:93:c5:0e:8c:0a:da:58:b2:16:e2:7f:22:
         08:d5:0e:71:69:ac:a3:ac:e2:96:ad:84:28:45:ef:ac:a5:bb:
         81:27:2e:e1:96:0c:7a:3e:37:e6:4e:e6:5b:c9:67:5e:51:e6:
         56:3e:3d:56:70:61:37:46:d3:eb:12:9e:8f:7a:fd:39:9e:eb:
         ea:dd:3a:22:ec:c7:f4:c8:8a:ea:83:b7:9e:17:e1:aa:8a:26:
         53:1f:ff:ab:50:23:a4:17:09:07:8b:dc:0b:ea:4f:6e:ef:93:
         23:78:20:6a:1b:cf:cc:ab:d7:3d:0c:02:74:35:22:47:b8:df:
         64:ef:54:8e:9d:36:38:28:b1:55:00:12:d1:bb:c8:5c:f9:01:
         9f:3d:99:8e:5c:0b:b1:78:01:c6:38:c0:e2:c2:a4:bb:c2:ec:
         4b:ab:f2:c2:72:ec:59:8f:50:79:b2:04:5e:c7:f9:27:ca:e2:
         53:f6:cf:74:7e:eb:c3:8c:d8:2d:b5:10:22:6d:8d:20:9a:c6:
         a1:17:a8:31:f1:a1:35:a8:3f:43:44:e1:92:9c:b7:f9:46:49:
         0b:ee:6c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:35:54 2026 by rpki-client