Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/B41ABBCE8F1511F1ADFDD7FBCE1D38B0.roa
File:                     B41ABBCE8F1511F1ADFDD7FBCE1D38B0.roa (raw, json)
Hash identifier:          s1G42q/+rggaEVHCV/2J3B1QONW6JRiuI9egBXa0Tkk=
Subject key identifier:   81:87:AB:8A:88:81:9A:3D:AD:48:E9:1C:53:60:62:07:F1:57:0D:89
Certificate issuer:       /CN=F362A2E1AF/serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Certificate serial:       0614
Authority key identifier: E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/B41ABBCE8F1511F1ADFDD7FBCE1D38B0.roa
Signing time:             Mon 03 Aug 2026 08:31:21 +0000
ROA not before:           Mon 03 Aug 2026 08:31:17 +0000
ROA not after:            Mon 28 Jun 2032 08:31:17 +0000
asID:                     328925
IP address blocks:        102.218.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1556 (0x614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362A2E1AF, serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
        Validity
            Not Before: Aug  3 08:31:17 2026 GMT
            Not After : Jun 28 08:31:17 2032 GMT
        Subject: CN=6a7051d9-5fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fe:6d:7c:73:ef:9c:bb:90:79:72:6d:d6:82:
                    62:7e:20:f3:8f:b8:11:55:89:db:4f:60:ac:9e:76:
                    b5:c8:f6:33:39:a8:10:7c:af:af:dd:1c:6f:35:7e:
                    ab:12:e6:30:07:35:cc:9d:16:70:91:39:0c:ec:e0:
                    de:e4:0b:3f:0a:26:a3:27:97:e9:7a:8f:fe:ce:c7:
                    be:87:da:75:b9:53:67:b2:41:ff:76:ff:88:5c:34:
                    ab:dd:1c:cb:7c:b1:20:b8:fc:f2:4a:68:4c:91:07:
                    cd:09:2c:90:e5:b1:fe:c9:da:27:fd:f6:49:ba:e7:
                    21:c8:c0:f4:54:ad:78:02:ff:9a:31:03:70:58:54:
                    6b:1d:01:5e:47:f5:ca:8a:9b:d6:76:bc:c5:75:de:
                    70:d0:9d:3b:fc:49:f4:48:d4:22:a6:de:22:f6:67:
                    ba:5d:d9:2b:ee:24:72:da:ee:ea:30:32:c9:47:7a:
                    ae:a1:73:39:a7:7d:19:55:70:c9:99:14:29:e1:ca:
                    ad:47:c0:42:0d:5e:f9:91:da:b8:4a:cd:5f:23:a6:
                    48:97:9d:f8:37:bf:d6:a3:d1:cf:e0:4e:32:b8:b3:
                    46:e2:6a:67:a1:00:d7:7f:bb:3f:29:3c:a8:f3:1c:
                    73:40:e4:de:1e:0f:0b:89:94:51:ec:8f:73:38:1b:
                    40:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:87:AB:8A:88:81:9A:3D:AD:48:E9:1C:53:60:62:07:F1:57:0D:89
            X509v3 Authority Key Identifier:
                keyid:E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/B41ABBCE8F1511F1ADFDD7FBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:39:36:46:f1:03:04:0b:f9:80:3a:a0:11:4d:21:4d:ab:9e:
         8a:f9:63:3c:e8:bb:cc:18:40:d9:e1:48:28:d8:62:64:31:6c:
         cf:08:c7:18:58:59:b8:e7:18:69:48:e4:8e:27:45:51:c3:2c:
         bc:ea:b5:64:fd:20:7b:df:48:da:52:55:c5:4e:8d:82:41:c5:
         99:49:72:fa:2c:cd:77:2a:0a:9a:25:a5:5a:5f:b4:57:8c:b6:
         3b:c8:58:f0:e6:44:a4:49:fd:56:34:ad:8b:e3:c7:85:4e:a1:
         7b:49:fb:55:01:7c:50:27:91:31:18:97:ba:3c:b7:41:5a:d4:
         b3:55:16:18:3c:cd:bc:42:67:bc:d7:5e:8f:8d:4b:41:d7:94:
         24:99:1a:14:c7:89:7c:08:70:55:fa:60:a9:7b:f1:a5:5f:0c:
         09:99:41:3d:33:f6:90:6c:14:ad:cb:91:51:6b:ee:4a:27:88:
         dc:44:d5:d9:af:5c:35:42:40:bf:1f:89:40:f1:de:9b:b5:45:
         f5:04:07:78:43:49:ea:62:07:b4:67:f3:fc:80:6c:f5:3e:3d:
         53:65:59:ed:b3:45:10:27:0b:15:ba:5a:52:be:19:08:a7:82:
         46:60:39:f5:71:49:df:1a:4e:0a:c4:89:8b:59:98:ae:8a:37:
         7d:88:4a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:35:53 2026 by rpki-client