Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E9C4/9D505354901411F19085CAFDCE1D38B0/A13BF08E901B11F1805BCFA7CE1D38B0.roa
File:                     A13BF08E901B11F1805BCFA7CE1D38B0.roa (raw, json)
Hash identifier:          mDDO/i1Pc7AB7KazNElE2Nzyn1AB7gGQWJo0D+efT6Q=
Subject key identifier:   8D:0D:23:FC:34:CB:3D:D4:BF:A3:3E:6B:48:06:68:95:96:36:3C:D5
Certificate issuer:       /CN=F362E9C4AF/serialNumber=F2CE06BE6CDFA7DD08FBE3591C5B7DC26A5F2C60
Certificate serial:       02
Authority key identifier: F2:CE:06:BE:6C:DF:A7:DD:08:FB:E3:59:1C:5B:7D:C2:6A:5F:2C:60
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8s4Gvmzfp90I--NZHFt9wmpfLGA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E9C4/9D505354901411F19085CAFDCE1D38B0/A13BF08E901B11F1805BCFA7CE1D38B0.roa
Signing time:             Tue 04 Aug 2026 15:46:17 +0000
ROA not before:           Tue 04 Aug 2026 15:46:13 +0000
ROA not after:            Fri 04 Aug 2028 15:46:13 +0000
asID:                     329756
IP address blocks:        102.202.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E9C4/9D505354901411F19085CAFDCE1D38B0/8s4Gvmzfp90I--NZHFt9wmpfLGA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E9C4/9D505354901411F19085CAFDCE1D38B0/8s4Gvmzfp90I--NZHFt9wmpfLGA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8s4Gvmzfp90I--NZHFt9wmpfLGA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E9C4AF, serialNumber=F2CE06BE6CDFA7DD08FBE3591C5B7DC26A5F2C60
        Validity
            Not Before: Aug  4 15:46:13 2026 GMT
            Not After : Aug  4 15:46:13 2028 GMT
        Subject: CN=6a720949-8e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e8:41:be:45:c6:1e:a4:5b:5c:4c:dd:d8:57:
                    28:e4:f1:ec:bd:b3:e1:68:65:f0:6b:88:74:e9:ec:
                    0b:39:e8:da:ac:3a:b0:f9:c8:cf:f1:f2:fc:d5:2d:
                    73:38:3c:83:24:fb:78:8b:6f:30:f8:ce:33:26:56:
                    61:f3:5e:c9:ce:9a:48:99:c9:56:0f:b7:58:90:bd:
                    b4:d8:0f:d9:31:ef:90:0f:9b:55:85:6b:4d:a0:1f:
                    87:15:cb:57:0d:28:49:60:9b:39:3e:54:10:2d:33:
                    80:bb:ff:e2:c6:c1:9a:7f:c9:de:f1:8d:87:9f:3d:
                    f7:61:9a:70:d9:7d:e6:e4:b6:b6:7e:53:d8:61:80:
                    c9:dc:58:73:4f:4d:29:77:fc:df:a5:e6:e8:fe:bc:
                    29:d0:a6:e5:cb:14:f4:0b:1a:aa:56:bb:3b:d9:34:
                    8c:9a:b1:ca:b8:69:22:6f:6d:2f:7e:38:79:e9:d2:
                    ef:22:a5:6b:eb:77:d0:40:87:3a:7a:5f:65:3a:39:
                    8e:35:0c:79:bb:d3:29:21:8d:f4:51:14:c8:90:f5:
                    e5:52:a1:3a:75:5b:e4:76:53:1d:ff:cf:4b:06:2a:
                    40:06:d5:15:1a:d0:0e:b0:df:63:e8:40:fa:7d:d3:
                    89:ad:b0:f5:65:ec:80:31:24:dd:21:15:2a:33:4c:
                    c4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0D:23:FC:34:CB:3D:D4:BF:A3:3E:6B:48:06:68:95:96:36:3C:D5
            X509v3 Authority Key Identifier:
                keyid:F2:CE:06:BE:6C:DF:A7:DD:08:FB:E3:59:1C:5B:7D:C2:6A:5F:2C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E9C4/9D505354901411F19085CAFDCE1D38B0/8s4Gvmzfp90I--NZHFt9wmpfLGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8s4Gvmzfp90I--NZHFt9wmpfLGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E9C4/9D505354901411F19085CAFDCE1D38B0/A13BF08E901B11F1805BCFA7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:65:4a:87:0b:31:3c:0f:62:29:e4:6e:47:8d:9c:ec:45:bd:
         63:7b:bb:d9:22:ac:12:db:40:40:11:1c:06:a9:46:52:2b:ee:
         7d:48:82:42:41:d4:4d:43:83:e8:60:73:fc:2e:f6:8d:1e:e1:
         3f:59:42:dc:81:d4:15:33:cd:a0:3e:48:4e:36:42:08:cf:27:
         e6:0a:f1:6c:a6:ea:26:3f:d4:5b:ad:f7:72:71:b6:90:24:ee:
         59:26:b6:d9:c0:20:c5:d5:cf:82:d5:0b:97:1c:36:76:a6:2d:
         5d:65:9c:90:27:dd:ff:c9:a6:1f:46:51:a9:67:cd:20:87:c9:
         54:4a:6a:30:da:11:7c:72:20:ed:8c:fa:3a:df:01:6e:60:ee:
         05:88:a6:3b:2a:27:7c:8e:aa:94:a2:87:61:5c:0e:e1:6f:9b:
         0d:e2:d2:3c:6a:0b:86:21:61:d1:0d:04:55:7d:2b:05:17:a1:
         74:31:4b:43:c6:31:b6:4e:f6:ed:95:d3:80:22:bd:f6:27:ab:
         e4:7b:55:99:03:10:1d:a6:b8:4d:17:80:83:af:9c:a6:81:0f:
         46:45:c4:f4:33:7c:ed:a9:1b:ff:18:0c:e7:2b:33:b7:6c:38:
         c7:7b:de:a3:98:b4:da:4b:10:4e:93:92:dc:84:7d:ac:e7:0b:
         34:92:0c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:07 2026 by rpki-client