Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/841819848D8611F1978B1301CF1D38B0.roa
File:                     841819848D8611F1978B1301CF1D38B0.roa (raw, json)
Hash identifier:          TNRh/dYQgKFiO+EhvFiULYhPkysHWF/ny2EXt6klxvI=
Subject key identifier:   3B:C5:A7:BE:2A:25:05:72:19:40:AC:3C:BA:00:54:FF:6B:98:AB:C8
Certificate issuer:       /CN=F36406B8AF/serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B
Certificate serial:       0574
Authority key identifier: 80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/841819848D8611F1978B1301CF1D38B0.roa
Signing time:             Sat 01 Aug 2026 08:53:51 +0000
ROA not before:           Sat 01 Aug 2026 08:53:47 +0000
ROA not after:            Fri 31 Dec 2032 08:53:47 +0000
asID:                     37204
IP address blocks:        2c0f:f758::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1396 (0x574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36406B8AF, serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B
        Validity
            Not Before: Aug  1 08:53:47 2026 GMT
            Not After : Dec 31 08:53:47 2032 GMT
        Subject: CN=6a6db41f-a7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:cc:5d:09:6c:8a:b5:f9:3f:6f:a2:f2:4f:
                    86:cb:62:5d:23:b3:25:bb:92:b3:41:93:27:f6:fd:
                    0f:6b:b7:12:30:d8:ce:d7:2f:bb:c4:57:5e:79:3b:
                    96:e0:4d:58:1c:94:f9:35:55:39:9a:1e:9e:10:88:
                    b7:b7:a0:be:1d:cd:83:35:12:5e:c1:0f:76:09:ec:
                    45:4b:e1:18:7e:5e:bc:e5:87:80:0b:11:50:30:38:
                    8d:cd:86:e5:bd:c1:e9:8c:b0:db:16:1b:6e:c3:92:
                    5b:f6:35:bb:6e:00:f1:64:fa:b0:10:de:6a:a5:2c:
                    d5:23:88:9d:85:b7:da:a0:f4:e7:bd:69:c1:a0:ab:
                    0e:c8:4a:d3:a1:cc:06:a9:52:74:41:56:c9:b8:c5:
                    83:34:8d:46:ca:40:35:39:0c:c4:ef:dd:76:a4:fb:
                    fe:64:a6:fe:ed:ea:97:a8:ad:25:7a:55:78:28:22:
                    e9:ea:62:5e:9f:d5:c1:48:7f:52:f1:a9:04:2d:2a:
                    a3:a0:2e:a1:d2:4e:9a:5b:af:ef:91:4e:21:b8:a0:
                    b4:37:7c:02:d1:84:97:24:22:96:b7:6c:08:57:c1:
                    af:9f:03:ff:19:84:06:a3:44:5e:17:c7:9c:9f:b6:
                    a1:9a:5b:ee:26:87:85:e8:5f:28:39:d6:71:92:ea:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C5:A7:BE:2A:25:05:72:19:40:AC:3C:BA:00:54:FF:6B:98:AB:C8
            X509v3 Authority Key Identifier:
                keyid:80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/841819848D8611F1978B1301CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f758::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:cc:ef:b7:f7:e9:be:c4:b0:af:92:1c:69:3e:c1:cb:d4:34:
         a5:36:26:d4:67:32:e3:e0:c7:d0:b8:b2:22:03:b4:27:40:71:
         3d:1f:a0:c0:9e:0b:a6:24:ed:93:e0:d9:ce:cf:2d:56:aa:fc:
         ec:e8:e9:a2:0b:d5:28:48:c2:2d:82:96:4a:c3:00:e5:eb:5a:
         6c:98:78:9d:55:22:6e:97:d1:a3:3a:f3:13:4c:b0:55:66:9c:
         6f:92:cb:84:f3:df:e3:1f:50:f5:27:a6:e3:a8:40:bf:35:f7:
         d3:e0:1b:7b:f4:56:f5:08:e7:5a:8c:df:56:8e:1e:32:6b:26:
         ef:39:f2:7b:d0:65:74:a2:4a:fa:f1:5e:c5:9d:b2:d8:8c:8d:
         82:23:06:93:a1:0f:49:a9:6d:9b:9a:48:84:fe:62:4f:32:12:
         e3:dd:36:db:fc:9f:fe:69:68:51:7d:e7:0d:05:77:7c:a9:a9:
         5e:2b:5e:e8:ab:a0:8b:83:8c:46:cd:2d:a7:81:39:6b:91:3e:
         29:4e:a9:b9:82:d3:a0:ae:50:35:de:06:f2:d9:b6:c9:6c:45:
         48:b7:89:67:64:e2:3e:82:6e:c6:e1:df:34:d2:42:2a:52:a1:
         da:95:5f:e8:c1:a1:cf:7f:ec:08:7b:a0:69:38:be:83:9e:17:
         ca:2b:d1:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDA2QjhBRjExMC8GA1UEBRMoODA3MzgyMzYyNEFFQzFGNkFDMUFCMDY5RDk3OEU2
NUQ5RjcyMDU2QjAeFw0yNjA4MDEwODUzNDdaFw0zMjEyMzEwODUzNDdaMBgxFjAU
BgNVBAMTDTZhNmRiNDFmLWE3YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsoMxdCWyKtfk/b6LyT4bLYl0jsyW7krNBkyf2/Q9rtxIw2M7XL7vEV155
O5bgTVgclPk1VTmaHp4QiLe3oL4dzYM1El7BD3YJ7EVL4Rh+Xrzlh4ALEVAwOI3N
huW9wemMsNsWG27Dklv2NbtuAPFk+rAQ3mqlLNUjiJ2Ft9qg9Oe9acGgqw7IStOh
zAapUnRBVsm4xYM0jUbKQDU5DMTv3Xak+/5kpv7t6peorSV6VXgoIunqYl6f1cFI
f1LxqQQtKqOgLqHSTppbr++RTiG4oLQ3fALRhJckIpa3bAhXwa+fA/8ZhAajRF4X
x5yftqGaW+4mh4XoXyg51nGS6oc3AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUO8Wn
violBXIZQKw8ugBU/2uYq8gwHwYDVR0jBBgwFoAUgHOCNiSuwfasGrBp2XjmXZ9y
BWswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQwNkI4LzE2NjkxQkIyNkZFNTExRUQ4NTRCNTk5RkYxMjIyNDY4L2dIT0NO
aVN1d2Zhc0dyQnAyWGptWFo5eUJXcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dIT0NOaVN1d2Zhc0dyQnAyWGptWFo5eUJXcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQwNkI4LzE2NjkxQkIyNkZFNTExRUQ4NTRCNTk5RkYx
MjIyNDY4Lzg0MTgxOTg0OEQ4NjExRjE5NzhCMTMwMUNGMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD/dYMA0GCSqGSIb3DQEB
CwUAA4IBAQDAzO+39+m+xLCvkhxpPsHL1DSlNibUZzLj4MfQuLIiA7QnQHE9H6DA
ngumJO2T4NnOzy1Wqvzs6OmiC9UoSMItgpZKwwDl61psmHidVSJul9GjOvMTTLBV
ZpxvksuE89/jH1D1J6bjqEC/NffT4Bt79Fb1COdajN9Wjh4yaybvOfJ70GV0okr6
8V7FnbLYjI2CIwaToQ9JqW2bmkiE/mJPMhLj3Tbb/J/+aWhRfecNBXd8qaleK17o
q6CLg4xGzS2ngTlrkT4pTqm5gtOgrlA13gby2bbJbEVIt4lnZOI+gm7G4d800kIq
UqHalV/owaHPf+wIe6BpOL6DnhfKK9Ed
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:39 2026 by rpki-client