Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/B9029ABC61D911F19D3A36E8CE1D38B0.roa
File:                     B9029ABC61D911F19D3A36E8CE1D38B0.roa (raw, json)
Hash identifier:          MXY6GvyLjMCEd+yeI7yNqdZkhRtwysL72d5VLUvKlU0=
Subject key identifier:   F3:1C:5A:2A:C6:70:52:77:1E:34:A6:18:14:DE:3D:27:95:7B:25:A0
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0998
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/B9029ABC61D911F19D3A36E8CE1D38B0.roa
Signing time:             Sat 06 Jun 2026 18:58:37 +0000
ROA not before:           Sat 06 Jun 2026 18:58:32 +0000
ROA not after:            Tue 30 Jun 2026 18:58:32 +0000
asID:                     22724
IP address blocks:        102.177.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 02:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2456 (0x998)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Jun  6 18:58:32 2026 GMT
            Not After : Jun 30 18:58:32 2026 GMT
        Subject: CN=6a246ddd-592f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:92:f1:bf:8c:37:39:75:7f:36:c8:6c:56:
                    06:0b:bd:da:d2:0e:93:95:81:1f:df:11:6f:34:88:
                    a0:9d:c3:e2:f3:2c:a1:69:02:44:51:75:da:0b:47:
                    f9:1b:91:97:c6:07:84:0e:85:9b:d3:8d:2f:ca:ca:
                    e6:ce:9e:59:aa:f2:7c:06:ab:86:1f:d0:9e:24:8e:
                    0e:5a:87:7d:c4:2b:61:3f:8b:cf:e7:96:8b:68:f5:
                    6e:53:50:0e:e6:cf:b2:75:3d:ab:59:e5:14:a4:31:
                    f7:28:a8:c2:9c:06:ea:e2:25:c6:76:6b:74:a6:f1:
                    bd:5f:e6:02:93:e5:55:b4:35:e3:e2:e3:c8:09:86:
                    e0:d6:e9:c0:a1:c4:0c:5c:92:81:88:81:99:af:fb:
                    9d:b3:eb:7e:f3:83:dd:40:1b:23:9f:4b:47:f6:1b:
                    5e:bd:95:22:91:28:db:89:5d:a0:e5:89:8c:3a:52:
                    8c:6d:92:bf:bc:be:39:6e:3f:9f:a4:ba:c7:94:2b:
                    5d:6d:cd:c2:71:79:90:3b:3e:c8:6d:38:a9:5f:ab:
                    6e:da:e8:f3:73:5f:ca:b9:bf:4c:e1:fc:1b:72:de:
                    ce:87:39:18:be:f1:e4:31:10:36:2a:50:57:e2:37:
                    62:ef:d3:47:75:e5:3f:09:82:14:e9:a2:e7:0d:4d:
                    eb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1C:5A:2A:C6:70:52:77:1E:34:A6:18:14:DE:3D:27:95:7B:25:A0
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/B9029ABC61D911F19D3A36E8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:f4:d4:31:5e:3b:59:3a:10:76:48:35:fd:dd:3c:ad:48:85:
         c2:91:98:4e:93:41:9d:2a:e0:3b:61:26:ff:a4:cb:57:e4:46:
         f7:35:d8:53:4d:34:a4:8e:4c:e3:5f:a9:2f:53:93:0a:36:a1:
         72:24:23:fb:01:20:9d:f1:2a:4d:93:df:7d:ce:b8:8e:2c:d1:
         b3:52:a7:73:8a:de:ca:3e:4b:98:b8:1d:78:35:0a:b4:d0:6b:
         3a:43:e3:54:18:c4:28:42:5c:91:48:c9:97:5a:7b:8e:4d:a6:
         c4:8f:d7:3b:ff:8d:07:f9:df:0b:6e:e3:b7:19:7f:17:73:e4:
         72:7b:9a:bf:a2:b9:cb:4e:c8:ac:11:df:7a:de:a9:2a:47:06:
         5f:aa:42:4c:80:4e:fd:21:42:fc:78:cd:df:3d:04:e3:9e:69:
         a9:dc:5b:24:fe:90:a7:cb:7b:dd:a3:15:21:eb:a1:a6:7f:77:
         4f:84:b4:f5:fc:b6:17:0c:cf:23:91:3a:63:f9:03:10:d7:01:
         a2:00:fc:38:cf:7f:ba:dc:f1:0c:0f:c7:14:a8:6d:69:69:3c:
         04:78:ee:47:43:aa:8e:11:2f:7f:2e:7d:26:37:32:d1:69:36:
         92:e7:a2:03:22:10:8b:68:9b:94:a7:2d:7d:8c:5b:b6:ea:52:
         5c:80:b7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:25:21 2026 by rpki-client