Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/71142C9A8B7611F1A2B07FDCCE1D38B0.roa
File:                     71142C9A8B7611F1A2B07FDCCE1D38B0.roa (raw, json)
Hash identifier:          jj6i2cFNtJgRGycLM0+3dO7l6ZMOrTQl/bO8H21hqqg=
Subject key identifier:   A1:E8:97:67:6E:88:16:7E:7D:1E:2D:A0:B7:21:1A:50:4E:A5:E3:80
Certificate issuer:       /CN=F36997F0AF/serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
Certificate serial:       07BB
Authority key identifier: 8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/71142C9A8B7611F1A2B07FDCCE1D38B0.roa
Signing time:             Wed 29 Jul 2026 17:53:45 +0000
ROA not before:           Wed 29 Jul 2026 17:53:41 +0000
ROA not after:            Sun 27 Jun 2032 17:53:41 +0000
asID:                     328843
IP address blocks:        102.220.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1979 (0x7bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36997F0AF, serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
        Validity
            Not Before: Jul 29 17:53:41 2026 GMT
            Not After : Jun 27 17:53:41 2032 GMT
        Subject: CN=6a6a3e29-f7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8f:b9:f2:5a:e6:d0:41:ea:ac:68:26:f1:9e:
                    08:91:49:2c:0a:06:c5:18:ff:81:cf:75:1e:01:f9:
                    f6:db:fa:86:d7:f5:aa:35:4b:0f:17:fc:fe:a0:64:
                    28:f1:ba:1c:2f:7d:2f:c0:9b:ed:0d:69:03:cc:dc:
                    95:32:96:27:39:c8:85:21:ff:ed:63:6a:71:ed:87:
                    bc:31:cd:6d:8c:52:58:da:81:6a:f5:9c:f6:1b:05:
                    20:5c:96:e3:ba:77:1b:bd:51:1f:01:97:ba:55:e0:
                    b2:d7:ab:17:62:12:b3:b8:5a:2c:33:d3:4b:61:af:
                    13:72:a7:5a:03:ae:e1:e8:d8:15:16:05:be:b7:61:
                    0b:fd:6c:98:fc:5b:8e:e2:ca:c9:95:f3:43:28:bc:
                    20:3b:16:ed:32:78:c5:9e:82:c9:65:65:33:ac:9b:
                    86:49:8a:9b:5b:f0:72:6f:b5:d6:38:69:24:01:da:
                    26:97:e7:81:11:5f:06:57:a7:78:21:6a:9a:37:e6:
                    c0:58:7e:03:de:71:e7:5d:e7:2b:8a:75:3c:55:8e:
                    b5:f6:0a:fd:d0:93:7c:91:34:dc:6a:75:7a:cd:ac:
                    52:12:f9:65:4d:8d:a3:7e:bc:f5:15:19:0e:66:bf:
                    d3:55:d9:b4:31:4e:d5:cd:50:53:35:c9:2d:04:e3:
                    82:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E8:97:67:6E:88:16:7E:7D:1E:2D:A0:B7:21:1A:50:4E:A5:E3:80
            X509v3 Authority Key Identifier:
                keyid:8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/71142C9A8B7611F1A2B07FDCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.220.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:0d:4e:24:3d:2a:8b:89:f9:ed:cd:c4:31:9f:e1:ed:e6:a0:
         48:52:7a:96:3e:33:5a:9b:56:a3:bc:40:9c:b8:61:1d:6b:f1:
         e0:96:5b:9d:e7:8f:91:6b:cb:1e:68:74:fc:59:d1:bc:58:e6:
         62:8d:1b:08:62:10:d7:aa:c6:14:34:f0:8b:ec:15:a2:b9:7e:
         3f:f3:6d:3b:00:d1:a5:2b:9b:99:b3:30:1a:3a:2f:de:60:6e:
         45:4b:a4:43:1e:91:20:8c:14:ee:11:ff:6a:0f:f3:fe:89:71:
         7d:4a:49:fe:5c:22:8f:5b:a8:49:7e:4d:f4:f9:13:30:7a:04:
         1f:e2:72:75:f6:29:72:33:ba:13:0f:71:1a:fe:fc:27:58:39:
         ef:4b:46:4a:8e:b0:c1:e6:90:d5:d5:72:87:c1:fa:0f:94:34:
         19:d7:e3:21:89:85:d5:e7:96:28:58:fa:f0:5d:8b:0c:0d:4b:
         6b:54:c8:d5:ee:d9:e8:1e:4c:ea:f2:c3:32:6c:27:31:c2:7a:
         fb:d6:fc:16:c9:17:3b:97:90:12:09:29:c8:d5:b5:b4:e9:ea:
         41:a0:67:fa:f3:57:2f:3f:74:0c:46:3b:a4:97:01:56:f6:b4:
         a1:b8:5b:47:ec:09:38:b9:b9:56:44:ff:15:dc:65:b2:31:8d:
         8d:46:4d:d4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB7swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTk3RjBBRjExMC8GA1UEBRMoOENCOEFCQTBFQ0U5NDc3MzlCOTVFQURCODgxRUEx
RDBEMkZGRDNEMDAeFw0yNjA3MjkxNzUzNDFaFw0zMjA2MjcxNzUzNDFaMBgxFjAU
BgNVBAMTDTZhNmEzZTI5LWY3ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHj7nyWubQQeqsaCbxngiRSSwKBsUY/4HPdR4B+fbb+obX9ao1Sw8X/P6g
ZCjxuhwvfS/Am+0NaQPM3JUylic5yIUh/+1janHth7wxzW2MUljagWr1nPYbBSBc
luO6dxu9UR8Bl7pV4LLXqxdiErO4Wiwz00thrxNyp1oDruHo2BUWBb63YQv9bJj8
W47iysmV80MovCA7Fu0yeMWegsllZTOsm4ZJiptb8HJvtdY4aSQB2iaX54ERXwZX
p3ghapo35sBYfgPecedd5yuKdTxVjrX2Cv3Qk3yRNNxqdXrNrFIS+WVNjaN+vPUV
GQ5mv9NV2bQxTtXNUFM1yS0E44KpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUoeiX
Z26IFn59Hi2gtyEaUE6l44AwHwYDVR0jBBgwFoAUjLiroOzpR3OblerbiB6h0NL/
09AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk5N0YwLzQyODU3RjA4QThDQTExRUI4NzdGRDA3Q0Y4QUVBMjI4L2pMaXJv
T3pwUjNPYmxlcmJpQjZoME5MXzA5QS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pMaXJvT3pwUjNPYmxlcmJpQjZoME5MXzA5QS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjk5N0YwLzQyODU3RjA4QThDQTExRUI4NzdGRDA3Q0Y4
QUVBMjI4LzcxMTQyQzlBOEI3NjExRjFBMkIwN0ZEQ0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm3DAwDQYJKoZIhvcNAQEL
BQADggEBABENTiQ9KouJ+e3NxDGf4e3moEhSepY+M1qbVqO8QJy4YR1r8eCWW53n
j5Fryx5odPxZ0bxY5mKNGwhiENeqxhQ08IvsFaK5fj/zbTsA0aUrm5mzMBo6L95g
bkVLpEMekSCMFO4R/2oP8/6JcX1KSf5cIo9bqEl+TfT5EzB6BB/icnX2KXIzuhMP
cRr+/CdYOe9LRkqOsMHmkNXVcofB+g+UNBnX4yGJhdXnlihY+vBdiwwNS2tUyNXu
2egeTOrywzJsJzHCevvW/BbJFzuXkBIJKcjVtbTp6kGgZ/rzVy8/dAxGO6SXAVb2
tKG4W0fsCTi5uVZE/xXcZbIxjY1GTdQ=
-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:02 2026 by rpki-client