Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/9C1B6DEE8B7711F19E4AADE4CE1D38B0.roa
File:                     9C1B6DEE8B7711F19E4AADE4CE1D38B0.roa (raw, json)
Hash identifier:          1gpwNtx3nATQzXtsSdAw4yTkKHrTSe6/3fLEYZKLfsU=
Subject key identifier:   02:9C:A2:BE:D8:7F:9F:36:DF:DD:87:00:F4:CB:10:00:06:F6:84:63
Certificate issuer:       /CN=F36997F0AF/serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
Certificate serial:       07C2
Authority key identifier: 8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/9C1B6DEE8B7711F19E4AADE4CE1D38B0.roa
Signing time:             Wed 29 Jul 2026 18:02:06 +0000
ROA not before:           Wed 29 Jul 2026 18:02:02 +0000
ROA not after:            Sun 27 Jun 2032 18:02:02 +0000
asID:                     328843
IP address blocks:        102.220.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1986 (0x7c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36997F0AF, serialNumber=8CB8ABA0ECE947739B95EADB881EA1D0D2FFD3D0
        Validity
            Not Before: Jul 29 18:02:02 2026 GMT
            Not After : Jun 27 18:02:02 2032 GMT
        Subject: CN=6a6a401e-067b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:fa:58:52:6d:69:a7:39:e8:15:7a:89:bc:
                    7b:b6:0c:88:3c:5e:2b:40:f0:25:0a:51:3c:6c:e3:
                    7a:29:f8:5a:fe:c9:59:9a:49:eb:79:e8:a0:a7:d1:
                    df:e5:d5:20:bc:78:ca:40:c1:74:08:b7:d5:7a:cc:
                    10:b7:4f:a7:9f:fa:87:7b:3b:3c:94:0d:20:3b:ce:
                    6b:5c:bb:95:d0:d0:a0:e1:44:c0:0a:75:e7:c8:7f:
                    92:87:2c:ba:c9:85:92:ce:6d:98:34:95:f4:bf:d7:
                    30:43:13:4b:2b:d8:4a:5b:18:0a:66:78:74:5d:11:
                    5d:43:48:fa:5a:2e:eb:e8:06:5a:f5:07:ed:52:33:
                    2c:c6:b2:31:11:77:d6:3d:eb:58:f6:ee:c8:1f:83:
                    11:e6:ea:25:c8:c1:a0:81:8e:36:14:69:a4:42:da:
                    17:d2:bb:ab:41:1f:57:6b:94:4a:25:f9:3c:1a:0f:
                    76:66:7f:2e:c6:2f:39:0a:07:c2:54:e8:e6:62:49:
                    8c:4c:2c:36:19:02:01:ae:6f:83:8a:60:5e:88:99:
                    79:f8:6e:3b:70:c9:0a:b8:98:99:36:38:22:f0:22:
                    fe:2d:8d:f0:ac:67:00:41:a0:99:4a:a6:de:8b:18:
                    df:e0:0c:8c:7b:f5:06:21:e8:92:66:68:82:4f:ee:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9C:A2:BE:D8:7F:9F:36:DF:DD:87:00:F4:CB:10:00:06:F6:84:63
            X509v3 Authority Key Identifier:
                keyid:8C:B8:AB:A0:EC:E9:47:73:9B:95:EA:DB:88:1E:A1:D0:D2:FF:D3:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/jLiroOzpR3OblerbiB6h0NL_09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jLiroOzpR3OblerbiB6h0NL_09A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36997F0/42857F08A8CA11EB877FD07CF8AEA228/9C1B6DEE8B7711F19E4AADE4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.220.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:b0:98:6a:4b:8c:cb:4d:6e:1e:e6:c4:97:01:ce:c6:bb:6c:
         6f:86:75:84:f1:ef:a4:55:24:70:c8:4b:c6:53:a0:f6:0a:58:
         2b:b0:51:4f:bb:ec:4c:03:4d:58:e5:7d:9c:f1:72:7c:29:dd:
         9b:ce:d3:fc:d8:32:0d:6b:cc:8f:a5:08:da:19:4f:d6:a1:78:
         54:66:ed:72:ad:ef:75:16:07:50:c8:f2:b8:a3:a3:e5:4f:d5:
         a3:2c:45:ba:3b:8b:96:b6:15:97:92:1f:1a:95:93:02:38:84:
         da:71:cd:df:c7:c0:08:26:1e:43:58:f8:10:87:43:32:e8:ea:
         3a:5d:1e:cf:71:a7:34:ae:f6:65:a0:a0:d2:9b:5f:5d:06:05:
         0a:5b:22:41:10:48:44:00:5f:59:6b:b8:4c:16:f2:f5:6e:26:
         25:54:54:2e:9c:fc:a5:45:24:f8:96:51:7d:ec:de:12:bf:4a:
         da:72:9b:e5:96:85:f7:64:1c:c3:a9:9a:38:c0:32:09:be:e9:
         df:6c:33:45:90:c4:f3:32:e4:59:ff:a2:c9:0b:74:cf:a8:00:
         d0:bf:67:8b:af:fe:3a:3d:19:70:fa:32:71:31:b5:17:44:3b:
         76:25:9b:38:d1:d1:ff:33:20:0e:3d:ed:89:f7:f8:7e:a8:d7:
         e3:fa:42:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:39:01 2026 by rpki-client