Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/30F8EA088C0011F1A07B01B2CE1D38B0.roa
File:                     30F8EA088C0011F1A07B01B2CE1D38B0.roa (raw, json)
Hash identifier:          w7xxMX7J2t1q/pSKhy+yH1fStLSRsxHVShMvabP5maE=
Subject key identifier:   BD:33:CF:6B:D5:65:34:72:FC:79:16:6B:D8:09:C9:47:33:0F:5C:F1
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0D1B
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/30F8EA088C0011F1A07B01B2CE1D38B0.roa
Signing time:             Thu 30 Jul 2026 10:19:48 +0000
ROA not before:           Thu 30 Jul 2026 10:19:44 +0000
ROA not after:            Wed 31 Dec 2036 10:19:44 +0000
asID:                     152868
IP address blocks:        165.49.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Aug 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3355 (0xd1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Jul 30 10:19:44 2026 GMT
            Not After : Dec 31 10:19:44 2036 GMT
        Subject: CN=6a6b2544-501d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b6:8d:cf:c3:c4:ce:54:64:d9:64:74:e8:15:
                    78:dc:d7:33:75:06:9f:15:8d:73:1c:e5:83:c1:e3:
                    e4:f3:af:ce:87:74:23:13:98:2e:61:af:d9:c3:df:
                    97:67:e3:6f:29:1a:f6:1d:e5:03:83:21:42:7d:2f:
                    b2:b8:18:98:d2:0a:bf:62:43:4a:11:c2:e3:9e:bc:
                    0f:a3:2d:ce:f9:e3:bc:ed:f2:8c:db:93:52:b9:ae:
                    d9:5e:f8:59:d5:88:c4:90:49:d7:2a:31:19:b3:c7:
                    53:43:51:0c:01:83:75:8a:89:3d:89:2d:54:6b:ce:
                    88:d5:0b:a3:18:17:f4:2d:ed:38:6a:b6:89:1b:63:
                    e2:f6:20:b2:e8:eb:25:6b:8e:da:cf:c3:10:c9:96:
                    0b:49:43:73:28:99:4c:0d:c1:1a:32:07:1f:b8:6a:
                    aa:a1:60:4f:d6:6b:45:73:31:04:19:36:bd:9f:50:
                    5d:ca:65:de:29:6a:03:6c:fa:76:2f:6a:32:83:2f:
                    ce:b6:92:c7:6e:1e:2f:d4:35:c0:6a:b3:04:d9:9c:
                    7d:5f:30:48:08:0a:ab:30:90:0c:b7:3d:ed:70:00:
                    46:db:e5:da:cd:94:42:da:01:99:b6:a9:11:c1:78:
                    b4:e4:b1:a8:89:4c:45:c9:fb:f9:8e:84:70:ff:85:
                    e4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:33:CF:6B:D5:65:34:72:FC:79:16:6B:D8:09:C9:47:33:0F:5C:F1
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/30F8EA088C0011F1A07B01B2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:df:10:b2:3d:43:e9:51:18:77:21:57:98:1b:6c:0f:fe:eb:
         ae:82:44:0a:4b:3a:36:64:23:66:82:76:7e:c2:0c:43:b7:e9:
         39:11:d1:61:b6:0e:ea:9d:29:71:83:51:9c:5a:69:aa:bf:5c:
         73:5a:81:8d:29:63:7e:17:84:c2:c7:30:8e:0b:7c:78:06:86:
         f2:70:5c:3e:7c:a1:f3:a8:6c:06:db:0f:72:60:da:36:46:cb:
         de:21:b1:98:fd:f7:7e:58:a1:9b:0e:39:18:16:f0:d5:32:6c:
         0b:a9:96:88:a3:12:c8:a8:93:d6:ab:f3:5a:a2:73:0d:f7:45:
         35:c9:d3:15:ee:64:5d:91:9c:6d:fd:d2:1b:39:d1:8a:35:e4:
         f7:8e:ca:48:ee:c5:cd:30:48:d6:3a:b0:65:e6:fc:11:bb:be:
         7d:44:60:86:6b:17:6b:0e:b6:09:86:d9:15:07:f7:5e:96:4f:
         63:f9:71:50:9d:c2:7a:5e:f9:d7:0d:11:be:54:9a:79:1e:cb:
         a9:ee:3a:7b:53:60:e3:b4:dd:a6:80:16:c8:c1:f2:cd:5f:4b:
         f8:8b:0e:03:37:f3:00:46:34:ff:1d:28:5e:7d:75:5c:83:f1:
         a5:2c:f7:10:c5:7d:bb:88:89:91:22:66:60:55:8e:3d:37:07:
         16:26:4b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 10:18:03 2026 by rpki-client