Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/56173198802D11F1BCEC28CBCE1D38B0.roa
File:                     56173198802D11F1BCEC28CBCE1D38B0.roa (raw, json)
Hash identifier:          LVluWeVRrfkeIv88ODUp/Tw7eTwRvYS6t5zHbRxbeGs=
Subject key identifier:   EE:BC:CE:55:CF:19:8A:A0:BF:43:44:2C:78:74:33:7F:51:38:12:2C
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0C91
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/56173198802D11F1BCEC28CBCE1D38B0.roa
Signing time:             Wed 15 Jul 2026 09:12:43 +0000
ROA not before:           Wed 15 Jul 2026 09:12:40 +0000
ROA not after:            Wed 31 Dec 2036 09:12:40 +0000
asID:                     12083
IP address blocks:        165.49.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3217 (0xc91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Jul 15 09:12:40 2026 GMT
            Not After : Dec 31 09:12:40 2036 GMT
        Subject: CN=6a574f0b-d9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:76:a5:aa:76:e9:b1:06:ac:9a:90:44:36:8f:
                    32:c6:1a:28:71:ef:0f:56:66:47:fd:f7:41:8c:33:
                    1e:7e:66:23:9c:67:65:94:df:dc:4e:e7:1d:90:74:
                    2d:bf:49:bc:2c:23:cb:21:5c:2b:24:2e:75:68:8f:
                    eb:cd:f0:ca:12:9f:1e:1e:54:67:be:a3:da:15:45:
                    8f:a3:28:d0:15:b3:8c:78:d6:a7:58:94:cf:05:35:
                    04:55:6c:b7:47:39:70:5f:17:31:20:83:6a:ff:cc:
                    1d:2f:f5:e8:7f:fd:72:83:dc:d5:e0:58:79:15:ab:
                    5c:c7:45:20:d9:51:d2:cd:a1:78:a5:e6:e1:cc:70:
                    49:28:bd:55:bb:59:7d:67:b5:2d:d5:b7:eb:e9:de:
                    d2:2d:0f:f7:d2:c5:40:81:0a:9a:b6:98:cd:47:ba:
                    e2:37:eb:d1:cd:72:ed:c3:23:24:64:23:85:4b:11:
                    41:79:1b:26:9d:73:32:8c:15:60:38:87:80:d0:d8:
                    5a:3f:6c:79:e9:9e:f2:81:27:29:7c:cc:23:78:d2:
                    ac:f0:eb:a4:fd:19:ad:5d:a7:dc:c1:92:c8:e4:3a:
                    4e:5b:a0:ff:0a:58:6d:f3:4d:fb:8a:d1:4c:81:9e:
                    fd:b2:58:10:f4:1d:fb:ea:27:8b:31:eb:f5:cc:34:
                    4e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BC:CE:55:CF:19:8A:A0:BF:43:44:2C:78:74:33:7F:51:38:12:2C
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/56173198802D11F1BCEC28CBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:92:b7:42:03:84:9f:e5:05:89:6b:39:e4:ab:ab:61:ec:14:
         a2:1d:f0:ab:9f:2a:5a:80:ad:aa:08:5f:1e:ab:7d:64:27:7a:
         04:f5:e1:0e:22:87:ed:8d:90:ed:bc:aa:90:2c:54:e1:98:96:
         8b:ee:89:37:94:3d:fd:98:9a:19:ac:43:13:b8:02:2e:11:66:
         0c:25:0b:d3:59:b9:ac:b4:73:48:49:26:77:e0:4b:01:57:8c:
         1a:a6:de:5e:94:c1:e8:5f:bd:e8:cc:06:e8:03:d4:a9:f6:40:
         1c:8f:17:02:ed:db:c2:ae:1c:d1:34:b0:f2:41:64:7c:69:5d:
         f7:f7:1c:51:d8:11:d8:ad:16:66:44:76:13:be:f5:d0:7d:ee:
         74:94:6f:62:8c:a1:c8:06:fd:bc:96:d4:5b:ea:29:94:70:c8:
         40:6d:47:6d:d4:43:5c:66:7d:46:ec:1a:2c:a0:12:d5:94:8c:
         b9:2d:f6:8c:82:0f:10:d7:67:6e:2d:58:0f:85:c4:cb:55:de:
         de:8e:3a:74:1d:3f:98:41:ff:b8:c1:ee:1d:7c:20:13:f6:1a:
         5f:d6:96:28:6f:26:5b:3f:ac:86:7d:6d:87:1e:f7:98:58:10:
         df:53:24:52:52:6d:6b:10:ad:76:11:c9:3e:78:7d:65:44:3c:
         58:25:4c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:14 2026 by rpki-client