Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C446C6DE802C11F1A07212C7CE1D38B0.roa
File:                     C446C6DE802C11F1A07212C7CE1D38B0.roa (raw, json)
Hash identifier:          XEobPnnrTk086QOQIUrKItQFlO2xxM3B4grSMI71gOg=
Subject key identifier:   6E:4E:74:A0:FD:49:4D:D0:55:89:B1:D2:7C:61:F4:F3:9F:D1:96:E0
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0C83
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C446C6DE802C11F1A07212C7CE1D38B0.roa
Signing time:             Wed 15 Jul 2026 09:08:39 +0000
ROA not before:           Wed 15 Jul 2026 09:08:35 +0000
ROA not after:            Wed 31 Dec 2036 09:08:35 +0000
asID:                     12083
IP address blocks:        165.49.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3203 (0xc83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Jul 15 09:08:35 2026 GMT
            Not After : Dec 31 09:08:35 2036 GMT
        Subject: CN=6a574e17-5d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:59:f9:59:61:71:8c:20:c4:d8:22:95:b7:f8:
                    11:a2:81:cd:2a:58:82:19:37:b9:8f:7d:24:4c:b6:
                    17:72:34:7c:e2:ca:cf:a6:cd:f6:2a:d7:71:d8:4e:
                    ed:a8:b2:39:4e:ae:2a:d3:34:93:19:4c:e7:1f:69:
                    c4:ee:b0:cf:34:fb:c6:dd:38:70:cf:1d:a5:89:8f:
                    85:14:bb:62:11:fa:e5:2f:5a:94:78:5b:92:22:91:
                    d8:e3:c5:9d:e2:d4:64:5a:e9:fc:81:59:27:73:44:
                    09:71:28:5f:f3:8c:d7:dc:1a:64:eb:0f:4e:1f:ff:
                    e5:0e:e2:c5:a8:c6:38:34:74:e0:d8:e4:a7:e6:9f:
                    ff:a6:6d:d9:2a:b4:6b:ab:2d:0b:f2:f2:36:27:78:
                    1b:a5:f2:ab:1d:64:e6:5c:1b:3f:94:b8:79:0f:69:
                    98:82:ec:8e:b9:62:83:3d:38:92:0a:dc:5f:c3:9c:
                    bc:07:c8:07:8b:7f:c5:e1:cd:ae:a5:8f:81:7b:ec:
                    2a:3a:13:a2:60:28:8c:40:93:c9:74:78:5e:d5:d1:
                    a7:12:fc:31:9b:13:39:3d:73:27:53:30:92:93:06:
                    7e:c2:98:dc:97:3c:31:b3:33:e0:8b:06:8d:e6:f9:
                    73:df:e5:23:b6:25:fb:f9:4c:e1:26:ac:de:a7:fc:
                    0b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4E:74:A0:FD:49:4D:D0:55:89:B1:D2:7C:61:F4:F3:9F:D1:96:E0
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C446C6DE802C11F1A07212C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:f5:01:d2:f3:46:a5:da:2d:d9:17:80:f5:9b:88:5d:a1:33:
         36:45:b8:6d:06:2e:e0:ac:ab:f0:27:2c:76:34:a0:a0:f0:97:
         a6:1a:77:62:91:ce:23:a7:c3:20:f4:4d:e9:02:3e:0d:d7:2c:
         8a:e5:60:0a:1e:de:b0:90:83:42:ee:ea:06:c7:35:c6:be:b6:
         f5:7b:48:c9:11:e5:6a:1f:72:e0:d6:58:1a:24:c7:92:11:ee:
         3d:6a:75:a3:13:4a:97:77:8e:ba:7a:5d:54:03:dd:a0:66:cf:
         a3:be:7b:6a:e0:a5:49:39:e0:a5:f4:de:7f:2d:58:92:58:5e:
         9a:5f:10:a6:94:ba:c2:e0:e5:6c:cb:36:bf:6a:c1:52:d6:c1:
         53:1f:1c:f6:e8:87:be:e5:79:71:1b:9f:c6:73:56:d5:58:ed:
         c6:69:74:5b:2e:8b:33:50:5a:16:31:aa:18:ae:e2:83:93:02:
         c7:36:3c:7e:4b:67:8e:b5:3b:f2:ee:1e:c7:b7:e5:10:9a:48:
         57:81:99:b8:eb:bf:36:33:06:36:e3:27:dd:c4:2c:97:36:96:
         f8:40:41:5d:36:38:89:e8:0e:e0:f4:ea:89:9d:e2:3c:98:d0:
         42:d8:11:ce:4e:3c:a2:59:90:b7:1d:0b:8a:91:fb:1e:0f:a7:
         39:23:f1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:26 2026 by rpki-client