Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/BCAD96AE8FD211F19CA8B3F7CE1D38B0.roa
File:                     BCAD96AE8FD211F19CA8B3F7CE1D38B0.roa (raw, json)
Hash identifier:          VUHxWTqV5r7qTTGw3Wky8WcpizcFJEE4TswtzibFPmA=
Subject key identifier:   09:ED:87:E6:49:00:3A:19:4E:1D:07:39:72:89:38:F9:D0:E3:C5:8E
Certificate issuer:       /CN=F36C5A07AR/serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
Certificate serial:       0711
Authority key identifier: CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/BCAD96AE8FD211F19CA8B3F7CE1D38B0.roa
Signing time:             Tue 04 Aug 2026 07:04:30 +0000
ROA not before:           Tue 04 Aug 2026 07:04:26 +0000
ROA not after:            Mon 04 Aug 2036 07:04:26 +0000
asID:                     328061
IP address blocks:        164.160.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                          rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1809 (0x711)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5A07AR, serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
        Validity
            Not Before: Aug  4 07:04:26 2026 GMT
            Not After : Aug  4 07:04:26 2036 GMT
        Subject: CN=6a718efe-da37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:e9:de:69:8b:f8:15:ab:ae:9a:98:46:2c:
                    a2:8e:49:c5:eb:61:f3:5a:bf:16:b5:7c:78:8b:05:
                    11:31:6b:d0:ce:27:c4:2b:cb:9a:bd:1c:86:b7:d7:
                    d8:ba:be:d1:bc:35:a4:26:06:a3:50:a4:2b:e2:2d:
                    5b:c7:66:7f:33:ec:a3:dd:79:8d:fd:e7:c2:17:03:
                    46:23:22:b3:74:cc:ca:63:15:ad:a9:ac:47:62:44:
                    c7:d3:23:51:2f:83:d4:9c:4a:b9:4c:27:3c:f6:25:
                    ec:c7:5b:5f:47:ee:21:29:28:8d:fc:20:3a:03:fc:
                    a5:65:3c:f3:8e:8c:df:65:ff:9b:0e:26:24:bb:11:
                    90:4a:34:a7:20:41:0f:11:c4:13:9c:75:8e:69:06:
                    c5:ac:71:ec:4d:16:18:d8:90:0d:a1:79:bd:37:a4:
                    59:ee:f8:26:10:72:46:ee:b0:6c:48:68:43:0c:78:
                    ba:fa:e5:69:d7:9f:72:2a:32:09:39:6f:09:96:28:
                    8f:3e:e7:fc:4c:79:67:aa:2f:f5:3b:76:73:a9:f4:
                    75:2e:d9:7c:10:ef:2e:80:f6:48:18:62:19:a4:f5:
                    0a:a3:75:8f:06:ab:0f:5f:0e:f2:25:b4:01:38:1b:
                    8f:c6:6f:9c:7b:92:49:7d:e4:99:ee:66:8f:42:9b:
                    4f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:ED:87:E6:49:00:3A:19:4E:1D:07:39:72:89:38:F9:D0:E3:C5:8E
            X509v3 Authority Key Identifier:
                keyid:CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/BCAD96AE8FD211F19CA8B3F7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.160.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:c7:bb:b2:9c:89:93:a5:e4:5c:3c:72:9f:5d:ee:c2:ae:ce:
         30:1b:7e:19:fe:a1:87:d4:4d:f6:cd:2b:8f:91:a4:f1:8f:2b:
         0b:79:23:06:07:39:e9:d6:f0:e2:bb:03:fc:5c:a4:c4:4a:30:
         22:4d:22:c2:14:6b:0c:54:f6:27:8e:41:b9:73:67:ed:1e:43:
         80:d2:ac:b9:6a:1a:6a:e3:1b:25:3a:cd:87:dd:da:f8:57:9d:
         ac:69:03:6b:e7:f5:e6:6e:c3:a0:15:3d:af:b6:c5:f4:df:d0:
         16:2c:e4:a2:32:b4:6b:26:b6:52:c1:b6:47:7b:64:6e:60:01:
         1c:1a:d9:ac:86:5d:c4:3e:37:fa:5a:db:fb:b7:74:29:83:3a:
         d0:6f:d1:4f:27:24:40:64:45:6f:b9:c2:c7:b7:48:93:0b:92:
         60:36:4e:c8:07:90:4d:a0:99:2e:48:9a:88:76:c7:3f:50:8e:
         b0:74:a0:2c:66:9d:3c:ac:1c:e9:3f:ad:86:5b:20:7b:ce:84:
         5a:3a:75:5b:e3:b5:6b:5b:cf:94:53:ff:df:24:c2:b0:bc:fe:
         cc:7b:fb:d7:26:b6:b9:e4:8d:91:13:cd:5b:e1:97:ad:89:a2:
         28:d2:aa:c2:5e:59:e7:ff:99:38:11:0e:ad:f2:26:62:e3:e8:
         0c:37:73:25
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBxEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzVBMDdBUjExMC8GA1UEBRMoQ0FEQTdBMTIwNTUzNDQzNzlBMTNBRTZERTdCQTI3
OEVCQzUxNkE1ODAeFw0yNjA4MDQwNzA0MjZaFw0zNjA4MDQwNzA0MjZaMBgxFjAU
BgNVBAMTDTZhNzE4ZWZlLWRhMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1feneaYv4FauumphGLKKOScXrYfNavxa1fHiLBRExa9DOJ8Qry5q9HIa3
19i6vtG8NaQmBqNQpCviLVvHZn8z7KPdeY3958IXA0YjIrN0zMpjFa2prEdiRMfT
I1Evg9ScSrlMJzz2JezHW19H7iEpKI38IDoD/KVlPPOOjN9l/5sOJiS7EZBKNKcg
QQ8RxBOcdY5pBsWscexNFhjYkA2heb03pFnu+CYQckbusGxIaEMMeLr65WnXn3Iq
Mgk5bwmWKI8+5/xMeWeqL/U7dnOp9HUu2XwQ7y6A9kgYYhmk9QqjdY8Gqw9fDvIl
tAE4G4/Gb5x7kkl95JnuZo9Cm08jAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUCe2H
5kkAOhlOHQc5cok4+dDjxY4wHwYDVR0jBBgwFoAUytp6EgVTRDeaE65t57onjrxR
algwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1QTA3LzZGMTQ2QjIyMjVBNDExRUM4OUZEOTA1MEQ4QTAxNENFL3l0cDZF
Z1ZUUkRlYUU2NXQ1N29uanJ4UmFsZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3l0cDZFZ1ZUUkRlYUU2NXQ1N29uanJ4UmFsZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkM1QTA3LzZGMTQ2QjIyMjVBNDExRUM4OUZEOTA1MEQ4QTAx
NENFL0JDQUQ5NkFFOEZEMjExRjE5Q0E4QjNGN0NFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKkoIgwDQYJKoZIhvcNAQELBQAD
ggEBAA3Hu7KciZOl5Fw8cp9d7sKuzjAbfhn+oYfUTfbNK4+RpPGPKwt5IwYHOenW
8OK7A/xcpMRKMCJNIsIUawxU9ieOQblzZ+0eQ4DSrLlqGmrjGyU6zYfd2vhXnaxp
A2vn9eZuw6AVPa+2xfTf0BYs5KIytGsmtlLBtkd7ZG5gARwa2ayGXcQ+N/pa2/u3
dCmDOtBv0U8nJEBkRW+5wse3SJMLkmA2TsgHkE2gmS5Imoh2xz9QjrB0oCxmnTys
HOk/rYZbIHvOhFo6dVvjtWtbz5RT/98kwrC8/sx7+9cmtrnkjZETzVvhl62JoijS
qsJeWef/mTgRDq3yJmLj6Aw3cyU=
-----END CERTIFICATE-----
Generated at Thu Aug 6 14:11:45 2026 by rpki-client