Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/3157B5E68F2611F18DAB0EDECE1D38B0.roa
File:                     3157B5E68F2611F18DAB0EDECE1D38B0.roa (raw, json)
Hash identifier:          W88LK3mtRl5NRWH4AXpyLOM9HfXSmHjkaQceI4IjLp4=
Subject key identifier:   7E:01:07:CD:A6:65:14:7A:14:E1:FD:DE:B4:0B:B5:D4:58:03:5B:B6
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       09E8
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/3157B5E68F2611F18DAB0EDECE1D38B0.roa
Signing time:             Mon 03 Aug 2026 10:29:23 +0000
ROA not before:           Mon 03 Aug 2026 10:29:19 +0000
ROA not after:            Sat 30 Jul 2033 10:29:19 +0000
asID:                     37119
IP address blocks:        105.169.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2536 (0x9e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Aug  3 10:29:19 2026 GMT
            Not After : Jul 30 10:29:19 2033 GMT
        Subject: CN=6a706d83-b30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cf:cf:1d:12:f3:fb:4e:98:aa:ab:b5:da:82:
                    2f:bc:b1:bb:1c:ca:54:d9:58:5c:5f:a1:c5:24:36:
                    40:2f:4d:03:ca:d8:5b:83:e3:f1:64:ab:25:1c:43:
                    41:cf:33:13:2a:bb:07:eb:4c:08:f5:32:08:2e:f0:
                    82:23:0b:59:ae:67:2a:3c:92:db:97:e1:7c:05:b6:
                    ba:38:b9:0c:63:77:62:27:9d:83:60:ab:28:ba:2f:
                    10:a7:7b:5f:32:67:6f:96:29:b1:a8:2c:a9:30:14:
                    5b:40:c3:86:21:4e:8f:28:11:11:ec:bb:63:3e:c5:
                    ff:a7:ec:29:e0:f5:c0:71:55:dd:d3:39:47:75:c0:
                    ea:54:c0:62:84:13:e3:85:71:97:82:61:38:fc:f6:
                    8c:b1:17:f3:7f:0d:01:c3:27:b7:20:7a:13:95:13:
                    e4:bf:59:13:7a:a0:ef:74:58:0f:df:0b:3b:89:2e:
                    fa:73:79:d3:8d:c8:39:4d:6e:33:11:22:e8:05:0b:
                    30:c8:6a:86:53:e0:16:05:9b:3f:3e:e5:cc:15:e3:
                    f4:63:f9:a7:70:f8:8f:af:24:d3:7e:66:be:d3:c1:
                    83:71:95:f3:fc:0e:d3:61:c2:eb:7f:97:52:8e:d6:
                    c1:f7:31:9b:31:a4:8d:90:19:de:75:9c:30:c9:d3:
                    26:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:01:07:CD:A6:65:14:7A:14:E1:FD:DE:B4:0B:B5:D4:58:03:5B:B6
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/3157B5E68F2611F18DAB0EDECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.169.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:fb:16:87:e4:1d:8f:89:97:58:e7:c7:c4:fe:53:c8:33:83:
         5c:40:f2:5b:bb:a4:af:75:dd:d3:de:45:8f:82:16:10:bd:79:
         73:01:df:74:dd:e4:65:af:06:ce:62:48:7f:22:0e:56:8b:b6:
         6b:a5:da:1a:c1:1d:f6:5d:be:e2:35:a2:20:34:18:c2:16:df:
         e3:b7:46:49:ec:9a:aa:50:48:bc:3b:ac:0c:1f:28:f3:1a:10:
         65:e2:79:8f:2a:d3:fe:1b:a3:2a:90:59:00:11:25:64:8a:ae:
         91:36:fb:f2:7d:9e:c9:7f:bf:ff:a1:80:31:99:4d:9b:8a:e0:
         6c:8a:8b:47:68:d4:f9:d9:64:6b:82:2c:27:02:fd:3c:88:98:
         4d:80:ff:d8:94:58:11:48:07:d4:08:1b:dc:1e:b3:00:c7:71:
         63:7d:80:7b:60:49:9d:b3:b7:26:6a:11:c9:87:b7:7e:da:3a:
         5c:ac:19:4a:40:37:10:39:aa:4b:37:72:da:f5:45:61:2c:f7:
         ba:f3:53:b1:f2:ab:e2:91:e2:37:cf:fc:ad:0a:ab:46:0f:fd:
         87:37:1b:a7:d5:b8:ab:89:42:5b:ab:58:57:a8:c1:dc:11:f9:
         4b:b7:da:18:69:b3:81:c1:f6:e5:24:eb:57:37:fc:08:85:62:
         a7:69:00:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:30 2026 by rpki-client