Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/6BE3FA6E8F2411F1BE660CD4CE1D38B0.roa
File:                     6BE3FA6E8F2411F1BE660CD4CE1D38B0.roa (raw, json)
Hash identifier:          O+Am7VVAOHIbe/EP+9zipCiwbWPHO30hMeoieCyrHKA=
Subject key identifier:   13:E0:E2:2B:BC:D7:3D:85:0B:BC:EE:29:17:C2:1A:9A:00:A4:C2:27
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       09E2
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/6BE3FA6E8F2411F1BE660CD4CE1D38B0.roa
Signing time:             Mon 03 Aug 2026 10:16:42 +0000
ROA not before:           Mon 03 Aug 2026 10:16:38 +0000
ROA not after:            Sat 30 Jul 2033 10:16:38 +0000
asID:                     37119
IP address blocks:        105.168.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2530 (0x9e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Aug  3 10:16:38 2026 GMT
            Not After : Jul 30 10:16:38 2033 GMT
        Subject: CN=6a706a8a-1bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:78:93:e7:97:7f:a9:b2:02:62:d4:8a:98:
                    d8:6d:60:16:99:de:d8:d4:c6:c2:83:fd:26:05:2f:
                    3d:95:67:2a:2c:f6:e0:45:1f:69:57:20:12:bb:39:
                    6f:d0:0f:98:66:b0:ef:d9:57:31:9c:e3:d8:a1:cc:
                    ea:4b:e1:91:38:1e:8e:cb:7f:a5:09:a2:9c:09:fd:
                    12:87:6e:80:6a:33:02:ee:c8:28:0f:c7:73:c8:1b:
                    42:f8:55:47:3f:03:8f:05:8d:f5:c6:b3:9a:92:77:
                    25:c9:db:54:b8:c8:23:45:aa:c4:90:a2:78:60:9b:
                    82:91:c2:65:7d:1f:0b:73:fb:9c:4c:7a:d4:91:9b:
                    de:62:d5:58:9c:c9:1e:1e:b7:7d:c8:a2:0b:57:22:
                    4f:3a:48:06:8f:77:d1:a8:59:f2:a0:17:a2:bc:59:
                    6b:82:a5:2d:0f:af:0b:a8:6b:95:32:fe:12:05:05:
                    06:72:88:10:1e:2a:6a:da:0a:93:5e:62:22:eb:ca:
                    ea:3c:14:e0:f9:a3:34:2e:ea:6f:6e:a0:a9:60:d0:
                    81:f1:06:c8:fc:d8:2d:c2:96:fe:24:7d:53:7b:a4:
                    6e:64:32:80:a3:ed:e8:ba:5f:d7:ba:1b:59:1a:c6:
                    3a:2e:d2:0e:32:4e:70:c6:a6:c2:b3:68:ea:ab:06:
                    b4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E0:E2:2B:BC:D7:3D:85:0B:BC:EE:29:17:C2:1A:9A:00:A4:C2:27
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/6BE3FA6E8F2411F1BE660CD4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.168.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         64:e9:35:86:18:ba:0d:09:4b:f6:4e:84:c9:1c:57:6e:1c:69:
         e5:6c:62:1b:df:ee:c3:db:de:e6:6d:63:f0:87:34:82:c6:6b:
         83:40:ab:43:60:a4:6d:96:53:4c:ba:74:33:7b:93:15:cd:fb:
         c8:66:8f:9d:05:01:05:37:a9:4a:03:3d:e9:57:51:ae:69:b6:
         79:b1:d0:6a:cd:3c:18:b8:67:bb:9f:1f:67:02:1b:cf:f8:fe:
         b8:21:e2:6d:29:60:56:74:2e:45:d4:32:a5:b5:09:0e:98:c9:
         eb:fc:5d:32:f0:3d:35:4e:d0:53:fa:be:08:2c:16:20:e4:a6:
         11:83:b6:69:dd:2b:ea:1f:e0:90:98:ca:8d:9f:7e:73:06:06:
         37:90:6d:d9:9c:09:d0:d7:f7:ab:5c:28:e8:a4:90:82:11:e5:
         95:d5:93:26:a7:47:27:63:da:15:24:b7:2a:a1:b4:90:a2:b6:
         ba:28:fb:27:b5:10:58:08:b6:b4:b7:34:3e:42:b1:1a:b8:c8:
         36:89:42:d9:3b:32:c6:1a:c4:cd:6c:b6:fb:89:ad:97:07:35:
         91:b4:c3:b7:58:f5:4d:f0:a0:dd:82:3b:d6:de:65:dd:93:80:
         64:01:48:f9:50:51:d9:db:c6:af:c0:c1:07:56:07:2e:74:fb:
         df:d2:d5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:44 2026 by rpki-client