Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/C6F6E8188F3211F1ACBDC9A8CE1D38B0.roa
File:                     C6F6E8188F3211F1ACBDC9A8CE1D38B0.roa (raw, json)
Hash identifier:          A9LVPGtCL3BOzU9EVGHYYjRw0VE00ip1vf1XxGtVWA8=
Subject key identifier:   FD:BD:D1:5E:A8:80:F0:61:CA:1D:67:06:4A:B9:01:47:D8:89:6F:33
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       0A0E
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/C6F6E8188F3211F1ACBDC9A8CE1D38B0.roa
Signing time:             Mon 03 Aug 2026 11:59:28 +0000
ROA not before:           Mon 03 Aug 2026 11:59:24 +0000
ROA not after:            Sat 30 Jul 2033 11:59:24 +0000
asID:                     37119
IP address blocks:        105.172.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2574 (0xa0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Aug  3 11:59:24 2026 GMT
            Not After : Jul 30 11:59:24 2033 GMT
        Subject: CN=6a7082a0-3e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6e:88:8b:b1:6c:21:41:22:9d:40:f2:26:89:
                    fd:6a:79:5b:ab:d7:51:5b:cc:9a:80:9d:01:bd:70:
                    d0:a3:89:fc:89:22:d6:91:e4:17:d6:6b:9c:9d:70:
                    5e:dc:0c:93:40:f2:80:14:c5:8b:7f:b8:f7:ff:68:
                    9b:94:1a:5a:a5:05:69:41:a7:cf:68:cb:61:a2:f3:
                    7e:ab:16:7f:d3:ed:1b:06:54:0c:a6:dc:c2:7f:dc:
                    a9:a8:1a:c1:c7:ef:a2:fb:b5:0d:9e:6a:d3:7b:3e:
                    bf:72:5c:82:ed:90:2c:6e:97:8b:b4:fa:1c:8c:b3:
                    1f:69:f0:c0:fe:a8:7f:f4:79:b8:fa:98:2e:b5:c6:
                    c8:b9:a4:cd:e2:61:0d:9a:bc:61:c6:76:19:13:a2:
                    e3:bd:04:d0:e1:94:c6:d8:7a:4a:1a:00:dc:6a:ca:
                    f0:5b:f7:9b:c2:8b:66:b6:09:46:c0:74:63:e1:2b:
                    00:04:02:22:96:9e:c4:84:15:b2:26:d1:71:45:94:
                    2d:5e:0d:e2:56:ae:99:05:fa:af:f4:93:bf:c8:e8:
                    ac:8e:37:6c:89:48:57:de:e6:45:db:4c:2a:7f:a0:
                    7d:fe:79:71:b7:02:7d:1e:89:3f:7f:61:9e:b7:18:
                    db:05:8f:02:3e:5d:a4:30:e1:ef:8d:78:23:01:07:
                    fa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BD:D1:5E:A8:80:F0:61:CA:1D:67:06:4A:B9:01:47:D8:89:6F:33
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/C6F6E8188F3211F1ACBDC9A8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.172.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9f:1f:e0:b1:46:19:fb:b1:bc:c4:5a:6c:80:31:8e:56:1d:dc:
         8b:f5:8e:bc:f3:e9:6e:49:aa:cc:af:bb:ed:b2:fb:2d:79:5d:
         b0:11:cf:f2:4e:21:3a:29:02:fd:e1:cf:4e:ac:f5:22:68:d6:
         e3:5f:9e:0d:39:79:a6:99:df:0b:72:37:63:32:a7:29:4b:fe:
         0d:a0:0b:59:74:ab:cb:2c:c0:64:d7:7e:c4:a1:21:04:58:3e:
         ee:70:48:ad:de:f3:7c:49:26:d3:01:17:e9:c0:ed:96:d0:f9:
         d5:b7:51:95:96:10:91:30:cc:63:e8:77:16:7e:90:58:c7:08:
         44:95:10:50:c2:a4:9e:7b:a9:63:dc:05:c6:a6:65:08:cb:fb:
         39:ce:09:20:f5:ca:0f:83:de:92:d3:09:08:0f:ab:c9:14:ba:
         9b:9f:41:3d:6f:7c:3f:c7:d2:5c:f8:5e:56:6d:68:d5:95:6c:
         76:df:80:9b:fe:bb:a1:9e:a9:c6:d7:53:cd:18:f3:ee:b0:77:
         36:f0:86:fc:57:2f:e4:3d:c7:8a:54:3f:fa:2a:bd:87:93:bb:
         c6:1c:8a:1e:01:d3:19:f7:e0:7c:e6:53:f6:6f:74:6b:64:bb:
         fe:63:b5:14:42:cf:fa:0f:cb:53:35:b8:58:2e:89:02:56:03:
         76:a1:95:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:44 2026 by rpki-client