Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/DFBB7EE68F2711F197AE55E8CE1D38B0.roa
File:                     DFBB7EE68F2711F197AE55E8CE1D38B0.roa (raw, json)
Hash identifier:          +cekfFoDaHiCC5nt0F2gYLMnTHTnlgfj4q5JSSW+JnQ=
Subject key identifier:   DC:C4:41:84:C7:98:5A:EB:FF:B5:7C:A0:2E:38:09:45:A9:58:FD:A6
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       09F0
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/DFBB7EE68F2711F197AE55E8CE1D38B0.roa
Signing time:             Mon 03 Aug 2026 10:41:25 +0000
ROA not before:           Mon 03 Aug 2026 10:41:21 +0000
ROA not after:            Sat 30 Jul 2033 10:41:21 +0000
asID:                     37119
IP address blocks:        105.169.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2544 (0x9f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Aug  3 10:41:21 2026 GMT
            Not After : Jul 30 10:41:21 2033 GMT
        Subject: CN=6a707055-40f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ee:ec:9d:b0:ec:d8:fc:d9:43:1b:b0:33:23:
                    e0:2b:df:08:07:0b:42:22:c1:44:90:ed:58:83:17:
                    c2:ad:d0:ad:0c:e4:8f:6c:f6:4a:14:66:6a:50:9b:
                    8d:e2:18:98:b6:66:45:92:0f:b0:90:69:06:da:47:
                    54:9e:11:4e:cc:25:40:68:06:0b:77:09:9f:09:93:
                    4c:1d:70:97:0b:83:38:4e:50:8f:ae:1f:62:d6:de:
                    0a:ac:98:53:ec:35:b5:90:55:5a:19:8a:0a:1c:00:
                    c4:42:bd:c8:49:39:ac:d8:e9:e1:dd:43:16:dd:43:
                    0f:03:dc:7d:b3:81:7a:bd:74:a7:d7:61:2a:ee:94:
                    ce:cd:cf:e4:12:34:d1:6b:6d:37:67:ff:5a:86:17:
                    b5:53:1e:44:3f:37:9f:49:77:71:19:ce:e2:46:f3:
                    ea:f2:c7:97:80:3c:61:03:58:ea:bf:c0:a8:ea:d4:
                    92:5c:e2:ee:ab:be:e8:51:9c:14:32:61:26:1a:49:
                    b4:60:0e:af:f5:c8:92:38:2d:57:9d:89:40:9d:f7:
                    ae:69:57:66:e0:9c:66:8b:bc:ee:a2:be:98:98:c9:
                    b0:2e:03:89:fd:5b:64:97:22:66:8d:e9:04:8e:ad:
                    c0:ae:c2:bf:ad:6c:4f:6d:99:51:f6:f7:1c:57:dd:
                    b2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C4:41:84:C7:98:5A:EB:FF:B5:7C:A0:2E:38:09:45:A9:58:FD:A6
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/DFBB7EE68F2711F197AE55E8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.169.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:f9:19:5f:91:47:11:b2:ca:33:10:28:b0:62:9a:6b:82:17:
         88:a4:97:03:96:52:03:4d:b4:97:1c:74:aa:e1:7b:b3:90:db:
         e2:ef:3d:58:90:2e:c4:d5:56:ec:f9:85:89:ce:13:5a:20:68:
         62:2d:92:a1:ec:cc:2b:b0:46:8b:32:10:15:2d:de:0b:53:f9:
         7a:1c:d7:fb:be:da:f9:b5:0e:c3:bd:d7:17:ca:b6:66:74:0a:
         f6:a0:ec:df:9d:76:28:3d:a1:7b:0d:71:55:fe:98:ac:bc:51:
         eb:a7:f2:77:b3:e2:fa:60:46:cd:a5:33:90:2a:1b:4a:aa:a1:
         dd:aa:5f:53:ab:bf:e9:fe:b4:cb:33:5e:93:97:c0:58:f9:ab:
         fb:46:1c:00:84:31:e2:1d:80:d5:e7:a8:55:08:86:0a:b4:ba:
         1d:98:74:d4:d1:e7:f3:44:0a:b0:ce:eb:a4:c4:1e:c4:7a:58:
         ff:10:b6:01:05:f3:c2:29:13:82:52:ee:0f:01:17:b1:6a:65:
         6a:6b:9c:4a:e8:75:95:98:c8:9d:e8:19:2a:b2:8f:ab:ef:ab:
         a8:d7:71:50:23:cd:93:c2:9c:00:de:93:ff:1a:a5:48:c5:aa:
         e6:1a:39:54:95:f6:f5:e7:13:f6:ac:e7:aa:79:76:86:fc:0b:
         79:2b:f1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:44 2026 by rpki-client