Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E03FF8D28F3711F18CC570C8CE1D38B0.roa
File:                     E03FF8D28F3711F18CC570C8CE1D38B0.roa (raw, json)
Hash identifier:          FEJjyTXBgwBiq6OwpVtScOm9+8Yk+77fh1gi+ixQIEc=
Subject key identifier:   AB:AB:5F:24:F0:30:91:19:51:FC:AD:CE:4C:CC:0B:39:31:31:23:6D
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       0A26
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E03FF8D28F3711F18CC570C8CE1D38B0.roa
Signing time:             Mon 03 Aug 2026 12:35:58 +0000
ROA not before:           Mon 03 Aug 2026 12:35:54 +0000
ROA not after:            Sat 30 Jul 2033 12:35:54 +0000
asID:                     37119
IP address blocks:        105.172.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2598 (0xa26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Aug  3 12:35:54 2026 GMT
            Not After : Jul 30 12:35:54 2033 GMT
        Subject: CN=6a708b2e-1235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ed:6f:af:dd:76:90:08:57:31:cb:07:1f:b1:
                    36:9a:bf:58:6d:1c:33:40:16:a9:97:73:11:37:1d:
                    65:70:00:26:83:7b:29:83:0b:c4:12:48:af:44:c0:
                    64:be:3e:80:74:cb:6e:eb:5c:b5:d7:57:fd:21:8e:
                    7b:54:87:dc:43:43:c9:2a:1f:d4:95:8d:cb:07:86:
                    8e:f9:8e:e6:57:a8:37:87:4b:b9:a2:86:2c:b4:02:
                    85:2d:49:39:e6:f5:03:b7:68:b7:a2:87:1e:36:ca:
                    19:6c:01:c1:1b:3c:88:50:eb:66:f7:11:d6:d9:31:
                    b2:a8:2a:1f:4a:79:81:8c:4d:45:83:6c:a6:db:f1:
                    17:36:5b:48:93:db:f7:bf:ef:ca:84:71:e7:25:b1:
                    5c:6d:94:6e:bd:60:39:f8:9a:12:06:05:5c:4b:3b:
                    da:73:88:6d:f3:56:a5:55:b8:04:5a:ba:3c:56:bf:
                    08:25:13:2c:de:24:8f:f5:26:97:97:30:aa:b9:c3:
                    6b:ff:21:4f:e9:2e:39:4d:58:a7:cc:2e:ee:95:d8:
                    f2:b2:78:a5:b0:17:fb:18:dd:be:84:93:04:17:16:
                    98:3a:a1:9c:96:e9:3f:14:95:ca:96:87:31:96:d6:
                    f1:ee:9b:cf:66:c1:c6:1a:a1:9a:12:ef:61:7b:33:
                    5c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AB:5F:24:F0:30:91:19:51:FC:AD:CE:4C:CC:0B:39:31:31:23:6D
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E03FF8D28F3711F18CC570C8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.172.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c0:ef:81:d7:29:35:69:26:4a:c2:62:3a:4c:06:62:69:85:84:
         27:f8:85:cf:cd:60:63:35:c9:57:5f:2e:c7:26:01:2a:ca:99:
         49:ca:33:d0:4b:a4:64:a3:1e:68:70:51:07:6b:38:06:f4:32:
         b1:44:10:e2:15:2b:96:86:0e:36:f9:9c:84:7a:2d:d9:dd:95:
         69:95:8e:e7:cb:87:ed:08:d1:28:01:9e:ad:7f:c3:7f:d0:4f:
         37:37:f3:59:f6:ad:cd:55:02:b9:0a:ba:c1:20:f8:46:22:8b:
         32:b4:c2:99:fb:2f:ca:7d:13:b8:36:87:5c:ea:40:2f:62:3e:
         09:44:e7:71:8f:e6:b5:c4:7d:2f:53:2b:65:e9:a4:7c:bd:7c:
         41:fd:20:6e:cf:36:75:0c:22:cc:d5:5f:7c:3f:58:af:fc:fc:
         60:5b:13:35:1e:17:98:8e:e0:b0:7a:5b:3f:14:3f:15:b6:27:
         e6:43:bb:79:23:ad:23:b8:29:fa:e1:4d:93:ff:ef:b0:45:3c:
         00:36:4b:00:a5:17:7f:96:9c:82:bb:76:5f:77:1c:30:d2:95:
         2c:8c:62:1c:b6:35:42:1e:c3:40:4b:d0:91:38:fa:f4:1a:45:
         b7:79:2f:e6:c8:9a:6d:3e:22:bc:b8:45:58:d7:4e:7a:24:46:
         a6:26:80:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:45 2026 by rpki-client