Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F0447CE88F2E11F1AD89C010CF1D38B0.roa
File:                     F0447CE88F2E11F1AD89C010CF1D38B0.roa (raw, json)
Hash identifier:          CCIjw74ie+HlPV26v/N5X+1myumsIwkKOy2+k5141hQ=
Subject key identifier:   AF:21:6D:09:B8:E7:F3:61:06:26:F1:A0:24:00:BA:AD:4F:3A:BA:A5
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       09FE
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F0447CE88F2E11F1AD89C010CF1D38B0.roa
Signing time:             Mon 03 Aug 2026 11:31:59 +0000
ROA not before:           Mon 03 Aug 2026 11:31:55 +0000
ROA not after:            Sat 30 Jul 2033 11:31:55 +0000
asID:                     37119
IP address blocks:        41.78.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2558 (0x9fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF, serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Aug  3 11:31:55 2026 GMT
            Not After : Jul 30 11:31:55 2033 GMT
        Subject: CN=6a707c2f-4c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e9:bb:19:cb:1e:f6:70:cf:45:bb:f5:43:cf:
                    13:7c:dc:9d:8e:bf:5f:f1:b7:99:3c:ac:76:22:8d:
                    c1:10:c2:ee:d3:c9:ff:21:77:b0:b3:31:d9:24:3b:
                    e9:81:13:e8:02:53:da:4f:7b:38:e1:16:be:0b:24:
                    cb:38:0c:28:97:45:97:c6:43:5e:80:27:b8:4f:cf:
                    76:49:db:e2:f2:c2:3d:ef:bd:4b:e2:67:dc:f8:7c:
                    0b:54:20:39:e5:b4:4d:67:15:05:a8:1e:a6:23:ae:
                    2a:fe:0d:bc:bd:10:f7:71:80:c1:b7:c5:f0:ff:43:
                    89:21:5e:2f:05:28:11:2e:2e:5d:60:7a:b4:99:fb:
                    77:06:3d:9f:af:d6:3a:a0:b0:ee:2d:3b:b4:9f:03:
                    bf:9e:8f:c4:4b:73:81:48:f2:31:44:8f:4d:a1:b5:
                    76:4c:73:82:a6:5d:3d:8a:76:42:f8:ff:fd:f2:80:
                    a3:50:ae:73:51:55:46:99:48:5e:85:f4:c8:76:b5:
                    08:d5:b7:3d:98:5b:67:01:8f:c9:28:84:fc:bd:4b:
                    02:94:13:5d:4c:dc:27:0d:46:c4:f5:bd:3f:25:d4:
                    4c:d6:28:d6:75:8b:25:c2:42:ce:af:fe:a2:d6:fe:
                    f0:6a:ae:84:d8:35:06:1c:10:b0:ca:b8:9d:b2:8d:
                    3f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:21:6D:09:B8:E7:F3:61:06:26:F1:A0:24:00:BA:AD:4F:3A:BA:A5
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F0447CE88F2E11F1AD89C010CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.78.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:f4:4b:b6:c3:c6:f2:41:dd:00:d6:4f:32:0f:a3:23:99:09:
         54:df:b0:7c:8a:c6:31:aa:13:63:1f:c2:f4:da:e9:39:41:ef:
         be:1c:cd:53:e8:34:16:0d:c7:85:37:56:73:a1:3a:a0:ac:ba:
         6a:ce:cc:97:43:ed:d7:88:f5:7d:68:4f:b6:65:b4:77:85:78:
         9d:26:cf:e3:e8:30:e2:55:bf:07:9f:ba:09:35:66:51:00:23:
         20:bd:15:56:36:b5:44:20:be:fd:e7:02:4c:03:e2:35:04:4b:
         f7:7f:2d:97:27:be:ab:33:d0:6e:ba:11:bc:7c:08:b7:81:64:
         de:a4:0f:7e:cd:dc:76:71:e3:c1:19:e4:40:0d:a7:9a:9f:9b:
         5a:7c:15:5f:66:11:43:05:65:2e:48:9c:d6:eb:68:55:7d:c8:
         35:99:9e:0f:90:ae:1e:ca:9c:d9:ba:60:ba:ba:79:26:ed:7e:
         85:6b:8e:5c:d0:b0:7d:67:4b:64:e8:29:30:42:09:2e:2a:03:
         e2:02:6b:b7:67:b2:41:27:29:b5:2e:18:fb:07:62:e0:17:ea:
         05:ef:10:94:61:2e:e6:41:42:1a:fd:97:16:07:da:52:d4:c4:
         87:d0:ff:c5:1b:23:92:66:88:a6:66:f4:d9:60:04:cc:67:0a:
         5d:0c:13:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:31 2026 by rpki-client