Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/9BE08B8E8C4E11F1BE755A05CF1D38B0.roa
File:                     9BE08B8E8C4E11F1BE755A05CF1D38B0.roa (raw, json)
Hash identifier:          07hDoRNRXMySdWEGeDHUnYW4FbI3+O15r72KVP2ufCQ=
Subject key identifier:   E6:A8:CC:56:34:10:FA:DF:13:0C:77:05:F9:7F:49:67:02:5E:98:72
Certificate issuer:       /CN=F36D96A0AF/serialNumber=2C4973B93083A484AC2D4658278502C788D064F5
Certificate serial:       05C5
Authority key identifier: 2C:49:73:B9:30:83:A4:84:AC:2D:46:58:27:85:02:C7:88:D0:64:F5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/9BE08B8E8C4E11F1BE755A05CF1D38B0.roa
Signing time:             Thu 30 Jul 2026 19:41:08 +0000
ROA not before:           Thu 30 Jul 2026 19:41:04 +0000
ROA not after:            Wed 30 Jul 2036 19:41:04 +0000
asID:                     329126
IP address blocks:        102.206.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1477 (0x5c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D96A0AF, serialNumber=2C4973B93083A484AC2D4658278502C788D064F5
        Validity
            Not Before: Jul 30 19:41:04 2026 GMT
            Not After : Jul 30 19:41:04 2036 GMT
        Subject: CN=6a6ba8d4-06fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:51:9b:87:08:20:33:3e:d8:1f:5d:ec:e2:
                    b0:17:93:4d:3c:c9:60:6d:ff:0c:8d:80:80:28:88:
                    ca:92:c9:fd:2d:11:65:55:ab:59:38:09:0e:ae:84:
                    b6:33:0a:e9:75:b7:1a:98:3a:04:49:a8:d1:e0:1c:
                    62:a3:76:a5:80:70:c9:e5:b0:cd:aa:4c:75:85:31:
                    1b:e2:87:72:a9:cf:6f:1c:56:81:08:bc:46:0f:0c:
                    d1:c9:d8:15:8e:f2:41:ea:9e:d3:18:93:a0:7e:7a:
                    f7:b5:db:7f:e5:f6:28:c3:3e:99:85:2f:c0:14:e3:
                    3e:4a:9e:cf:cf:fd:72:bc:f7:f5:9a:1f:fc:5e:d6:
                    45:f9:19:eb:11:c8:51:4e:b5:c1:17:37:fe:a0:d2:
                    f0:23:2f:24:41:88:64:01:c0:80:dd:c0:bd:77:d8:
                    e6:1d:7e:fb:3a:97:1f:d5:dc:cb:45:d3:40:6a:bb:
                    7f:31:4d:dc:5c:ef:b9:97:49:5c:68:49:81:06:f7:
                    ab:88:74:6b:50:c8:63:dd:3f:93:1e:dc:2b:79:da:
                    67:4c:f5:43:09:88:0d:f1:aa:c7:0b:c1:45:fc:0f:
                    94:66:6b:bd:2c:b7:70:05:ac:15:08:75:cd:00:f9:
                    3b:1a:db:0a:e3:c1:fc:1d:5b:b5:42:8c:62:7e:3e:
                    c8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A8:CC:56:34:10:FA:DF:13:0C:77:05:F9:7F:49:67:02:5E:98:72
            X509v3 Authority Key Identifier:
                keyid:2C:49:73:B9:30:83:A4:84:AC:2D:46:58:27:85:02:C7:88:D0:64:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/9BE08B8E8C4E11F1BE755A05CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.206.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:34:0c:a6:20:b4:16:b5:c5:f3:bf:fe:0a:e9:45:7c:b0:6b:
         c5:42:5e:c3:78:88:de:11:14:70:ad:6f:6a:d4:3d:72:39:1a:
         6e:9e:7f:06:80:86:21:70:9f:18:bf:2a:39:bd:7e:c0:df:ac:
         e5:ec:c3:36:bd:a0:bc:83:57:66:f2:9b:7d:ce:bd:29:cc:bc:
         cc:97:73:56:c3:1f:ae:82:7a:34:ba:29:08:75:06:62:6f:9d:
         6f:d9:06:c4:db:2f:77:17:79:9c:bd:fd:25:bc:33:89:4a:fe:
         e3:23:bd:04:8d:7c:b2:97:7a:d6:94:04:84:9a:7c:0f:f8:c3:
         ef:f8:f3:86:b2:a0:1e:fd:62:e3:ea:5c:60:f7:29:07:de:04:
         d5:ce:d1:98:ee:b9:b3:e5:8d:d9:2e:76:3c:ec:ef:87:3a:f8:
         7c:35:e6:16:96:6d:1b:e3:dd:cb:a6:0c:ab:14:72:28:e6:68:
         b8:f6:31:a5:22:9e:73:ba:a5:a2:7c:8a:61:ed:76:46:ed:62:
         e2:e4:8a:81:69:2b:61:9a:fc:fc:ad:b9:e1:50:dc:27:45:bf:
         07:00:8b:25:b3:5f:cf:d9:f1:e9:cf:b2:4d:4c:eb:18:2c:74:
         9e:3e:ac:62:fd:f7:69:40:92:ff:b9:16:dd:50:80:62:28:c3:
         2a:fd:9c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:31 2026 by rpki-client