Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/61276BBA8FE211F1A322B3D5CE1D38B0.roa
File:                     61276BBA8FE211F1A322B3D5CE1D38B0.roa (raw, json)
Hash identifier:          ZgYi187X+5Outlah/ax0NZjZ4kzN2fXozzCC/u2qZ/I=
Subject key identifier:   EB:99:98:5E:9D:71:09:5E:CE:BB:63:7C:95:23:E2:63:50:6A:F4:63
Certificate issuer:       /CN=F36E3A59AF/serialNumber=0D9BE8A03CF4F921BEAE801209F0CDA9FA5C28A9
Certificate serial:       0192
Authority key identifier: 0D:9B:E8:A0:3C:F4:F9:21:BE:AE:80:12:09:F0:CD:A9:FA:5C:28:A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/61276BBA8FE211F1A322B3D5CE1D38B0.roa
Signing time:             Tue 04 Aug 2026 08:56:28 +0000
ROA not before:           Tue 04 Aug 2026 08:56:24 +0000
ROA not after:            Fri 04 Aug 2028 08:56:24 +0000
asID:                     329546
IP address blocks:        102.205.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3A59AF, serialNumber=0D9BE8A03CF4F921BEAE801209F0CDA9FA5C28A9
        Validity
            Not Before: Aug  4 08:56:24 2026 GMT
            Not After : Aug  4 08:56:24 2028 GMT
        Subject: CN=6a71a93c-08d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:f4:57:6c:16:61:8e:29:56:3e:c4:6c:11:
                    8f:bd:34:e3:c2:2b:f2:59:b3:f6:cf:c5:d9:c1:c8:
                    3d:ed:c0:cc:5e:2b:b8:6d:b8:48:bd:4d:44:2c:ec:
                    86:43:f8:1c:de:86:37:ee:68:d2:6b:e3:a2:99:54:
                    78:c4:31:98:0d:f9:a4:05:30:44:d9:ba:7a:2b:b6:
                    31:45:fe:87:3b:5d:69:fc:1a:95:71:96:67:a9:ff:
                    6d:43:d8:b0:c7:d8:02:82:8a:ec:89:33:0d:13:3d:
                    62:3d:4a:e5:76:49:fe:c4:c4:c7:62:0a:7b:a5:89:
                    4a:6f:ce:0b:a8:b7:d7:3e:43:ad:90:c2:b6:4e:9c:
                    9c:2e:d7:6d:b0:a7:a9:8b:c0:b2:d3:b3:e0:7e:50:
                    1b:39:e6:a6:31:24:2a:9c:87:e8:db:80:e1:49:17:
                    59:d5:bc:b2:df:39:48:6f:27:3b:b2:af:b1:7c:d2:
                    61:7a:2a:e6:5f:c4:7e:a5:34:dc:1f:75:fb:75:3f:
                    0c:eb:d1:d9:e4:bc:a9:22:e1:2e:d2:67:dd:e1:b4:
                    62:5a:19:b0:a6:27:6b:70:79:52:84:6f:4b:4d:80:
                    d8:6f:b5:13:3b:65:ac:07:1b:8e:c0:90:18:06:ca:
                    ad:c6:5d:12:f4:9a:c9:8e:be:23:e8:01:4b:d0:13:
                    90:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:99:98:5E:9D:71:09:5E:CE:BB:63:7C:95:23:E2:63:50:6A:F4:63
            X509v3 Authority Key Identifier:
                keyid:0D:9B:E8:A0:3C:F4:F9:21:BE:AE:80:12:09:F0:CD:A9:FA:5C:28:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/61276BBA8FE211F1A322B3D5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.205.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:4e:18:da:e5:ae:3d:b7:bb:c2:da:e0:d4:e8:0b:71:70:7e:
         3e:15:b3:c1:43:9f:52:ca:39:c9:4c:36:12:e7:38:e6:43:9d:
         ac:d9:ed:61:17:6c:62:85:72:2b:c3:02:2a:83:b7:69:f9:6e:
         a9:6d:c9:ec:32:70:23:90:3a:a7:87:d4:65:36:e7:ef:61:08:
         ce:db:95:df:e4:32:2f:a4:f1:58:46:6e:74:59:8a:df:4f:0e:
         1a:56:31:20:23:68:52:b9:4f:5b:ec:6f:a3:bc:95:a1:b6:bf:
         95:2c:6a:38:df:f4:8b:02:7c:01:0c:6f:ba:03:c5:1f:db:e6:
         f8:20:49:bc:8a:08:ca:c9:4d:f0:ce:92:0a:60:39:28:b3:93:
         b8:31:f6:28:35:cc:fc:fc:ba:a7:01:ac:7f:e7:c6:72:2d:99:
         91:2b:0e:b2:0d:83:3a:d1:4a:27:71:3a:d8:e7:a9:95:08:5e:
         f4:ac:11:38:e7:5c:8d:56:09:d7:5f:10:7a:5e:ac:62:ef:3c:
         3e:48:ab:3a:a3:5f:35:17:9f:75:ba:44:44:c0:2c:d8:22:2d:
         99:17:8c:49:0a:2a:f4:9e:0b:1d:fc:82:2a:39:09:bf:38:a3:
         18:29:f1:a2:83:fb:53:16:87:06:c5:5d:47:9f:20:bb:e8:00:
         ef:d2:f1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:27:07 2026 by rpki-client