Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/468AC3F08CFA11F1B71454A4CE1D38B0.roa
File:                     468AC3F08CFA11F1B71454A4CE1D38B0.roa (raw, json)
Hash identifier:          6mWZgn/KcfB2BY7AoW70fjLPlx6gbDqJsBFgcfrpuzk=
Subject key identifier:   98:04:2A:B1:A1:87:CE:B9:1E:84:75:77:89:9C:6A:49:76:72:62:BC
Certificate issuer:       /CN=F36E8561AF/serialNumber=BDF6F99CD082C13BEDA5DA0E89888DD532C86307
Certificate serial:       072B
Authority key identifier: BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/468AC3F08CFA11F1B71454A4CE1D38B0.roa
Signing time:             Fri 31 Jul 2026 16:09:58 +0000
ROA not before:           Fri 31 Jul 2026 16:09:54 +0000
ROA not after:            Sun 31 Oct 2032 16:09:54 +0000
asID:                     37254
IP address blocks:        2c0f:f4a8::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1835 (0x72b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8561AF, serialNumber=BDF6F99CD082C13BEDA5DA0E89888DD532C86307
        Validity
            Not Before: Jul 31 16:09:54 2026 GMT
            Not After : Oct 31 16:09:54 2032 GMT
        Subject: CN=6a6cc8d6-db35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a1:ea:ec:13:b0:dd:a7:b0:dc:ce:c3:4b:90:
                    5e:52:ee:7d:ce:d6:35:a0:d2:77:d9:de:c3:31:bb:
                    db:47:9c:4d:f6:0b:5e:32:06:29:25:b1:3c:f5:9a:
                    78:3f:06:66:02:51:57:22:49:48:00:7e:50:5b:0e:
                    b4:61:b2:d8:c9:f8:31:f8:de:85:40:da:fa:51:9f:
                    58:99:2d:d9:a9:32:2c:3a:50:a5:a5:98:53:64:2f:
                    e4:5b:83:81:6a:87:af:66:f5:55:f2:38:d2:c5:64:
                    9a:da:4f:f7:0b:5e:cc:9e:5c:7d:96:4c:3d:9f:25:
                    5c:6f:73:61:ba:09:cd:6e:8d:b9:4c:a8:c7:84:c4:
                    d2:a5:d8:c0:ba:49:bc:7e:2f:14:d7:0c:80:b1:d7:
                    26:78:f3:26:3e:a3:75:0b:7c:65:f8:5c:cc:5b:44:
                    1b:08:27:c8:d0:2b:67:a3:6e:f1:54:ad:9f:66:1e:
                    28:87:cd:1f:a9:b0:10:e5:0e:6d:0f:39:a5:d9:7f:
                    90:69:ca:5c:b8:d0:c6:bb:82:af:2c:d3:b2:8b:1a:
                    ba:23:a0:b1:79:e3:6d:41:03:bc:77:22:d2:2e:53:
                    ec:d8:59:52:8f:06:55:f9:09:e9:81:e1:6e:8d:43:
                    7a:12:86:32:49:fc:f7:bc:2c:41:60:b1:46:1d:15:
                    58:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:04:2A:B1:A1:87:CE:B9:1E:84:75:77:89:9C:6A:49:76:72:62:BC
            X509v3 Authority Key Identifier:
                keyid:BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/468AC3F08CFA11F1B71454A4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f4a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:ed:ed:3c:e4:91:92:3b:d9:0f:61:e1:aa:8d:ef:bc:99:99:
         a2:44:53:87:02:b0:fd:dd:27:b7:fe:ea:2c:79:19:bd:3f:7a:
         08:8b:c4:5b:4d:bd:7c:3d:f2:f6:e6:9b:21:7b:d2:06:c6:dd:
         39:42:0b:50:0f:79:ae:27:b3:f1:b3:0e:30:05:b0:3b:94:39:
         d7:3f:b1:15:7e:ed:ec:01:9f:d9:06:76:71:86:7a:f0:92:87:
         c4:71:f8:06:31:9d:e3:ee:76:7d:2f:03:79:4c:0a:4a:30:05:
         ff:f5:e2:e5:06:f9:ae:13:53:16:03:7b:f6:25:87:4f:31:c5:
         1b:76:b6:b2:4f:3a:da:e1:c4:63:a3:ad:9c:26:55:6e:8f:d5:
         fd:7c:d9:5f:7e:ef:10:db:a1:4f:2a:6e:93:5a:6d:22:82:bf:
         ad:1f:3e:e5:6a:25:27:7c:56:49:22:78:4c:79:34:8e:d4:21:
         df:c7:ab:45:41:0d:5e:d3:6e:38:2c:27:cd:cf:5d:95:c5:ce:
         32:a2:cc:69:79:bf:f8:eb:4f:02:40:20:11:a7:4e:34:af:8b:
         4d:43:c2:3e:5f:3a:ef:ee:96:c4:38:bd:c9:4f:63:3c:f9:ed:
         56:12:32:9f:35:dc:0d:c0:7b:00:87:22:15:be:43:ff:6b:30:
         85:0f:c9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:32:19 2026 by rpki-client