Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/A61F12AA8D7511F1B00E0A1BCF1D38B0.roa
File:                     A61F12AA8D7511F1B00E0A1BCF1D38B0.roa (raw, json)
Hash identifier:          b9TCBFUNLfLaUSigVaYq828sCFL0o9xUvQVNYUUJxC8=
Subject key identifier:   50:5C:55:2B:CE:F7:46:05:3D:DF:5A:77:23:B7:C2:80:CA:73:0B:8E
Certificate issuer:       /CN=F36E94D7AF/serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
Certificate serial:       0637
Authority key identifier: 6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/A61F12AA8D7511F1B00E0A1BCF1D38B0.roa
Signing time:             Sat 01 Aug 2026 06:53:07 +0000
ROA not before:           Sat 01 Aug 2026 06:53:03 +0000
ROA not after:            Thu 13 May 2032 06:53:03 +0000
asID:                     328510
IP address blocks:        102.217.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1591 (0x637)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E94D7AF, serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
        Validity
            Not Before: Aug  1 06:53:03 2026 GMT
            Not After : May 13 06:53:03 2032 GMT
        Subject: CN=6a6d97d2-076d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2a:25:33:da:73:ad:d2:b4:48:b1:03:00:89:
                    48:21:8f:5a:58:4a:29:9c:34:49:7a:38:ae:03:99:
                    11:e5:73:50:d6:5d:5e:eb:4e:dd:04:af:62:99:27:
                    52:ee:d9:15:60:ce:76:19:e2:d4:62:00:00:95:49:
                    67:ec:91:5b:ee:af:22:1e:43:c9:1e:d4:b1:de:34:
                    68:64:77:fe:ec:b1:60:b0:b6:94:ee:e3:a1:75:09:
                    e8:3f:49:ec:a1:d7:2a:03:9c:d5:3e:f8:74:40:6a:
                    55:d7:bf:7d:ed:0c:55:da:af:0b:e1:c6:3b:a7:02:
                    da:63:42:71:90:ed:69:a2:6e:2a:e5:45:aa:68:09:
                    b4:2a:48:02:66:9a:26:45:6d:b8:ea:f3:20:03:77:
                    04:78:a8:a9:90:64:93:48:e6:80:2a:8f:65:cc:12:
                    a5:18:e7:28:2f:c2:7a:01:27:9a:7b:69:ae:41:6c:
                    85:0c:38:17:18:43:fc:73:5d:fd:39:11:4e:11:ca:
                    f7:80:7d:4b:bb:32:8a:92:16:22:33:7b:3e:6b:4f:
                    7b:9d:ca:cb:8d:30:4b:4e:56:24:57:6c:4f:b0:e1:
                    fa:61:ef:c7:5a:80:75:f7:9e:40:a6:33:90:38:60:
                    f0:3a:dd:16:39:a0:4a:b4:2b:03:cf:8e:ab:8d:01:
                    84:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5C:55:2B:CE:F7:46:05:3D:DF:5A:77:23:B7:C2:80:CA:73:0B:8E
            X509v3 Authority Key Identifier:
                keyid:6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/A61F12AA8D7511F1B00E0A1BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:7e:6f:68:1c:3d:35:c5:70:83:f6:2e:a0:26:d7:eb:19:51:
         f3:56:e1:73:c8:c7:e7:c3:e5:59:96:09:ab:ef:a2:d2:60:01:
         27:d7:b0:6f:f6:97:64:48:a5:49:d0:4c:b6:3c:ad:13:ea:26:
         98:99:37:2f:d4:07:6e:18:3e:95:60:b7:82:0e:8e:e5:6b:d7:
         24:ce:76:6b:90:41:a3:c9:a2:4f:fa:4d:01:61:fe:12:61:95:
         57:77:a8:29:5e:d0:5b:9e:8c:e0:a9:21:c1:8c:dc:c7:67:db:
         3b:48:08:25:7c:b6:68:c1:e9:8e:08:1c:1a:a7:27:31:1a:96:
         54:58:96:8e:e8:c3:09:3d:31:8e:f6:39:c2:14:96:82:b5:17:
         05:64:42:28:5b:21:64:a1:b5:ef:22:a4:1d:a3:9c:da:05:87:
         52:c6:bd:b0:cd:3a:4c:6d:39:f0:18:f8:1e:2c:cc:b8:0d:74:
         e5:a7:53:e2:98:6c:13:1a:33:10:9f:d4:4e:d6:d1:19:43:9a:
         7f:0c:b2:41:33:ab:06:0b:55:3b:50:ee:c7:a9:98:01:ec:58:
         2a:7f:1a:87:7a:7e:9f:9a:86:31:01:6d:2a:d2:78:21:70:31:
         11:0e:73:b2:a3:ba:64:36:a1:82:1f:e9:ca:61:00:2d:3d:93:
         b0:25:0b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:36:14 2026 by rpki-client