Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/F532EE8E8D7511F1969D33A0CE1D38B0.roa
File:                     F532EE8E8D7511F1969D33A0CE1D38B0.roa (raw, json)
Hash identifier:          SIxmlHckbhsXHCegpL/XNKa7J+R67ZPGCubikG2qARU=
Subject key identifier:   27:7A:D6:51:2B:05:A5:D6:49:D6:02:71:1A:80:EE:BB:CD:2A:B0:B4
Certificate issuer:       /CN=F36E94D7AF/serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
Certificate serial:       0639
Authority key identifier: 6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/F532EE8E8D7511F1969D33A0CE1D38B0.roa
Signing time:             Sat 01 Aug 2026 06:55:19 +0000
ROA not before:           Sat 01 Aug 2026 06:55:15 +0000
ROA not after:            Thu 13 May 2032 06:55:15 +0000
asID:                     328510
IP address blocks:        2c0f:ede8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1593 (0x639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E94D7AF, serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
        Validity
            Not Before: Aug  1 06:55:15 2026 GMT
            Not After : May 13 06:55:15 2032 GMT
        Subject: CN=6a6d9857-78ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1d:d7:cf:0d:57:50:11:ac:e7:6c:aa:9c:40:
                    4e:35:41:f9:6e:46:e3:76:46:04:ed:87:f0:52:c2:
                    67:db:85:00:a3:3f:62:5b:de:a8:54:50:8c:e8:46:
                    b0:3a:2a:aa:d6:49:52:6e:cb:79:82:4a:e0:5a:25:
                    d3:63:6c:f2:bb:27:6c:95:24:79:1b:50:cc:ba:70:
                    d1:6c:bb:6c:17:fd:8a:8f:1c:d6:31:26:b7:8b:9e:
                    21:85:01:d7:e3:bc:36:af:11:4b:2c:1e:2a:c9:c1:
                    d9:df:fe:56:9c:a1:70:39:d0:70:e3:0d:ca:4c:92:
                    2d:ad:08:b9:cb:05:3e:af:a1:d1:c0:1e:d7:5b:de:
                    e8:d6:b3:d3:8f:d7:45:0c:cc:b9:9f:61:b5:2d:f8:
                    68:5c:07:2a:69:23:fa:2e:eb:06:0a:fb:fb:02:23:
                    48:b0:97:3f:cf:91:08:83:aa:15:27:39:4d:5c:ff:
                    47:a3:57:54:c6:60:16:23:a2:6b:6e:1f:b4:e8:5d:
                    bc:da:06:26:39:fc:73:4b:ad:50:fb:c2:af:b5:63:
                    87:d4:b2:70:58:40:75:22:9f:d1:96:b0:42:d8:26:
                    07:10:f6:ab:fe:b4:64:80:79:ce:d8:52:84:bc:e5:
                    da:25:b8:2b:60:c0:60:b5:77:82:76:5d:b4:51:e9:
                    04:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7A:D6:51:2B:05:A5:D6:49:D6:02:71:1A:80:EE:BB:CD:2A:B0:B4
            X509v3 Authority Key Identifier:
                keyid:6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/F532EE8E8D7511F1969D33A0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:ede8::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:08:7c:aa:5a:24:a9:29:db:9c:b6:50:c9:74:f3:1f:b0:55:
         6d:14:9b:bd:a6:ca:ee:fe:e7:9e:f0:1b:85:5f:6b:91:ec:b3:
         46:97:f0:4c:1a:d3:08:91:99:8e:ce:68:9d:9d:ae:d4:72:cb:
         23:3a:78:39:d7:6c:9e:10:1d:52:1d:ca:b9:07:30:c5:e1:98:
         ec:77:cd:cc:bf:6a:b4:95:db:9e:96:d9:d0:9e:88:93:98:b0:
         32:d7:e3:d4:bb:dc:65:af:26:74:29:2e:12:60:a4:dc:ea:58:
         5d:62:4e:bd:90:89:45:23:a1:0e:5a:da:21:01:c2:c3:d4:e2:
         58:21:ac:00:be:3d:42:61:47:87:b0:e6:04:3e:df:c6:1a:8b:
         a8:c6:21:0a:e1:3e:4d:f5:f1:3b:e9:9e:89:91:46:ef:62:d8:
         c8:3c:84:9a:36:84:cb:30:67:b6:41:75:0b:fb:92:e4:4b:72:
         a9:db:f1:2b:d7:eb:87:0d:c7:ae:60:aa:86:37:24:84:45:50:
         0e:16:0e:22:48:a7:23:ad:77:5a:83:a0:b3:80:1a:04:41:6b:
         70:32:f7:cc:a1:35:17:0c:24:22:b6:b9:4a:6d:84:a3:e8:9c:
         f8:ff:73:dd:d7:87:5a:21:d8:fa:eb:47:1a:f7:6e:40:12:a1:
         4a:fe:01:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:36:15 2026 by rpki-client