Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/5E16E12E940D11F18BC4940CCF1D38B0.roa
File:                     5E16E12E940D11F18BC4940CCF1D38B0.roa (raw, json)
Hash identifier:          UuHofcfgnEFBLT4TXYXmJDHBARyOyFkt5kBZa+wo9dM=
Subject key identifier:   DD:67:E7:70:EA:AA:8B:9A:EA:4F:46:48:98:B9:22:3B:4B:E4:60:84
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       0581
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/5E16E12E940D11F18BC4940CCF1D38B0.roa
Signing time:             Sun 09 Aug 2026 16:14:16 +0000
ROA not before:           Sun 09 Aug 2026 16:14:12 +0000
ROA not after:            Fri 09 Aug 2030 16:14:12 +0000
asID:                     25198
IP address blocks:        102.212.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 15 Aug 2026 00:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1409 (0x581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: Aug  9 16:14:12 2026 GMT
            Not After : Aug  9 16:14:12 2030 GMT
        Subject: CN=6a78a758-3a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:77:fb:94:70:17:93:b0:b4:96:9f:fd:06:2b:
                    7b:0b:9a:9e:b9:77:ab:42:6c:77:61:08:c8:f7:5c:
                    cc:2a:85:7d:4a:00:54:16:6d:0d:5d:b5:4f:56:98:
                    7f:64:73:cc:7e:a8:36:b8:fb:06:46:ee:76:ae:f7:
                    af:39:a0:05:14:2e:c5:d4:d7:92:27:eb:2c:96:cd:
                    93:4a:b8:90:6e:78:2d:d3:a8:f7:d2:8a:f4:8a:ec:
                    49:49:a3:65:33:cc:d9:8f:e0:3b:8e:21:69:81:a6:
                    ee:3e:4e:c6:a5:84:d1:38:60:21:09:f1:a5:05:09:
                    2c:c6:2a:26:bd:71:07:4e:ac:0e:eb:65:36:5a:78:
                    0c:16:24:6f:14:8b:0b:38:96:6d:b0:e8:d4:50:36:
                    42:1b:85:24:2a:6c:5c:7e:92:1a:c1:31:c1:57:39:
                    a8:98:95:48:60:92:ef:e5:5d:47:4d:23:95:c5:66:
                    d3:54:6d:68:b4:d4:bd:16:0c:8c:18:ab:52:7f:22:
                    54:4d:2a:9d:d2:09:97:e3:75:9e:c5:09:5f:05:d5:
                    80:77:15:86:14:4a:1b:0c:90:d5:0c:49:dc:b8:2e:
                    7c:6c:73:28:a8:ef:7f:9c:8b:25:8d:a7:b8:8b:1a:
                    99:ed:97:4f:57:9f:5d:6b:d0:3f:e3:3a:69:a2:c0:
                    da:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:67:E7:70:EA:AA:8B:9A:EA:4F:46:48:98:B9:22:3B:4B:E4:60:84
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/5E16E12E940D11F18BC4940CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:2b:b1:28:77:d8:d4:76:57:b8:21:f5:f2:d1:34:50:1b:09:
         e4:df:46:27:fd:0f:b9:c4:12:27:47:87:23:e3:65:49:ad:2c:
         d9:d5:ed:d7:fd:30:91:f0:b4:ab:3b:dc:51:08:69:5b:92:a4:
         75:bf:60:d5:67:4d:8a:f9:e0:5b:7d:0e:b4:4a:75:fd:cb:05:
         21:c9:1d:68:f2:10:3d:a0:e6:33:36:08:c4:fc:a4:00:04:06:
         7d:bc:17:6b:ef:3e:47:d7:ea:0a:02:0b:92:be:b2:0b:9d:22:
         52:3a:32:5d:c9:61:5f:20:4f:1a:e1:02:ef:d9:2f:dc:92:5b:
         ad:66:0c:71:35:5a:2a:8f:38:80:44:72:7c:29:9b:df:5a:dc:
         41:a8:02:f3:0d:b4:04:ca:65:f9:70:d5:f0:39:06:aa:46:71:
         66:78:04:79:dd:a2:0b:6f:d6:cb:51:6a:02:5e:a7:f2:09:f7:
         7c:ec:20:81:aa:84:f8:29:71:e7:15:b7:f2:c2:fa:74:87:6e:
         24:d1:c8:86:a3:5e:b9:74:e4:46:41:65:44:60:0b:0e:dd:19:
         ef:71:0e:70:ed:b1:7a:a9:7f:c5:95:86:a3:5a:4d:ea:25:3b:
         51:64:a8:56:a2:fa:42:c9:62:41:f8:59:1e:52:74:13:43:c3:
         e0:f6:0a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 14:19:22 2026 by rpki-client