Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/3205938460DA11F18CDCC1DCCE1D38B0.roa
File:                     3205938460DA11F18CDCC1DCCE1D38B0.roa (raw, json)
Hash identifier:          Z2Rj2kCALra6smsTiaj7JhFm7dUvTIxKaqfHUdO/9Bs=
Subject key identifier:   76:95:1B:0F:12:81:FD:17:E4:AC:84:74:43:08:BA:FB:19:5C:E2:E9
Certificate issuer:       /CN=F36F61A5AF/serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
Certificate serial:       06F7
Authority key identifier: E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/3205938460DA11F18CDCC1DCCE1D38B0.roa
Signing time:             Fri 05 Jun 2026 12:29:29 +0000
ROA not before:           Fri 05 Jun 2026 12:29:24 +0000
ROA not after:            Thu 05 Jun 2031 12:29:24 +0000
asID:                     11845
IP address blocks:        102.219.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 13 Jun 2026 02:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1783 (0x6f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F61A5AF, serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
        Validity
            Not Before: Jun  5 12:29:24 2026 GMT
            Not After : Jun  5 12:29:24 2031 GMT
        Subject: CN=6a22c128-82e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4c:eb:f8:06:47:a9:57:76:0c:fb:6a:98:33:
                    2d:0f:91:f6:7e:85:83:f5:f8:43:bb:56:64:3f:8d:
                    00:6f:76:c9:37:bb:df:7e:68:93:4a:d5:84:f7:db:
                    69:b0:0a:66:42:26:9c:72:4f:f5:44:8f:90:f3:f3:
                    2e:c2:57:8f:bf:d2:28:65:39:42:91:4c:97:fd:ad:
                    ea:8b:ef:29:c0:a0:0b:e9:69:0c:eb:b9:f0:48:de:
                    a9:a4:9b:5e:18:5b:2b:ba:da:fc:f2:b0:c4:14:1e:
                    31:74:b9:eb:db:5f:7d:fb:c8:07:3b:bc:df:bd:25:
                    ee:83:9c:86:c2:ca:c8:c7:14:8c:b2:97:e4:3b:29:
                    94:e0:12:31:14:84:26:76:3a:47:b9:24:7e:48:c5:
                    f2:cc:2c:4c:ee:ce:0a:df:c7:c2:3b:e2:db:a1:a9:
                    f1:1e:36:24:32:a1:73:c5:f2:8f:7b:56:54:3c:5b:
                    09:6c:35:c0:ec:57:15:1e:e7:7d:85:d9:fb:0b:fb:
                    39:49:a9:42:fc:e3:5d:db:bf:7d:1a:14:e1:5c:82:
                    fe:eb:a4:2e:55:f6:39:ba:ef:8c:ad:39:6b:ef:d4:
                    02:c7:99:d2:e2:c1:47:a5:69:1e:fb:29:a5:1d:06:
                    01:27:e1:58:b5:47:f8:ed:d4:cd:3f:10:3d:9c:eb:
                    60:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:95:1B:0F:12:81:FD:17:E4:AC:84:74:43:08:BA:FB:19:5C:E2:E9
            X509v3 Authority Key Identifier:
                keyid:E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/3205938460DA11F18CDCC1DCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:a7:d5:e3:e3:ae:5b:f3:e5:1e:98:c6:7f:93:ea:92:29:c3:
         be:34:d5:bd:41:f8:01:aa:ce:93:99:a5:90:5b:38:2f:e4:7a:
         a4:a9:9c:c8:67:73:39:01:4f:db:f0:dc:bb:53:d2:9b:7f:b9:
         31:5e:fa:de:63:e3:78:71:8b:e6:70:f3:68:3a:85:94:33:f3:
         58:c8:bd:13:df:14:aa:cc:1d:38:d0:18:02:d1:d0:5a:5a:f8:
         af:15:57:b6:11:cb:3c:35:00:93:c1:f4:25:87:6e:87:dd:b9:
         90:f2:91:95:4b:d6:5d:a7:44:74:7f:58:83:70:65:3c:3a:84:
         18:78:44:98:88:77:f5:11:53:8d:69:e1:eb:cc:b5:7c:f5:ac:
         00:a4:82:ab:01:8b:8e:b1:92:6b:dc:2d:c7:ef:ef:2b:94:bb:
         29:d6:97:c6:68:72:50:a4:57:38:b1:a3:82:4a:27:4c:f6:43:
         40:74:e4:d9:19:1b:c2:aa:9a:87:ea:f2:04:16:31:a7:b7:bd:
         12:dd:41:51:f2:75:1d:ca:60:c9:8f:57:f3:9a:e2:2e:e0:10:
         07:c4:17:d3:40:d0:d2:ea:c3:0f:d5:5a:52:e0:37:88:7a:e4:
         c7:11:7b:64:f0:fb:5b:55:8c:08:09:9d:d1:d3:04:bf:0d:0d:
         5a:ba:e8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:48 2026 by rpki-client