Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/10BA4C5A898F11F1820A1DC4CE1D38B0.roa
File:                     10BA4C5A898F11F1820A1DC4CE1D38B0.roa (raw, json)
Hash identifier:          +d7M36/qHXxwbqiV205V1GHAlaoCWtjMk6oT2RuY18w=
Subject key identifier:   9D:9F:3E:7A:5A:61:CC:E5:16:53:E0:1C:62:DF:6E:84:25:D7:13:9C
Certificate issuer:       /CN=F361F5C9AF/serialNumber=B7DEB01BACBB4B5A7E9C782FFF99FD8E5DC06CB2
Certificate serial:       07D3
Authority key identifier: B7:DE:B0:1B:AC:BB:4B:5A:7E:9C:78:2F:FF:99:FD:8E:5D:C0:6C:B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/10BA4C5A898F11F1820A1DC4CE1D38B0.roa
Signing time:             Mon 27 Jul 2026 07:44:58 +0000
ROA not before:           Mon 27 Jul 2026 07:44:54 +0000
ROA not after:            Fri 31 Dec 2049 07:44:54 +0000
asID:                     328475
IP address blocks:        102.215.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 Jul 2026 00:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2003 (0x7d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F5C9AF, serialNumber=B7DEB01BACBB4B5A7E9C782FFF99FD8E5DC06CB2
        Validity
            Not Before: Jul 27 07:44:54 2026 GMT
            Not After : Dec 31 07:44:54 2049 GMT
        Subject: CN=6a670c7a-d5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:4e:0c:a6:6c:f5:50:03:31:33:b2:0e:a6:
                    dc:bc:50:5f:7e:6c:98:3a:b6:2a:ca:1f:4e:71:a0:
                    5c:d8:db:66:07:04:b7:9d:11:a8:1e:79:9d:63:9a:
                    4c:b3:75:f6:b4:65:15:02:05:80:a3:c3:95:75:49:
                    83:ae:b3:6a:64:f3:34:11:72:16:65:c5:7e:fb:e7:
                    5a:a2:95:97:0c:dc:8f:74:e2:0f:a2:7c:d8:7f:af:
                    e2:37:5d:1c:e6:5f:92:8d:88:d5:9b:1a:80:e4:04:
                    9d:92:ed:fa:6b:6f:cf:87:e7:b2:c3:ef:fc:b1:af:
                    c6:be:89:b0:7d:c9:6e:de:02:ce:5f:6a:a3:b9:9a:
                    98:39:79:2b:86:04:45:ae:a3:0e:7e:a5:94:90:e9:
                    76:6c:5d:4a:ee:31:c4:7e:35:71:d4:51:45:63:75:
                    d2:53:85:c0:93:2a:a8:8a:a7:e4:10:17:6a:24:f8:
                    10:8c:ab:00:df:17:8a:b3:ab:a5:02:b3:7b:03:28:
                    f0:5a:58:00:1c:e5:39:f3:46:ef:b6:f5:83:6b:3b:
                    ac:be:3b:54:cb:83:1c:71:5e:0f:8e:58:78:a1:64:
                    8f:c0:dc:93:d3:95:ae:55:f3:39:21:42:1c:81:77:
                    1d:ee:e1:58:71:5a:ed:20:65:09:cb:62:41:3b:12:
                    69:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9F:3E:7A:5A:61:CC:E5:16:53:E0:1C:62:DF:6E:84:25:D7:13:9C
            X509v3 Authority Key Identifier:
                keyid:B7:DE:B0:1B:AC:BB:4B:5A:7E:9C:78:2F:FF:99:FD:8E:5D:C0:6C:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/10BA4C5A898F11F1820A1DC4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:81:2a:d3:cc:d3:ce:6b:ec:a8:65:4e:46:7f:fd:f5:1e:76:
         56:20:df:5a:37:6e:dc:0a:4c:90:52:94:8d:f8:0c:43:df:df:
         28:6f:9d:e0:c9:8c:bb:d1:f7:7c:78:e6:7a:c5:cf:a5:49:91:
         e2:f5:e7:f2:f4:2c:62:13:e1:28:cf:64:1e:2a:23:a4:68:5a:
         8e:33:95:73:c0:ce:cb:94:10:5b:8f:77:44:bb:4f:1b:20:8a:
         44:e2:d3:01:3e:55:d2:cf:64:f3:0e:99:a3:50:66:63:48:57:
         37:b5:24:30:fc:37:9d:e5:4b:50:92:cc:87:72:47:cd:fd:9e:
         3d:6b:51:4c:ee:6a:63:72:c1:0d:55:df:e7:fb:5c:05:f3:59:
         25:50:3a:71:8d:b5:61:51:bc:7e:d7:fe:33:5d:a6:12:36:75:
         e7:25:7b:f0:d2:32:5a:af:f9:df:6a:48:a0:38:5c:91:f8:f8:
         04:c7:4f:17:21:25:31:fa:72:6d:65:dd:a3:36:5c:92:58:77:
         61:96:0d:83:5b:80:12:1c:2b:3a:5a:47:ec:11:6c:b6:2b:4d:
         21:3f:e9:ef:e6:55:50:a6:57:37:99:95:a5:2a:5c:c5:7c:bc:
         9d:d4:d7:ad:87:28:10:7b:48:05:86:8d:42:9a:66:de:8c:53:
         2b:e8:bc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:44 2026 by rpki-client