Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/5472FFD48A6E11F18236A714CF1D38B0.roa
File:                     5472FFD48A6E11F18236A714CF1D38B0.roa (raw, json)
Hash identifier:          C60o5peNqIu3Ni/z7yG0s+9OKVYyVwzi9mlt71FaWdo=
Subject key identifier:   D4:E6:67:DB:D0:61:87:7A:B2:3C:E4:07:01:4C:ED:E5:33:D2:66:2B
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       0806
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/5472FFD48A6E11F18236A714CF1D38B0.roa
Signing time:             Tue 28 Jul 2026 10:23:10 +0000
ROA not before:           Tue 28 Jul 2026 10:23:06 +0000
ROA not after:            Wed 31 Dec 2036 10:23:06 +0000
asID:                     36994
IP address blocks:        105.242.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 07:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2054 (0x806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Jul 28 10:23:06 2026 GMT
            Not After : Dec 31 10:23:06 2036 GMT
        Subject: CN=6a68830d-95b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:74:5e:cd:c6:44:f4:e5:ee:e4:62:fc:5e:cc:
                    b6:e5:9a:a7:b2:bd:1f:eb:15:d9:59:9e:b7:54:19:
                    40:4b:21:99:c5:5b:70:d0:a2:83:d2:55:5c:4c:2b:
                    f7:44:71:3f:53:85:6a:e2:79:a8:c8:5e:ec:5a:d5:
                    45:fa:14:ab:a8:e9:36:3d:b0:27:92:5b:15:0d:5f:
                    06:80:ff:e1:89:c3:5a:40:5c:7e:c5:8f:4f:13:ba:
                    2c:1f:5b:da:24:ca:a8:37:c8:0b:fa:85:5c:bd:1e:
                    d3:e0:52:bd:69:bf:ba:94:97:af:57:73:32:4c:08:
                    85:78:08:33:15:b0:fa:f5:02:81:a9:45:66:da:67:
                    e6:6d:9a:0b:79:85:74:26:86:a1:4c:ce:b8:b4:8e:
                    b3:e8:75:7f:bd:f3:ef:b7:0a:be:e1:f1:9c:13:5f:
                    d0:7b:c5:98:37:4d:fd:cb:f5:a5:20:5f:17:d2:99:
                    74:98:47:f5:f1:98:df:5f:a1:4e:01:bd:3a:1c:b3:
                    da:1a:48:c3:15:cd:74:34:7b:a5:72:38:fc:3a:1a:
                    7e:9d:4a:86:0b:f4:48:90:64:69:6f:26:50:0a:9a:
                    2f:f6:c2:61:d2:5a:8a:29:14:80:78:aa:e0:eb:25:
                    d1:79:3b:66:d5:67:9d:8e:e3:5c:22:33:c6:69:e5:
                    b9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E6:67:DB:D0:61:87:7A:B2:3C:E4:07:01:4C:ED:E5:33:D2:66:2B
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/5472FFD48A6E11F18236A714CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.242.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:a7:07:0f:31:aa:1b:6c:4a:12:56:39:e2:dc:78:c5:23:fe:
         6e:14:84:43:28:00:10:9c:4d:45:ed:6f:c9:58:4b:2f:40:e4:
         e9:72:fd:a4:c3:21:a3:7a:14:9b:84:f3:06:4b:83:d3:d6:a4:
         d3:75:69:e0:f1:77:c5:60:65:cc:af:2d:7b:f2:b9:2f:d8:c5:
         b6:94:5f:42:bb:47:4a:ca:bd:8e:ab:89:14:4a:2d:a6:c5:d0:
         ef:4f:cd:1d:6e:54:e8:e2:23:4a:c6:bc:d6:dc:41:54:d6:89:
         3a:6f:09:7a:c5:36:31:dd:da:c6:e8:05:35:64:a0:95:93:13:
         93:a1:d6:59:0e:cc:7d:79:64:05:d7:66:bc:5c:c9:70:b5:1f:
         c5:d8:a4:8d:16:e6:22:b2:40:b5:8d:32:69:d7:1e:ab:e5:17:
         2c:b7:0d:c5:75:84:00:04:d3:b9:98:5e:de:ea:eb:68:c3:6f:
         d7:77:3b:8f:0c:e0:c0:ed:6a:b4:71:c2:47:87:f1:e6:1d:2b:
         ce:77:9c:e8:35:2e:d3:ed:f6:b4:69:b2:33:44:70:ca:69:17:
         1e:7e:c2:b2:9c:3a:f7:49:c3:f7:6f:87:b3:d7:13:cb:f0:a4:
         c8:cb:c7:84:31:1d:ea:82:3a:64:9b:d0:8c:4f:a4:8e:de:26:
         28:eb:3c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:24:42 2026 by rpki-client