Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/96E5562A8A7111F182FE36ABCE1D38B0.roa
File:                     96E5562A8A7111F182FE36ABCE1D38B0.roa (raw, json)
Hash identifier:          vQOXhlA1nURE9T45SUcClwjlwTnybRAew9dcPSaZGCg=
Subject key identifier:   CA:F3:FE:B4:5F:A3:D4:33:A9:83:49:AC:DA:EB:28:C0:27:A5:97:4D
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       080C
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/96E5562A8A7111F182FE36ABCE1D38B0.roa
Signing time:             Tue 28 Jul 2026 10:46:30 +0000
ROA not before:           Tue 28 Jul 2026 10:46:25 +0000
ROA not after:            Wed 31 Dec 2036 10:46:25 +0000
asID:                     36994
IP address blocks:        105.247.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 11:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2060 (0x80c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Jul 28 10:46:25 2026 GMT
            Not After : Dec 31 10:46:25 2036 GMT
        Subject: CN=6a688885-1714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b7:10:94:ca:e3:52:b5:aa:83:5d:fa:92:ab:
                    dd:1c:b0:00:6b:12:86:92:6a:b1:8f:db:42:04:0e:
                    08:b0:a2:de:9a:84:d2:c2:d1:65:74:f0:f5:c7:fd:
                    52:67:42:85:4b:17:46:21:5d:39:cb:c6:f3:9f:71:
                    e8:27:e9:f6:28:e3:4d:1b:56:bc:d7:ba:17:df:35:
                    d6:c0:2f:00:9c:b8:c7:f3:4f:06:a0:1e:ce:1a:20:
                    3b:7d:e5:19:b5:9e:53:48:19:2e:6b:1e:a8:73:81:
                    92:33:ab:e8:13:f5:15:6a:a9:1d:db:14:f3:40:0c:
                    cf:14:5d:6c:7b:9e:79:ad:9e:66:ed:62:45:1f:ff:
                    83:d8:a7:f8:8a:99:d4:ab:a0:c4:8e:2c:ba:84:c8:
                    27:61:8b:8d:00:a4:da:77:45:db:db:4b:87:93:c0:
                    f3:5a:97:8d:93:e2:8e:1c:ff:8c:9c:93:e5:b0:c8:
                    c9:65:0e:9f:ce:24:43:84:e5:7f:37:c7:e4:7f:be:
                    41:24:24:a4:68:15:a0:4b:a6:9d:75:65:39:a2:86:
                    c5:31:0c:9a:46:2a:e4:52:14:c7:3a:68:11:1a:51:
                    3a:c6:15:a1:bf:de:77:57:9f:60:c2:47:f7:33:41:
                    a6:4b:5f:fb:b2:8e:b5:55:93:4a:64:d3:47:bc:a3:
                    f6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F3:FE:B4:5F:A3:D4:33:A9:83:49:AC:DA:EB:28:C0:27:A5:97:4D
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/96E5562A8A7111F182FE36ABCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.247.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6f:e7:0d:78:47:0b:be:21:1a:10:2e:f8:6e:ad:01:4d:9d:91:
         ff:ad:16:c3:27:9b:d0:29:cb:f3:2d:56:c8:d2:51:93:68:e9:
         45:91:67:4d:d7:0a:03:d4:37:e7:da:7d:26:c7:55:54:c8:d7:
         0e:88:4f:03:a5:09:05:32:21:b4:f4:02:88:6d:eb:f4:6f:35:
         0c:99:89:42:98:1c:f2:79:f7:9f:b9:87:5c:cb:5a:2e:44:52:
         0b:13:dd:7f:cc:2b:76:ec:30:38:91:6e:13:18:ab:08:56:b3:
         a4:68:20:5b:c7:31:78:68:8b:8c:0e:42:64:f2:fe:d7:55:81:
         e4:45:2e:4f:17:8d:83:fd:35:bd:78:bc:19:d4:41:90:bf:49:
         f9:15:b2:5f:91:5d:41:19:db:3b:d3:07:15:9b:60:0a:c8:ba:
         f3:c8:fe:e8:c0:c9:26:05:8e:9d:63:fa:3a:40:17:6f:22:e3:
         4d:2a:89:79:6e:0a:cd:c0:9b:29:13:a0:31:24:2f:84:2e:07:
         ac:ef:49:bb:f7:2e:c1:7b:6c:5d:24:cd:bc:37:2a:d1:e4:04:
         51:eb:1c:e4:68:ca:b7:9f:1c:71:34:53:aa:bd:3a:9f:09:69:
         55:ad:46:80:d2:10:b7:be:7e:21:cb:79:76:94:f4:7b:02:cd:
         7b:b7:ea:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:06:27 2026 by rpki-client