Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/4B454DAA8A6D11F1A0B53D0FCF1D38B0.roa
File:                     4B454DAA8A6D11F1A0B53D0FCF1D38B0.roa (raw, json)
Hash identifier:          1A0L1uPFsmbrXqK3o6gBdtlVfG97lH1yGo2/hTF0JqM=
Subject key identifier:   68:CF:60:52:54:E9:6C:17:86:49:EF:97:DF:B4:9A:7B:5E:79:25:A9
Certificate issuer:       /CN=F364B494AF/serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
Certificate serial:       05BB
Authority key identifier: FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/4B454DAA8A6D11F1A0B53D0FCF1D38B0.roa
Signing time:             Tue 28 Jul 2026 10:15:45 +0000
ROA not before:           Tue 28 Jul 2026 10:15:40 +0000
ROA not after:            Sat 28 Jul 2035 10:15:40 +0000
asID:                     327872
IP address blocks:        2c0f:f4c8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 Jul 2026 00:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1467 (0x5bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364B494AF, serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
        Validity
            Not Before: Jul 28 10:15:40 2026 GMT
            Not After : Jul 28 10:15:40 2035 GMT
        Subject: CN=6a688151-27e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:39:69:ed:cd:9e:1a:cb:57:71:38:42:56:bc:
                    c3:01:a0:a9:35:33:3a:50:33:d1:34:fa:81:d4:9a:
                    b0:bf:e7:35:25:14:2b:ad:4e:b2:a5:3f:b6:5f:f0:
                    8c:41:d7:c7:44:c5:5c:6a:b5:82:0c:55:8a:27:cc:
                    4f:8e:11:0f:fd:0d:0d:42:1d:80:c5:75:29:ef:3d:
                    99:2c:51:5c:93:9b:d3:54:4a:72:51:27:2c:08:70:
                    37:4f:d5:e3:ff:f3:8b:5f:b2:1d:ee:ff:52:7c:8d:
                    a8:76:5b:52:26:67:dc:eb:9a:0f:ce:6e:db:77:bd:
                    29:a5:4c:1d:99:8e:97:d1:6b:71:b3:99:64:1d:59:
                    a6:96:00:c5:3f:20:20:d8:30:ed:48:c0:82:cf:e0:
                    16:ab:ce:db:dd:ed:6f:36:64:47:3d:5e:5f:24:67:
                    0f:c9:30:8d:5a:c0:f0:77:89:09:87:14:69:4c:65:
                    4e:0e:5a:76:df:d4:90:e7:82:1d:72:b6:68:7f:1b:
                    b8:07:fb:23:6c:bb:6b:e0:24:be:b1:1f:55:cb:bf:
                    88:78:a7:2a:c7:b3:11:d0:6f:5e:17:5e:50:1a:3f:
                    a5:3b:ca:59:85:f1:76:10:11:09:54:c4:6c:0f:71:
                    9f:ad:d4:04:4a:c8:d2:1d:9a:e3:a4:1d:7a:78:cb:
                    15:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CF:60:52:54:E9:6C:17:86:49:EF:97:DF:B4:9A:7B:5E:79:25:A9
            X509v3 Authority Key Identifier:
                keyid:FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/4B454DAA8A6D11F1A0B53D0FCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f4c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:22:e9:b4:af:5c:73:bd:cf:2c:0d:aa:67:33:1e:ed:8d:f1:
         9c:0b:12:5d:00:61:f4:a5:24:2e:46:a7:29:6a:e2:9f:06:4b:
         9d:6c:c3:78:0c:db:79:97:40:4d:25:ce:4d:69:bb:e4:a2:a7:
         da:93:4b:ce:8e:ef:40:62:c8:fc:ed:2e:53:81:9a:5b:5e:2e:
         64:73:04:a1:1d:d0:ef:5f:ab:df:ea:ac:d1:d3:bb:34:4f:6b:
         ee:d0:ee:50:a8:5e:a2:6b:34:9a:8b:48:62:79:3f:20:69:08:
         21:2f:75:45:c1:9c:53:fc:87:93:bf:15:89:7b:dc:d5:da:cf:
         2e:ea:26:59:ae:eb:14:ad:ec:c8:0c:db:a2:93:06:09:2a:43:
         9f:c9:44:e9:84:4d:21:ab:ed:97:da:40:c0:2a:cd:ce:a6:51:
         99:8b:7d:37:ff:86:a5:09:b3:bf:56:91:8c:bf:63:4f:c9:ce:
         ae:d9:10:08:0c:ec:53:70:b7:5e:3d:2f:b5:ec:5e:af:a9:cd:
         49:54:70:be:9d:62:5f:07:a5:24:e5:24:20:6f:ee:b3:df:16:
         ee:36:b1:5f:fc:5e:85:3b:a6:99:d7:7a:03:d7:7f:e8:be:39:
         3d:7c:e9:8c:11:69:86:9d:82:05:30:fe:4a:76:9c:d0:74:36:
         d1:02:36:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:20 2026 by rpki-client