Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/2CF4FE9462A511F1B1DDADBBCE1D38B0.roa
File:                     2CF4FE9462A511F1B1DDADBBCE1D38B0.roa (raw, json)
Hash identifier:          GqJucNYDpIuYnpt/MQEVvwSpSmQVeT3e1+hg4TnCJVk=
Subject key identifier:   BA:F6:F7:17:2E:09:7B:21:D9:EE:5B:4E:14:A0:08:1D:15:12:E1:9D
Certificate issuer:       /CN=F365C604AF/serialNumber=83035995DE18C9D6AD4BCBB9CD95A1504D9FCA1F
Certificate serial:       0693
Authority key identifier: 83:03:59:95:DE:18:C9:D6:AD:4B:CB:B9:CD:95:A1:50:4D:9F:CA:1F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gwNZld4YydatS8u5zZWhUE2fyh8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/2CF4FE9462A511F1B1DDADBBCE1D38B0.roa
Signing time:             Sun 07 Jun 2026 19:14:59 +0000
ROA not before:           Sun 07 Jun 2026 19:14:55 +0000
ROA not after:            Sun 01 Jun 2036 19:14:55 +0000
asID:                     328826
IP address blocks:        102.218.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gwNZld4YydatS8u5zZWhUE2fyh8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683 (0x693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C604AF, serialNumber=83035995DE18C9D6AD4BCBB9CD95A1504D9FCA1F
        Validity
            Not Before: Jun  7 19:14:55 2026 GMT
            Not After : Jun  1 19:14:55 2036 GMT
        Subject: CN=6a25c333-6245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:25:05:f8:22:6b:09:6d:c7:f5:f2:07:8a:
                    5b:c9:42:cf:3b:ec:35:d1:39:0e:74:d2:d6:1c:96:
                    d0:7b:19:d4:af:7e:8f:4e:a5:e4:b3:ec:26:6b:40:
                    a3:f8:49:2b:3e:0a:37:58:49:18:1d:8c:31:f5:61:
                    1c:12:f3:b4:fd:77:7a:e9:4d:e5:db:b7:52:e4:1d:
                    7c:6b:e1:53:b7:3d:c1:a1:1b:aa:47:10:b6:6d:77:
                    07:c9:7f:39:39:9d:8a:90:dc:ca:63:bc:f8:20:4b:
                    f2:ba:20:47:6d:32:ae:1b:1b:7b:82:f0:de:cf:f9:
                    d8:ee:2e:ca:9e:d8:cf:d4:41:09:d2:a7:b8:5f:2d:
                    39:5e:3a:3c:43:8b:0e:10:cf:a8:2e:dd:3a:ed:71:
                    ac:20:c6:2b:76:9f:cf:fa:15:6c:50:45:23:6f:b8:
                    9d:21:b4:10:4b:e8:63:d2:d9:51:0a:7c:d0:fc:58:
                    e2:34:93:7f:48:d8:c4:ec:87:fb:00:42:79:9c:0b:
                    e0:6d:48:90:52:45:bd:a4:b0:ea:06:a4:2e:fc:22:
                    72:f8:f5:c8:30:c7:75:85:5a:46:1f:b3:25:0b:a7:
                    7a:95:d2:d0:82:ac:9f:0b:9b:db:f6:ba:a0:da:df:
                    c0:a4:a5:88:9f:76:a3:8c:ea:f1:cf:18:7c:02:af:
                    7e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F6:F7:17:2E:09:7B:21:D9:EE:5B:4E:14:A0:08:1D:15:12:E1:9D
            X509v3 Authority Key Identifier:
                keyid:83:03:59:95:DE:18:C9:D6:AD:4B:CB:B9:CD:95:A1:50:4D:9F:CA:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gwNZld4YydatS8u5zZWhUE2fyh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/2CF4FE9462A511F1B1DDADBBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:ac:4d:60:5a:5f:05:c4:ed:15:05:42:7b:cb:39:c7:c2:3f:
         59:bb:4d:1b:2a:e1:20:73:fd:7f:50:b9:3d:21:77:0c:a1:0a:
         30:52:7e:94:28:7c:7f:92:5a:34:43:32:db:2a:20:65:1a:4d:
         c6:ca:b2:a7:8a:a9:dc:fe:53:4c:4a:92:06:41:4c:1e:63:fd:
         a2:5b:20:2e:cf:80:a1:51:ab:8d:f4:81:59:76:3b:d4:57:14:
         4c:30:0a:75:7e:d3:23:a9:ed:a5:9a:87:fa:79:76:72:d1:b6:
         92:5e:26:4e:0f:3b:ff:f0:81:ab:ca:de:f9:a1:84:11:02:4a:
         8f:18:b2:c4:57:d3:a4:7a:c6:00:b0:8d:25:d0:d6:30:77:e9:
         1c:31:f0:ee:af:31:52:d7:dd:e6:d7:9b:ab:e1:a4:2b:ac:25:
         03:21:34:a0:f0:d2:e8:d9:f7:d2:cf:c4:78:b0:e1:b0:2b:7e:
         83:f7:72:74:8f:2b:84:9f:9f:d8:1b:53:fb:4d:2c:3d:90:20:
         65:81:a4:7a:0b:3c:60:e5:eb:ca:8b:2c:a0:a1:12:fa:24:91:
         3c:21:22:87:80:b0:ac:cc:17:f8:de:f8:3f:33:07:be:5e:6b:
         31:a5:73:76:61:ea:87:f6:27:b9:d8:59:5d:60:92:3c:1a:fc:
         69:fd:bd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:16 2026 by rpki-client