Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366351B/4665A9F0ACA011EDAF100DF7F1222468/72A49418897E11F18F9076DFCE1D38B0.roa
File:                     72A49418897E11F18F9076DFCE1D38B0.roa (raw, json)
Hash identifier:          DnFwFVGfVbhoP5OjTIE9+Xf/kGvz1ZkUUhqE/2HrYkk=
Subject key identifier:   56:9D:DF:46:A8:90:E8:E2:C6:98:2D:C4:AC:B6:06:CF:B3:DB:47:76
Certificate issuer:       /CN=F366351BAF/serialNumber=6789A254726D031E59B46B61B4ACAA851BFA2DDF
Certificate serial:       0510
Authority key identifier: 67:89:A2:54:72:6D:03:1E:59:B4:6B:61:B4:AC:AA:85:1B:FA:2D:DF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366351B/4665A9F0ACA011EDAF100DF7F1222468/72A49418897E11F18F9076DFCE1D38B0.roa
Signing time:             Mon 27 Jul 2026 05:46:01 +0000
ROA not before:           Mon 27 Jul 2026 05:45:57 +0000
ROA not after:            Mon 14 Feb 2033 05:45:57 +0000
asID:                     329208
IP address blocks:        102.214.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366351B/4665A9F0ACA011EDAF100DF7F1222468/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366351B/4665A9F0ACA011EDAF100DF7F1222468/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 03:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1296 (0x510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366351BAF, serialNumber=6789A254726D031E59B46B61B4ACAA851BFA2DDF
        Validity
            Not Before: Jul 27 05:45:57 2026 GMT
            Not After : Feb 14 05:45:57 2033 GMT
        Subject: CN=6a66f099-9a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:38:3f:52:5f:b9:a4:d2:84:68:22:ce:c4:
                    f6:bd:d1:ec:fe:f1:3d:f9:1c:ac:71:14:b1:f7:0a:
                    96:29:11:6a:32:7a:7c:70:67:26:00:a8:a5:61:0c:
                    20:4b:c7:47:a4:48:5e:54:a3:eb:1b:39:e3:4f:c5:
                    e3:a8:2c:ca:d1:fd:22:d0:bc:37:41:ee:f2:80:70:
                    ae:ba:b2:9a:c2:52:cb:da:bf:4d:b2:94:2f:f5:9d:
                    14:5d:6d:36:13:78:d8:9b:8e:22:7e:c6:f6:47:e1:
                    57:19:65:a7:e2:f9:3f:2d:ba:41:d5:37:03:cb:d3:
                    d8:ca:15:f3:dc:19:7a:c3:ec:77:60:d2:07:d2:9a:
                    3c:63:dc:d8:6c:6a:e6:c5:8f:4b:21:0c:7a:f1:e0:
                    7c:e9:01:0a:61:8d:c9:7d:9f:cf:b9:06:66:31:82:
                    ec:56:a7:fe:f9:0b:2e:2b:f8:fb:9d:21:00:59:43:
                    a2:d2:d6:c9:10:b7:58:9d:2a:3c:88:67:e4:c7:3d:
                    5b:00:7c:3f:86:70:a6:1b:b6:42:12:39:ef:0f:7a:
                    99:ec:d4:6f:ea:c1:23:6f:a4:92:e9:4b:99:e7:4e:
                    59:1b:20:12:80:81:34:70:92:bc:e9:30:d2:90:50:
                    29:1f:c0:e9:f6:0b:f0:c8:3e:de:83:28:10:39:98:
                    85:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9D:DF:46:A8:90:E8:E2:C6:98:2D:C4:AC:B6:06:CF:B3:DB:47:76
            X509v3 Authority Key Identifier:
                keyid:67:89:A2:54:72:6D:03:1E:59:B4:6B:61:B4:AC:AA:85:1B:FA:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366351B/4665A9F0ACA011EDAF100DF7F1222468/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Z4miVHJtAx5ZtGthtKyqhRv6Ld8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366351B/4665A9F0ACA011EDAF100DF7F1222468/72A49418897E11F18F9076DFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:bf:9f:9a:1b:ec:a9:66:89:48:1a:69:d8:c2:a8:e7:74:5d:
         81:82:54:7d:6a:95:f4:b9:d6:8a:16:55:06:ed:4b:b4:76:34:
         55:fd:76:71:44:8c:e3:ed:b4:7b:b0:71:1a:3c:4c:1c:81:9a:
         ea:83:05:56:f2:37:76:61:da:c4:d4:b3:45:f7:49:94:79:0f:
         aa:53:01:e7:7f:54:8c:a3:1e:46:8a:66:b1:18:34:95:ec:b0:
         e1:5d:f3:4a:97:fc:eb:e9:36:0e:60:4b:bd:e9:3a:af:0e:55:
         ca:fb:62:08:57:93:df:b1:d4:5c:d0:14:16:c0:3f:4d:9f:6d:
         4d:d0:d9:7a:38:6c:86:b2:be:be:b2:69:a0:90:a4:e9:55:52:
         5a:85:ca:cf:9e:dc:5e:27:06:bf:b5:da:fa:7f:8f:47:8a:16:
         72:e2:d8:c6:a7:6a:00:89:bf:c2:84:82:11:23:19:fa:b8:f3:
         fc:39:29:04:c6:31:4a:c8:e0:56:fc:fb:2f:92:e8:21:ab:c8:
         12:1e:75:3e:e7:44:e6:bf:a9:97:37:f1:6b:50:6f:6e:f5:69:
         a4:28:83:69:3b:1f:16:bf:9b:0a:c4:21:ce:e4:8e:38:8d:92:
         80:8b:59:75:35:61:0a:7c:2f:9d:1c:9f:43:15:50:d3:26:fd:
         36:a4:14:fb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBRAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjM1MUJBRjExMC8GA1UEBRMoNjc4OUEyNTQ3MjZEMDMxRTU5QjQ2QjYxQjRBQ0FB
ODUxQkZBMkRERjAeFw0yNjA3MjcwNTQ1NTdaFw0zMzAyMTQwNTQ1NTdaMBgxFjAU
BgNVBAMTDTZhNjZmMDk5LTlhNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKhzg/Ul+5pNKEaCLOxPa90ez+8T35HKxxFLH3CpYpEWoyenxwZyYAqKVh
DCBLx0ekSF5Uo+sbOeNPxeOoLMrR/SLQvDdB7vKAcK66sprCUsvav02ylC/1nRRd
bTYTeNibjiJ+xvZH4VcZZafi+T8tukHVNwPL09jKFfPcGXrD7Hdg0gfSmjxj3Nhs
aubFj0shDHrx4HzpAQphjcl9n8+5BmYxguxWp/75Cy4r+PudIQBZQ6LS1skQt1id
KjyIZ+THPVsAfD+GcKYbtkISOe8Pepns1G/qwSNvpJLpS5nnTlkbIBKAgTRwkrzp
MNKQUCkfwOn2C/DIPt6DKBA5mIVNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUVp3f
RqiQ6OLGmC3ErLYGz7PbR3YwHwYDVR0jBBgwFoAUZ4miVHJtAx5ZtGthtKyqhRv6
Ld8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYzNTFCLzQ2NjVBOUYwQUNBMDExRURBRjEwMERGN0YxMjIyNDY4L1o0bWlW
SEp0QXg1WnRHdGh0S3lxaFJ2NkxkOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1o0bWlWSEp0QXg1WnRHdGh0S3lxaFJ2NkxkOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjYzNTFCLzQ2NjVBOUYwQUNBMDExRURBRjEwMERGN0Yx
MjIyNDY4LzcyQTQ5NDE4ODk3RTExRjE4RjkwNzZERkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm1gwwDQYJKoZIhvcNAQEL
BQADggEBAA6/n5ob7KlmiUgaadjCqOd0XYGCVH1qlfS51ooWVQbtS7R2NFX9dnFE
jOPttHuwcRo8TByBmuqDBVbyN3Zh2sTUs0X3SZR5D6pTAed/VIyjHkaKZrEYNJXs
sOFd80qX/OvpNg5gS73pOq8OVcr7YghXk9+x1FzQFBbAP02fbU3Q2Xo4bIayvr6y
aaCQpOlVUlqFys+e3F4nBr+12vp/j0eKFnLi2ManagCJv8KEghEjGfq48/w5KQTG
MUrI4Fb8+y+S6CGryBIedT7nROa/qZc38WtQb271aaQog2k7Hxa/mwrEIc7kjjiN
koCLWXU1YQp8L50cn0MVUNMm/TakFPs=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:14:04 2026 by rpki-client