Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/ECB283EE631511F1968E11F4CE1D38B0.roa
File:                     ECB283EE631511F1968E11F4CE1D38B0.roa (raw, json)
Hash identifier:          M66cvljk7MqT6rvHLu5/GRhR+vMMPadhLBH1blrJ+r8=
Subject key identifier:   49:C4:1A:77:90:0C:D9:9B:98:BF:23:2E:61:8B:01:04:45:8E:19:93
Certificate issuer:       /CN=F366A61AAF/serialNumber=31813322C9B9A2BAFD7C7AF5CE0F4FF874D9CDA1
Certificate serial:       02E1
Authority key identifier: 31:81:33:22:C9:B9:A2:BA:FD:7C:7A:F5:CE:0F:4F:F8:74:D9:CD:A1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MYEzIsm5orr9fHr1zg9P-HTZzaE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/ECB283EE631511F1968E11F4CE1D38B0.roa
Signing time:             Mon 08 Jun 2026 08:42:04 +0000
ROA not before:           Mon 08 Jun 2026 08:42:00 +0000
ROA not after:            Wed 31 Dec 2036 08:42:00 +0000
asID:                     328943
IP address blocks:        102.207.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MYEzIsm5orr9fHr1zg9P-HTZzaE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 737 (0x2e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A61AAF, serialNumber=31813322C9B9A2BAFD7C7AF5CE0F4FF874D9CDA1
        Validity
            Not Before: Jun  8 08:42:00 2026 GMT
            Not After : Dec 31 08:42:00 2036 GMT
        Subject: CN=6a26805c-b2de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b7:b4:f6:0f:82:4b:8e:b3:95:ea:8b:b2:92:
                    ed:db:df:8a:ac:0c:8b:81:75:f9:db:c6:ea:b0:ba:
                    53:96:49:51:a3:b4:47:bb:4d:25:02:e2:ed:9b:1a:
                    db:df:81:16:1d:aa:f1:02:05:19:05:73:85:b2:63:
                    1d:12:59:da:dc:55:28:88:b1:0a:d3:b5:33:2e:31:
                    1d:8e:d2:aa:bc:7f:5c:86:57:fc:89:89:83:64:b9:
                    de:3b:71:e8:3b:f0:04:9a:5d:40:e5:71:03:1a:88:
                    f8:b6:fa:02:78:24:9c:e3:5b:df:4c:74:26:81:5b:
                    2d:84:7d:37:55:0a:bb:a9:e9:56:91:18:a7:ae:2f:
                    91:fe:c6:05:68:21:8a:8c:43:15:cb:b5:dc:69:64:
                    f6:12:0e:fd:d0:73:74:bd:af:0f:82:85:9e:ba:c4:
                    a2:8e:41:4e:95:ba:36:73:1a:49:4f:9c:0b:88:fb:
                    33:86:02:96:d8:a8:46:11:b7:d8:74:f1:21:ac:e4:
                    1d:57:d1:35:80:3b:d6:f9:8b:e6:79:a8:e9:c0:2e:
                    ce:0e:f7:96:5e:de:a6:46:9a:93:ea:b8:fd:d1:d7:
                    d2:2c:83:a3:87:e1:72:96:88:8d:b5:2a:91:f6:f1:
                    30:43:fd:4f:8e:0d:2f:0e:1a:d9:be:05:c2:99:f1:
                    c2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C4:1A:77:90:0C:D9:9B:98:BF:23:2E:61:8B:01:04:45:8E:19:93
            X509v3 Authority Key Identifier:
                keyid:31:81:33:22:C9:B9:A2:BA:FD:7C:7A:F5:CE:0F:4F:F8:74:D9:CD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MYEzIsm5orr9fHr1zg9P-HTZzaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/ECB283EE631511F1968E11F4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.207.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:55:b3:60:36:52:55:c3:44:91:f2:d1:24:7a:71:91:b3:f4:
         93:e1:76:bb:0d:42:93:89:64:2d:50:eb:f3:a3:69:aa:85:7e:
         3f:fb:1d:c6:9d:57:c2:f4:9c:62:df:be:56:ee:2f:2e:41:00:
         5b:83:15:13:08:b4:f1:32:64:98:ee:f2:6c:dd:96:40:22:96:
         6f:ab:6a:3d:d3:55:1b:f9:a0:ea:69:e1:22:f5:32:58:e5:74:
         74:a4:be:2b:0d:d2:b7:f8:b9:dc:0a:76:08:da:37:01:a1:88:
         80:4d:e8:92:1a:76:16:ea:38:6f:29:57:e4:47:8f:ee:74:69:
         bd:91:68:02:a4:6a:01:42:0f:7c:45:6d:4a:28:55:aa:21:6c:
         ba:b5:c5:45:6a:e2:06:7f:04:63:df:33:ce:5d:7e:66:ed:a0:
         69:f2:d2:a2:5e:53:26:f8:45:cb:24:9a:92:75:cc:cf:53:18:
         9c:3c:4d:df:41:60:e0:96:9d:72:46:9e:70:07:38:53:01:6e:
         42:0d:af:ec:c4:1e:b9:8b:12:0b:94:6c:56:60:58:10:70:1e:
         a4:7f:81:52:00:c4:9b:73:7b:1a:2b:32:dd:8c:e8:47:b9:1f:
         ee:c8:59:9b:73:51:ae:2e:c6:1c:5b:88:e9:a1:43:c9:ea:a2:
         1b:eb:a7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:03:01 2026 by rpki-client