Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/50EE860C89D411F1BC8148E0CE1D38B0.roa
File:                     50EE860C89D411F1BC8148E0CE1D38B0.roa (raw, json)
Hash identifier:          BNEjT+IAIoFe9htz0QXTgR9t7EbvGjjHJq8r7GRqrIg=
Subject key identifier:   89:D4:9A:10:3C:CD:C2:C1:D4:D3:D2:F9:E7:04:44:33:72:B7:C1:57
Certificate issuer:       /CN=F36746EBAF/serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
Certificate serial:       06C1
Authority key identifier: 2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/50EE860C89D411F1BC8148E0CE1D38B0.roa
Signing time:             Mon 27 Jul 2026 16:00:41 +0000
ROA not before:           Mon 27 Jul 2026 16:00:37 +0000
ROA not after:            Wed 31 Dec 2031 16:00:37 +0000
asID:                     328978
IP address blocks:        102.219.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 Jul 2026 00:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1729 (0x6c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36746EBAF, serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
        Validity
            Not Before: Jul 27 16:00:37 2026 GMT
            Not After : Dec 31 16:00:37 2031 GMT
        Subject: CN=6a6780a9-c50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:dc:01:73:4c:43:d9:f3:a2:6f:78:e5:0d:
                    19:85:61:ff:35:5e:d0:d7:9e:ee:95:45:7d:64:00:
                    33:fc:04:68:88:da:99:aa:b5:2f:c4:75:c3:b1:c4:
                    83:1e:15:15:a0:7e:25:9b:a3:b5:ba:7f:c8:87:f5:
                    97:a0:d3:6f:6a:c3:43:13:f4:ae:b1:b1:67:ab:85:
                    2c:50:52:82:3f:83:a6:b3:ba:ba:e4:a4:47:af:3d:
                    db:59:23:45:75:73:cc:63:29:57:68:e2:a6:26:2f:
                    2d:67:3a:e0:cd:ec:9c:de:ed:3e:09:18:25:61:84:
                    79:d5:5a:52:25:e4:27:a3:91:9c:5b:16:e5:21:72:
                    8a:c3:71:44:e3:77:e0:aa:85:a2:b0:4b:68:4f:81:
                    b2:2b:0b:05:4e:93:6b:23:a6:22:57:22:07:17:ee:
                    f9:52:9a:4f:44:66:3f:08:4c:70:8a:1d:22:3b:1d:
                    d9:3b:02:9b:d0:aa:e7:b0:ad:be:d1:5a:8e:a3:eb:
                    06:e2:32:82:71:d3:aa:7c:ec:27:0f:d6:86:f8:65:
                    19:65:5d:09:2f:44:5e:15:c4:37:6f:38:96:af:c9:
                    a0:a4:e8:8c:1c:e2:5e:33:d7:d4:84:4b:47:85:19:
                    36:1b:78:aa:1d:4b:18:18:82:d7:c1:ab:04:af:b0:
                    83:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D4:9A:10:3C:CD:C2:C1:D4:D3:D2:F9:E7:04:44:33:72:B7:C1:57
            X509v3 Authority Key Identifier:
                keyid:2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/50EE860C89D411F1BC8148E0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:91:e0:a2:4a:9e:cb:ba:19:7d:70:67:5d:9e:e8:79:a1:ea:
         12:b1:3f:67:0b:39:ae:75:53:c3:b5:16:33:9f:40:0c:01:df:
         dc:96:8f:63:7c:0c:10:1d:be:57:76:e7:7d:9a:fd:2e:4d:83:
         ba:02:0f:63:b7:76:39:2e:e4:d3:bc:36:a6:87:d2:47:64:42:
         8b:38:5b:d4:e0:55:da:dd:f9:f2:4c:93:6d:a3:45:6e:da:b7:
         92:ad:87:10:7c:d5:db:5c:f6:80:da:c6:67:47:21:a4:21:f4:
         97:41:a2:e6:8d:c5:20:1e:e8:36:a6:d6:bb:aa:7d:26:e0:7d:
         96:ec:ad:72:99:c7:82:28:6b:2c:06:85:c5:60:42:7f:a3:7b:
         b8:cb:5b:e3:f2:83:14:60:84:41:1d:42:02:88:d8:08:5d:10:
         b0:32:c6:40:0b:13:fc:59:d7:22:c2:83:21:d9:67:8b:8c:e7:
         fb:19:44:04:b5:97:9c:f2:74:dd:ba:6a:f6:d4:26:8f:88:04:
         30:bd:e0:f9:de:7b:c1:98:b9:39:0b:e9:82:20:7c:04:70:f0:
         b0:4d:62:88:cc:f3:8d:8c:50:f9:3b:00:4f:61:69:6b:d3:1a:
         f5:7b:6d:1f:82:5e:44:b0:28:c9:2f:25:35:87:be:3c:53:9f:
         89:68:82:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:08:50 2026 by rpki-client